Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a50a7bac-b509-35ab-acba-b9f21959f4ab.roa
File:                     a50a7bac-b509-35ab-acba-b9f21959f4ab.roa (raw, json)
Hash identifier:          cSpULi0Ubadx5irMAQDLxEkJHR9p2ohYo0sPZjPF2Zg=
Subject key identifier:   50:0E:98:E3:F0:7E:65:14:A4:FA:74:17:8D:67:02:1E:19:18:2A:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428C6FD181B6AE97E07A380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a50a7bac-b509-35ab-acba-b9f21959f4ab.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     33656
IP address blocks:        67.162.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:c6:fd:18:1b:6a:e9:7e:07:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=d7f69322-c1b4-46c7-b711-254b3d2053df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fe:6e:7c:b3:fe:58:9e:cc:2c:2e:04:6c:af:
                    1b:21:03:88:b1:7d:3b:03:b9:35:02:97:cd:e8:88:
                    ea:ed:1a:55:c7:e9:a4:19:98:98:62:fc:0d:50:52:
                    4c:95:90:71:dc:17:fc:13:6a:a6:5c:2d:59:67:36:
                    ab:e2:44:07:7f:e4:b1:c3:5e:b8:c9:fc:58:19:23:
                    cf:86:1f:45:d2:30:5f:a7:0d:f6:43:e0:82:ec:08:
                    47:95:8e:09:45:8b:f6:f1:2f:b7:de:2b:08:53:c0:
                    1f:8c:83:38:d2:81:43:c2:6d:7d:aa:ec:98:7b:b2:
                    97:7f:d6:c9:4f:64:45:ab:0e:44:a2:8b:61:3b:6b:
                    5f:f9:51:43:e2:37:c0:7d:0a:9c:7c:b1:44:81:34:
                    99:57:a5:6d:43:e0:fc:ac:67:6d:47:27:7a:c2:c9:
                    7b:a2:cf:da:fe:16:ab:7c:52:91:1b:88:fd:0a:86:
                    52:81:78:15:ac:fe:bc:46:49:45:8c:65:3f:2c:a6:
                    8d:61:ed:b8:cb:1a:bc:87:48:7f:cd:c3:9d:0f:7c:
                    99:86:11:58:be:e6:69:31:e2:28:00:09:c7:29:ce:
                    3e:3c:5b:33:b5:e1:1e:74:2e:ac:55:39:b0:09:25:
                    2e:94:7d:f1:d1:09:09:19:6e:7b:22:0c:49:ae:9b:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:98:E3:F0:7E:65:14:A4:FA:74:17:8D:67:02:1E:19:18:2A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a50a7bac-b509-35ab-acba-b9f21959f4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.162.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:35:96:3e:c3:56:a1:aa:61:dd:2a:e4:6d:e7:d7:b4:e9:93:
         a0:c6:06:73:68:62:62:8d:2e:4f:d2:09:19:15:5d:8b:1b:b9:
         3b:b4:99:61:97:ab:28:bf:e5:ec:99:81:15:1b:ac:5c:ae:2f:
         55:83:78:53:c8:fa:a0:0a:c9:a7:87:00:87:75:94:b0:26:60:
         3b:e5:9d:17:2b:5e:2d:5a:d8:74:bf:4e:60:18:fb:36:ce:b5:
         33:29:36:8d:d0:7d:63:ba:27:ba:d7:cc:df:ea:80:3b:dd:b8:
         60:4d:a3:49:c5:59:69:ee:5b:17:00:d1:20:77:b0:2e:07:a8:
         4b:40:28:98:b3:6a:20:84:a4:1f:64:58:2d:03:1c:34:71:c9:
         49:d6:a6:af:e1:2a:27:96:9f:76:ab:bf:90:c9:6a:c7:cb:7f:
         6f:28:7f:b6:a4:e1:f8:a3:80:1f:a2:19:29:89:a1:ff:81:51:
         9e:09:6d:ce:75:0c:a9:ab:eb:bb:14:72:0f:8e:f2:24:16:fa:
         01:0d:8a:68:d6:ec:0d:32:d5:eb:0e:84:90:ce:4a:87:dc:8b:
         ce:ed:f6:ee:7a:c3:44:99:c3:18:bb:4e:7c:15:3b:dd:c1:67:
         f6:5b:26:a9:32:62:64:2c:1a:6b:86:68:53:c6:8c:86:92:5d:
         52:5b:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:23 2024 by rpki-client on console-ams.rpki-client.org