Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5dabe67-61ba-3c43-aaae-6fefe5e18051.roa
File:                     b5dabe67-61ba-3c43-aaae-6fefe5e18051.roa (raw, json)
Hash identifier:          afRJkTtnt4mX67hW0lhrQTiS8/OjzYJvbMeVbkiT1js=
Subject key identifier:   0D:6A:1E:93:29:79:E6:78:70:D0:69:34:E6:9E:25:50:99:45:63:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE4585EE42C887FCB66F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5dabe67-61ba-3c43-aaae-6fefe5e18051.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33490
IP address blocks:        50.235.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:45:85:ee:42:c8:87:fc:b6:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9d683a97-c2f6-42a0-bdb3-662f7622e76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:0a:d9:8a:c6:27:63:19:c3:38:45:5a:cf:
                    d2:ef:74:28:dd:48:59:87:91:05:30:41:01:24:43:
                    89:81:a5:5f:fc:c5:92:04:9c:79:37:9d:36:e0:ec:
                    30:e8:6d:09:87:57:0b:9b:7c:fe:9c:88:c6:3b:27:
                    3a:b6:6a:d2:f7:a7:02:02:3d:7c:7e:86:aa:cb:6d:
                    76:0b:a4:c6:6f:1a:a4:dc:d9:c4:31:ab:b3:1e:1b:
                    74:81:96:37:8e:ba:78:1d:a6:e4:05:5f:ea:db:c4:
                    3f:e7:a1:c5:d0:9d:b0:a3:dd:4f:e8:56:c1:d0:7e:
                    ee:ae:a2:af:ae:1b:70:17:a9:74:68:cc:2a:8a:1e:
                    e8:3a:d8:f6:c6:5c:17:26:d4:7c:54:3b:c6:3b:6d:
                    c4:60:03:c2:be:3e:ff:f4:cd:24:62:70:02:dd:4f:
                    b1:64:a5:a5:45:d8:ac:8b:37:73:1d:8a:7a:3b:dd:
                    69:e6:c7:b1:0f:60:a1:c8:6d:39:6d:6b:17:76:58:
                    52:d3:81:ea:ba:c6:4a:00:1b:6d:ca:27:4d:b0:b2:
                    e8:ce:e5:82:55:61:7e:b5:85:85:6a:1a:ba:9b:5e:
                    07:23:12:fb:87:66:3e:ec:03:04:10:a5:38:e2:aa:
                    04:ce:50:88:82:f2:4f:7d:a0:37:8d:d7:74:b7:0f:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:1E:93:29:79:E6:78:70:D0:69:34:E6:9E:25:50:99:45:63:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5dabe67-61ba-3c43-aaae-6fefe5e18051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.235.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:37:18:b2:66:b2:d2:78:a2:e6:c5:a6:58:da:25:de:76:82:
         41:1f:74:f0:71:19:c8:b3:e0:6b:d8:7f:b9:ac:d5:c2:70:bd:
         56:4d:62:55:bf:aa:00:b1:f4:61:08:55:cf:40:39:6d:ab:bf:
         17:1c:d5:ba:d8:32:36:c9:1f:5f:e0:b3:87:d7:6d:af:07:ad:
         d2:cf:3a:b6:84:82:e6:3b:26:6b:d9:c3:4d:b0:d1:c1:f1:0b:
         a6:a0:c2:c6:39:95:02:06:44:49:68:ea:44:ed:15:91:7f:8d:
         07:99:11:83:2d:88:11:0f:a2:1b:92:6b:38:c5:53:19:47:b6:
         10:b5:f9:47:93:85:a9:31:56:98:47:81:23:f1:f1:13:2c:a6:
         f9:8a:b2:9b:32:66:16:d9:54:c3:8f:cd:30:1d:7d:de:33:49:
         71:1f:4f:97:d1:5b:6b:e5:a7:e6:44:a4:97:df:79:be:f6:11:
         f5:ab:cb:e9:40:e0:79:5d:14:ea:ac:ec:93:43:94:e8:23:a7:
         6d:25:0b:bd:8d:28:a8:54:62:3d:5f:4f:d5:74:0b:69:6e:73:
         a8:e2:c1:72:54:5a:fc:a0:69:12:82:f4:33:a1:9c:39:f0:df:
         4b:88:c2:58:4a:e8:18:e4:d8:a0:75:8e:0b:ce:16:9e:39:a6:
         dc:85:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:56:32 2024 by rpki-client on console-ams.rpki-client.org