Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eceafa2-84c0-3055-9456-78d62a5a4a32.roa
File:                     8eceafa2-84c0-3055-9456-78d62a5a4a32.roa (raw, json)
Hash identifier:          BDJ7CZ4LH735IIvEsUZp+326Q1pDCuZshbXBtzBWsNE=
Subject key identifier:   F3:67:76:4F:B9:7F:AC:4F:2E:F7:C1:57:01:4A:BE:7A:BB:61:2E:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC739DEA093C1132776560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eceafa2-84c0-3055-9456-78d62a5a4a32.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     399505
IP address blocks:        50.222.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:73:9d:ea:09:3c:11:32:77:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=5cb40e62-b496-45e1-9366-4af730255cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:f4:f1:c5:8a:fb:84:da:e5:bb:58:d9:a6:
                    aa:ec:60:55:86:c3:bf:c2:84:b2:c4:44:19:ea:37:
                    43:dd:2c:cb:94:5d:a5:52:f2:44:71:d0:be:46:dd:
                    fd:75:81:99:59:d2:8f:63:46:cf:ab:ff:9f:85:b5:
                    7d:9f:02:44:08:cb:c6:4d:d1:4f:72:96:c0:22:5b:
                    12:f3:80:c1:74:e1:b1:fb:87:92:9b:c6:1d:1f:7a:
                    bc:98:63:c9:c6:16:64:a5:9c:5e:f1:ca:61:96:bd:
                    33:2b:c8:b0:a7:7b:b1:9f:69:66:b2:6a:bf:d0:9d:
                    43:92:8e:cb:9e:1a:d7:04:c6:3f:28:31:38:dd:4a:
                    6b:7c:ba:3f:fb:21:9f:20:6b:1e:9a:0c:82:55:8b:
                    1c:c5:c8:e7:7e:0e:9f:7d:14:22:82:c6:bf:93:68:
                    38:56:89:3a:a4:22:e7:6c:dc:49:82:f5:2e:84:8a:
                    37:ee:76:8d:a3:44:2c:63:cb:0d:88:c0:7f:9d:e0:
                    6d:65:33:a2:3d:94:3f:1e:c7:c4:5b:9f:64:53:01:
                    46:67:ba:0a:ad:ea:ce:a4:a2:71:91:06:2d:d3:17:
                    8d:41:37:2e:7b:77:bb:fb:5e:e6:d9:60:98:60:a0:
                    d1:88:8b:3b:41:ff:cb:b6:9f:4e:01:c7:5b:78:74:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:76:4F:B9:7F:AC:4F:2E:F7:C1:57:01:4A:BE:7A:BB:61:2E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eceafa2-84c0-3055-9456-78d62a5a4a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.222.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0c:38:93:e4:1c:1d:e2:5b:11:cc:62:60:d4:8d:9d:c4:0f:
         a5:52:20:92:80:32:86:9c:a4:f2:d6:55:9b:90:32:ce:e0:80:
         82:1c:32:c8:d3:94:ad:4d:cc:fe:03:04:05:4b:84:8c:b3:00:
         cc:a6:c9:db:b4:65:11:2f:94:e7:a1:47:ce:a9:5d:e8:76:9a:
         05:6d:af:5e:47:5f:d5:c3:7c:0f:e4:4f:b9:c7:cc:4f:ce:cb:
         84:0b:ef:eb:5d:dc:fb:cd:6e:cf:90:67:33:0b:a0:cd:f9:99:
         d7:30:9c:e9:f1:39:15:84:11:c7:af:84:e6:30:44:0d:58:7f:
         7a:5f:66:40:bc:c1:de:8c:35:88:74:87:1f:6d:6d:89:9b:35:
         21:f7:38:2b:b7:af:55:36:ea:d1:8e:89:bf:10:26:60:e9:99:
         21:52:f9:3e:db:69:9d:8b:be:71:e3:f6:6c:f3:c2:f8:e4:21:
         6c:12:34:bb:f2:54:fb:ba:ce:e2:04:3c:f7:3f:0c:a0:8d:5e:
         b2:04:88:6d:b2:7f:ae:c6:66:57:19:4d:49:6c:10:d8:d7:f8:
         70:d3:c3:74:5d:d4:10:46:5d:de:3c:e4:6f:97:25:92:a4:ba:
         94:30:b6:57:ac:89:36:79:a2:dd:8f:34:94:31:f7:1b:dd:9a:
         c1:e1:84:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHOd6gk8ETJ3ZWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NWNiNDBlNjItYjQ5Ni00NWUxLTkzNjYtNGFmNzMwMjU1Y2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLD08cWK+4Ta5btY2aaq7GBVhsO/woSyxEQZ
6jdD3SzLlF2lUvJEcdC+Rt39dYGZWdKPY0bPq/+fhbV9nwJECMvGTdFPcpbAIlsS
84DBdOGx+4eSm8YdH3q8mGPJxhZkpZxe8cphlr0zK8iwp3uxn2lmsmq/0J1Dko7L
nhrXBMY/KDE43UprfLo/+yGfIGsemgyCVYscxcjnfg6ffRQigsa/k2g4Vok6pCLn
bNxJgvUuhIo37naNo0QsY8sNiMB/neBtZTOiPZQ/HsfEW59kUwFGZ7oKrerOpKJx
kQYt0xeNQTcue3e7+17m2WCYYKDRiIs7Qf/Ltp9OAcdbeHR6GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNndk+5f6xPLvfBVwFKvnq7YS52MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGVjZWFmYTItODRjMC0z
MDU1LTk0NTYtNzhkNjJhNWE0YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMt6uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALsMOJPkHB3iWxHMYmDUjZ3ED6VSIJKAMoacpPLWVZuQMs7ggIIcMsjT
lK1NzP4DBAVLhIyzAMymydu0ZREvlOehR86pXeh2mgVtr15HX9XDfA/kT7nHzE/O
y4QL7+td3PvNbs+QZzMLoM35mdcwnOnxORWEEcevhOYwRA1Yf3pfZkC8wd6MNYh0
hx9tbYmbNSH3OCu3r1U26tGOib8QJmDpmSFS+T7baZ2LvnHj9mzzwvjkIWwSNLvy
VPu6zuIEPPc/DKCNXrIEiG2yf67GZlcZTUlsENjX+HDTw3Rd1BBGXd485G+XJZKk
upQwtlesiTZ5ot2PNJQx9xvdmsHhhHA=
-----END CERTIFICATE-----
Generated at Wed May 1 22:58:42 2024 by rpki-client on console-ams.rpki-client.org