Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa
File:                     8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa (raw, json)
Hash identifier:          RNXn3+E0x8oiLPkzGDKyps1QKrdDeMIWxbir3JvDjJ0=
Subject key identifier:   D9:22:36:05:1B:DC:25:9E:CE:43:00:62:B7:D7:C9:A8:27:BF:5C:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA1E2D9538FD78E7E35B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        50.223.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:1e:2d:95:38:fd:78:e7:e3:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ca6b3d66-1eff-43d0-a46e-8e1b6f89d1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:04:8a:04:4e:1a:d1:63:9a:eb:68:26:aa:30:
                    0b:47:5f:67:47:70:81:a8:75:5f:d9:b0:5e:74:b1:
                    60:61:1b:02:18:ef:56:19:ee:f0:5e:02:01:67:4a:
                    f6:96:d3:23:c3:1a:97:5f:7f:f7:da:c5:60:be:d4:
                    d4:80:a5:2f:1a:1f:bc:a4:aa:08:6b:ad:41:42:14:
                    8e:b2:0e:9c:14:d3:17:98:8b:6f:cb:8d:c9:37:61:
                    51:5e:05:4f:49:7e:c1:53:0d:df:d2:07:50:18:a2:
                    13:38:c6:87:1f:1d:56:ca:f3:91:43:3f:3d:b1:a7:
                    15:b7:e7:18:06:cf:bb:d1:ec:b2:36:d9:7c:7d:4b:
                    5b:29:b1:79:34:20:13:65:a9:c0:cc:8e:4f:af:e9:
                    75:36:ce:6e:f7:88:a6:84:3a:00:5c:fa:2b:b0:46:
                    3d:7c:7f:d8:5d:75:fd:81:32:f1:25:88:fb:8e:3e:
                    74:4c:05:05:81:9d:ac:96:19:35:6e:fa:76:a8:f4:
                    08:b8:b4:0a:91:74:39:e4:69:72:4a:41:82:39:94:
                    83:07:90:0e:54:a2:e9:8e:06:a1:8d:a9:3e:97:ac:
                    1a:82:14:42:7a:b8:1e:de:07:4d:76:de:78:12:31:
                    71:18:27:34:85:67:b9:25:05:2d:2c:8c:4b:aa:cc:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:22:36:05:1B:DC:25:9E:CE:43:00:62:B7:D7:C9:A8:27:BF:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.223.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:00:51:42:d1:9e:6a:9f:93:78:10:61:58:5e:7d:9a:ea:a4:
         73:ce:95:d6:35:ad:ba:ba:38:ce:79:21:74:fb:7e:99:04:b7:
         0b:db:1b:7a:94:30:e8:43:53:b2:37:60:53:7b:40:40:c9:e3:
         8d:8b:21:a6:45:e6:f1:f3:29:82:dc:ca:ad:5c:fb:c3:66:e7:
         b3:4a:4f:e1:51:74:f7:1f:64:3c:8b:cd:a7:f2:37:7c:35:00:
         d3:de:35:da:8e:36:89:5d:02:3b:5c:10:70:e4:8b:72:e3:61:
         bb:b5:92:a6:bc:a0:3a:8a:33:44:7f:f7:e8:0c:81:56:fe:4d:
         0b:bd:eb:eb:d5:d9:1b:ff:f1:d8:a4:ca:ac:cd:59:18:cb:59:
         76:d0:a4:90:b9:74:6e:e2:43:bb:11:39:ba:71:60:3c:a5:5b:
         d8:40:e2:bf:25:67:93:54:d8:b6:04:b5:5e:10:b7:3f:5d:04:
         8e:40:54:2b:03:f0:e0:7d:c0:db:8c:b7:7d:3f:a7:bd:c8:68:
         bc:09:41:e8:1b:18:87:f3:6d:9d:89:24:64:e1:1f:20:04:94:
         a4:75:93:1c:03:65:cf:41:62:44:91:a0:9d:58:00:88:b6:e1:
         e0:a2:b5:33:66:79:35:0d:cf:d3:4d:db:1d:ac:b0:6c:6f:63:
         dd:ee:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:25 2024 by rpki-client on console-ams.rpki-client.org