Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c94a494-578f-3185-8dbb-f3b1aebe7a72.roa
File:                     8c94a494-578f-3185-8dbb-f3b1aebe7a72.roa (raw, json)
Hash identifier:          iJ5X5wjBO3+05Btbtt3crvxpgEDJ2pmE/lMR0bDuEf0=
Subject key identifier:   5F:71:BB:6F:EA:9D:0C:7C:5D:DE:15:C7:BE:AE:B8:04:03:1A:64:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF80758B0476124DB97DD70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c94a494-578f-3185-8dbb-f3b1aebe7a72.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        50.217.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:07:58:b0:47:61:24:db:97:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=21d9889f-c3ba-43c3-a4bb-b5af3815c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:5a:46:0e:44:64:06:fd:d9:76:af:2a:8d:
                    4b:0e:2a:cc:6c:9c:c8:e3:29:5c:fc:f7:8c:b9:61:
                    61:b5:79:ac:cd:ed:43:82:fb:fc:7a:42:cc:b2:dc:
                    a7:ab:54:4d:cc:62:69:68:37:dc:d2:43:5c:31:8f:
                    bf:e9:c2:4f:11:4d:88:42:f7:a0:fd:df:13:a6:fd:
                    cb:2f:cb:93:0d:84:e3:88:4b:da:c8:82:a2:1e:19:
                    7d:af:ed:eb:8e:9c:c0:f6:64:d1:7e:7b:0d:6d:87:
                    fd:b7:34:8a:ea:d2:dd:e6:35:f8:1c:b6:71:7a:a5:
                    c1:2a:28:57:5a:84:1f:ff:75:f2:ae:7d:3c:4a:69:
                    a7:1a:f5:62:ba:2d:f5:8b:f9:c1:50:3e:38:66:07:
                    c7:96:15:f1:30:aa:13:4d:80:09:73:dc:8c:40:e5:
                    fe:bb:0b:a7:91:10:3f:af:4f:76:4f:33:2c:be:70:
                    8c:64:ae:70:80:73:97:b4:b0:7f:87:f2:26:fc:97:
                    a8:28:a4:01:b6:88:c5:89:74:b6:62:d4:90:03:fe:
                    26:e7:d5:55:d0:c1:79:29:ed:fd:89:46:eb:fa:a7:
                    1c:93:00:7c:6b:93:92:d0:b1:65:12:30:fa:de:18:
                    c1:ee:18:fa:a3:d7:4d:c3:a0:a8:85:a5:39:56:ec:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:BB:6F:EA:9D:0C:7C:5D:DE:15:C7:BE:AE:B8:04:03:1A:64:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c94a494-578f-3185-8dbb-f3b1aebe7a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.217.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:43:40:4e:1e:56:4b:47:b3:43:91:da:04:8a:aa:e8:b5:f3:
         58:c4:f4:e2:02:1f:21:d6:e0:0f:b7:c3:73:7b:a4:8a:d0:eb:
         0c:d6:00:c9:41:d4:d6:42:ec:8f:34:71:78:cb:21:5b:af:5b:
         3a:e4:3f:f2:9b:9f:4b:36:02:2f:15:d9:3f:88:a2:1a:b7:69:
         fc:28:49:97:85:52:b9:15:a6:9e:6c:79:0b:db:5f:ae:e5:5d:
         f8:92:ce:41:9e:aa:42:a7:7c:a3:1b:99:c6:70:e1:e1:63:94:
         df:74:21:ce:9d:d6:3a:b8:2e:da:db:98:1d:50:11:90:33:54:
         51:d5:c7:48:fc:f6:8a:28:dd:3d:e8:2a:3a:f3:ca:21:01:ad:
         b0:e3:d7:a1:ad:02:51:e7:eb:98:14:43:ca:c0:d5:0a:e8:5a:
         d4:52:0e:b4:47:59:5e:21:5b:2b:b4:96:81:6c:5c:82:d3:0a:
         0c:31:a1:c0:20:a2:12:1f:1a:2c:36:d3:b3:45:84:a7:00:1a:
         2e:96:10:ba:7b:dc:1b:58:41:11:8a:f0:ed:2f:15:fb:0e:2c:
         3a:e1:fc:22:4f:6f:75:b4:ff:57:8b:96:53:e6:a3:3a:0a:a5:
         51:82:dd:2a:64:98:d5:8c:4e:a9:70:9a:39:ad:43:89:7e:e1:
         60:b4:4a:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++AdYsEdhJNuX3XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjFkOTg4OWYtYzNiYS00M2MzLWE0YmItYjVhZjM4MTVjOTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYxaRg5EZAb92XavKo1LDirMbJzI4ylc/PeM
uWFhtXmsze1Dgvv8ekLMstynq1RNzGJpaDfc0kNcMY+/6cJPEU2IQveg/d8Tpv3L
L8uTDYTjiEvayIKiHhl9r+3rjpzA9mTRfnsNbYf9tzSK6tLd5jX4HLZxeqXBKihX
WoQf/3Xyrn08SmmnGvViui31i/nBUD44ZgfHlhXxMKoTTYAJc9yMQOX+uwunkRA/
r092TzMsvnCMZK5wgHOXtLB/h/Im/JeoKKQBtojFiXS2YtSQA/4m59VV0MF5Ke39
iUbr+qcckwB8a5OS0LFlEjD63hjB7hj6o9dNw6CohaU5VuzcqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9xu2/qnQx8Xd4Vx76uuAQDGmSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM5NGE0OTQtNTc4Zi0z
MTg1LThkYmItZjNiMWFlYmU3YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtkXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRDQE4eVktHs0OR2gSKqui181jE9OICHyHW4A+3w3N7pIrQ6wzWAMlB
1NZC7I80cXjLIVuvWzrkP/Kbn0s2Ai8V2T+Iohq3afwoSZeFUrkVpp5seQvbX67l
XfiSzkGeqkKnfKMbmcZw4eFjlN90Ic6d1jq4LtrbmB1QEZAzVFHVx0j89ooo3T3o
KjrzyiEBrbDj16GtAlHn65gUQ8rA1QroWtRSDrRHWV4hWyu0loFsXILTCgwxocAg
ohIfGiw207NFhKcAGi6WELp73BtYQRGK8O0vFfsOLDrh/CJPb3W0/1eLllPmozoK
pVGC3SpkmNWMTqlwmjmtQ4l+4WC0Si8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:30 2024 by rpki-client on console-ams.rpki-client.org