Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3d5ffc-43db-326e-8e5a-740d673538a9.roa
File:                     9c3d5ffc-43db-326e-8e5a-740d673538a9.roa (raw, json)
Hash identifier:          QMTbs1d6nRSq9zLy+O7/AolD5qYbg28FYRIJ+DTz8/0=
Subject key identifier:   02:72:F6:C5:1A:00:A7:27:BA:95:73:5B:53:13:2E:1D:67:9B:0E:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFD90409CD7BD8FD3DCE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3d5ffc-43db-326e-8e5a-740d673538a9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        50.216.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:d9:04:09:cd:7b:d8:fd:3d:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e70f04ae-d863-4c81-a4a4-25322e0b3349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:bb:2a:15:a5:c4:32:e1:80:ae:2b:d9:38:
                    d2:f3:ad:92:de:55:85:dc:db:8e:d5:81:29:be:43:
                    d9:5e:e6:ec:e1:b6:85:34:d8:51:d2:d2:45:be:fc:
                    e9:04:0e:e1:4e:7e:af:e2:8b:93:ab:8d:33:42:aa:
                    79:ac:22:3f:de:d8:68:6d:31:9f:b4:4f:20:cb:cb:
                    dd:99:e7:35:8c:f6:18:51:51:06:dc:d3:0c:09:99:
                    a4:78:c2:45:89:81:ab:5a:ce:01:66:53:c2:87:d5:
                    f5:d7:98:80:ed:6a:1f:76:6c:97:81:a2:d6:bb:5f:
                    7f:0d:fd:ca:a0:aa:6a:ec:9a:ab:86:d5:b7:f3:8b:
                    7c:01:32:e1:61:ed:f2:28:12:d6:a7:6f:88:e8:17:
                    18:0f:62:76:95:c5:8d:04:1f:3a:3f:f2:b3:62:3e:
                    1d:c4:bd:d0:f6:97:2e:2d:7a:f8:17:9f:01:7f:06:
                    6d:89:c2:30:5e:c2:43:1d:70:f0:4b:5a:59:82:be:
                    23:cf:21:ae:33:72:4e:6f:3d:0a:65:12:75:98:e0:
                    e1:49:c3:a3:fe:ed:6e:cb:85:4d:38:86:36:2e:f3:
                    26:49:ef:c7:22:0f:01:5a:ca:8c:eb:41:bd:06:a0:
                    47:f6:bb:0c:0c:10:bf:a0:96:d0:e5:cf:56:90:46:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:F6:C5:1A:00:A7:27:BA:95:73:5B:53:13:2E:1D:67:9B:0E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3d5ffc-43db-326e-8e5a-740d673538a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.216.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:f4:ed:e5:b5:f8:25:9b:01:90:08:40:78:a3:87:30:c0:
         c9:78:80:0e:d5:36:0b:94:88:1e:a1:e7:fd:9c:b1:d9:fc:d0:
         78:37:c0:d1:e7:54:10:9a:d9:8c:d4:03:75:2a:7f:95:ce:70:
         8d:14:f2:03:cb:99:5e:b3:dd:1d:2a:e7:26:e7:70:96:74:9a:
         a4:35:81:a7:bb:6d:f1:3a:42:8b:6e:52:6b:50:a0:c0:06:89:
         68:63:17:63:66:19:f8:06:2f:bc:cd:f9:45:dd:48:ea:37:b7:
         c3:05:13:3d:9c:14:67:e8:0f:91:11:83:20:b9:15:db:62:a8:
         5a:b7:08:03:c2:1a:0e:41:90:39:f0:c7:7b:c1:db:b4:e1:2d:
         47:9e:95:97:93:c0:fe:4a:43:fc:a4:2e:ae:65:b7:cb:dc:3e:
         2b:1f:95:34:f2:90:c1:ca:55:2b:fd:08:7e:90:65:25:77:64:
         a3:96:06:15:7e:0e:f2:ea:3c:ce:9d:fb:01:3a:b0:ab:98:b3:
         97:0d:bf:4a:0b:c7:b6:1d:43:ee:d4:b3:38:2c:94:a1:70:45:
         44:74:01:ce:33:c1:c8:d3:76:e9:fe:0a:8f:70:aa:b0:ba:b4:
         b8:16:87:58:69:81:84:b6:20:ae:12:6b:72:d1:d1:da:ed:28:
         71:00:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:20 2024 by rpki-client on console-fra.rpki-client.org