Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa
File:                     9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa (raw, json)
Hash identifier:          X63Dnvnssm8OQB1T2V61+qm5r08UCIgcdZLs4RV9oCE=
Subject key identifier:   24:B1:9F:27:D4:0B:08:87:71:E4:E7:34:35:F1:50:05:16:BC:FB:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BDE3FAE5583116E2EAE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.50.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:de:3f:ae:55:83:11:6e:2e:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=50f2ae54-3e06-4787-a79a-2b7df1982851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:49:73:df:c0:d1:cd:64:5d:99:70:38:74:
                    81:54:4b:a6:6f:8b:18:57:64:be:7e:f7:37:3e:98:
                    0b:fb:ff:7a:eb:67:05:58:2f:6a:fe:18:f7:77:bc:
                    34:eb:93:e5:f1:40:4f:d1:e6:fb:c4:e5:13:36:ce:
                    34:4b:b2:fb:b6:7a:69:4c:a8:16:b5:08:ea:26:8c:
                    47:cc:e9:81:ce:84:52:4d:73:00:5f:b7:a7:ca:3c:
                    38:e7:8c:df:61:b9:c7:69:cc:9c:22:ce:01:c9:0f:
                    cf:4f:14:7d:86:81:21:35:b1:41:f3:39:a6:5f:e6:
                    0f:2a:4b:99:85:0d:e3:06:65:0d:71:0e:4c:ef:c3:
                    53:16:d0:be:10:77:a4:45:f7:62:a6:56:36:e3:21:
                    1c:67:6b:c3:88:1b:a5:26:4d:24:97:a3:27:45:88:
                    f1:94:7c:36:20:52:d5:21:9b:af:6c:42:52:4f:f9:
                    aa:d1:b2:51:76:8b:d3:8d:76:77:c3:d0:d7:10:e2:
                    40:8c:58:29:0a:c0:14:c7:38:65:90:7e:f9:4e:6e:
                    26:99:ec:98:82:48:39:83:40:b1:47:0c:61:29:a7:
                    49:ed:aa:3b:9e:0a:e8:b4:07:d0:57:f0:bf:84:e0:
                    d7:21:52:e9:60:69:8f:fc:4a:2d:89:cf:41:3f:19:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:9F:27:D4:0B:08:87:71:E4:E7:34:35:F1:50:05:16:BC:FB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:80:ce:75:46:9d:f2:50:7a:5b:a5:59:d9:9f:b1:0f:09:
         f2:f3:82:6f:50:2e:92:9e:fd:e1:22:43:83:0c:c8:54:b2:bc:
         37:d6:1e:00:7d:e8:9b:a4:a4:10:2a:04:04:db:8a:14:c3:9b:
         00:be:9a:94:95:a8:43:3f:5f:a6:a8:12:e6:d3:b9:a1:f4:b2:
         bb:01:0f:3e:af:ab:73:b4:f8:02:95:00:e8:66:3b:1a:ce:d0:
         73:3f:1c:b8:6b:3c:3a:65:89:09:6d:b0:ce:42:11:04:1e:ff:
         5d:79:1c:a2:c0:80:16:15:56:00:5e:01:19:29:19:bd:a0:57:
         f0:cf:b0:54:b6:6f:84:81:21:31:5e:22:af:fd:2e:f5:12:72:
         ec:ec:71:15:0c:29:b3:68:20:56:e1:da:2d:79:86:2d:41:cd:
         67:29:0b:b4:af:c0:b2:05:80:58:a8:c7:4b:ee:83:49:7b:ee:
         55:e1:db:59:b2:2a:2c:30:78:9f:6e:33:27:ce:4d:03:20:d8:
         70:cd:c6:49:c3:aa:84:91:32:ea:9b:8d:2e:33:84:c9:17:29:
         ec:bb:aa:a1:29:d9:91:a1:03:22:4e:08:48:41:d2:5a:ad:d3:
         6b:12:5a:74:5b:b7:2f:e4:2f:51:aa:be:27:2f:f5:c8:db:de:
         0c:fd:27:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm94/rlWDEW4urgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NTBmMmFlNTQtM2UwNi00Nzg3LWE3OWEtMmI3ZGYxOTgyODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6FJc9/A0c1kXZlwOHSBVEumb4sYV2S+fvc3
PpgL+/9662cFWC9q/hj3d7w065Pl8UBP0eb7xOUTNs40S7L7tnppTKgWtQjqJoxH
zOmBzoRSTXMAX7enyjw454zfYbnHacycIs4ByQ/PTxR9hoEhNbFB8zmmX+YPKkuZ
hQ3jBmUNcQ5M78NTFtC+EHekRfdiplY24yEcZ2vDiBulJk0kl6MnRYjxlHw2IFLV
IZuvbEJST/mq0bJRdovTjXZ3w9DXEOJAjFgpCsAUxzhlkH75Tm4mmeyYgkg5g0Cx
RwxhKadJ7ao7ngrotAfQV/C/hODXIVLpYGmP/Eotic9BPxmnbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSxnyfUCwiHceTnNDXxUAUWvPuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ4YjVmNTEtNDlhOS0z
MzU0LThhMDYtMzgzMDNmMWM1Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDKOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRcgM51Rp3yUHpbpVnZn7EPCfLzgm9QLpKe/eEiQ4MMyFSyvDfWHgB9
6JukpBAqBATbihTDmwC+mpSVqEM/X6aoEubTuaH0srsBDz6vq3O0+AKVAOhmOxrO
0HM/HLhrPDpliQltsM5CEQQe/115HKLAgBYVVgBeARkpGb2gV/DPsFS2b4SBITFe
Iq/9LvUScuzscRUMKbNoIFbh2i15hi1BzWcpC7SvwLIFgFiox0vug0l77lXh21my
KiwweJ9uMyfOTQMg2HDNxknDqoSRMuqbjS4zhMkXKey7qqEp2ZGhAyJOCEhB0lqt
02sSWnRbty/kL1Gqvicv9cjb3gz9JzI=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org