Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d584ed8-d8ba-398d-a0df-648ffafa312f.roa
File:                     9d584ed8-d8ba-398d-a0df-648ffafa312f.roa (raw, json)
Hash identifier:          zlO1BjnluC9dsMtb2kobwshxKiC10cuLeDQb68p7Qx8=
Subject key identifier:   67:49:3B:65:3C:26:25:85:EA:FE:85:7E:F1:C1:82:06:A1:AB:3D:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D4A97109DD01FEBFAA000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d584ed8-d8ba-398d-a0df-648ffafa312f.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     33654
IP address blocks:        50.240.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:4a:97:10:9d:d0:1f:eb:fa:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=7faa9929-b364-48cb-ace2-09b02cf18660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:dc:a9:de:3f:df:fd:a9:7b:d6:fb:f2:af:
                    64:46:20:94:a4:df:83:32:3c:6b:44:87:47:2f:a8:
                    45:45:67:63:0d:00:e3:ec:d9:2f:b7:e4:77:0e:23:
                    59:e3:44:e4:b3:a7:95:b4:e6:27:e8:0f:93:1f:b1:
                    8b:87:b1:a5:93:36:c2:f0:fd:ce:68:39:40:e0:b4:
                    2c:0d:bc:14:fa:64:b9:8c:80:dd:21:31:65:ea:a4:
                    10:c1:62:f3:7c:40:e4:49:28:65:06:c8:71:17:98:
                    34:31:1b:15:7e:0a:42:6a:36:5b:4a:02:8c:0c:f3:
                    b1:25:a7:72:07:2b:82:ca:47:e6:c1:72:a4:3f:15:
                    09:39:87:e6:87:32:00:7b:2e:d3:58:7f:59:c7:82:
                    9f:e3:85:96:d6:ea:a7:8c:19:ca:e3:81:da:22:11:
                    20:28:df:0e:f2:90:f9:9e:af:94:77:4d:91:d5:fb:
                    90:77:9e:81:fc:3d:fa:1e:43:93:fb:7b:d0:21:57:
                    e5:15:8b:7b:0c:81:13:b7:ad:23:a0:70:55:1c:2c:
                    d6:b4:f4:0c:12:1d:d9:ab:9d:7d:ba:de:22:db:6c:
                    b0:73:10:2b:fd:3a:19:80:3a:f1:69:99:be:ca:8f:
                    41:55:85:b9:11:6d:b5:2b:87:62:01:13:34:0a:bc:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:3B:65:3C:26:25:85:EA:FE:85:7E:F1:C1:82:06:A1:AB:3D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d584ed8-d8ba-398d-a0df-648ffafa312f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.240.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:76:cc:09:4b:9f:f0:d7:75:60:6a:f7:1b:56:41:23:0f:ac:
         6a:e3:a7:04:08:ee:34:1b:0d:40:b7:23:fe:8a:09:6e:f6:4a:
         84:19:dc:f0:1e:21:e4:b7:0b:66:9a:f5:54:75:e0:48:48:6c:
         07:18:81:20:b4:b7:58:2d:a9:ca:fa:56:75:8d:12:06:bd:84:
         7f:3c:20:80:0b:1d:94:a4:b6:05:cc:34:bf:5e:0d:f6:d5:00:
         8c:2e:c7:84:98:a2:6a:2e:5c:73:00:52:5a:d6:be:fd:17:64:
         2e:32:b9:b6:59:02:b2:07:27:10:f8:e0:ac:e0:93:1d:d6:c4:
         5a:74:f1:82:3e:5a:2c:f1:59:90:bf:dc:4e:a8:5b:12:92:78:
         ee:70:cf:19:16:51:54:26:33:a5:f3:4b:2e:18:f0:dd:60:1c:
         2a:20:2a:38:23:16:34:61:3e:10:9b:0c:cb:24:36:0a:e0:93:
         ac:5c:4f:eb:fa:15:64:1e:50:97:6d:eb:8c:94:dd:96:9d:9c:
         c7:33:47:a9:87:c9:8d:a9:b2:b4:59:47:e3:1e:2b:64:58:9e:
         d6:b7:5c:3b:75:b4:d8:2d:ac:b9:c9:18:5d:a7:20:07:ee:8b:
         7b:da:a9:65:61:17:5e:d6:f6:de:b0:b6:4c:3a:bc:5d:7b:f2:
         43:2f:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:02 2024 by rpki-client on console-ams.rpki-client.org