Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b659dfac-dd3a-3295-af78-2dd0936feef4.roa
File:                     b659dfac-dd3a-3295-af78-2dd0936feef4.roa (raw, json)
Hash identifier:          /LdOQELsoIpJWnvrWi2AfKKXF5VTVx3mCq4/J6C0rvk=
Subject key identifier:   A7:D7:76:B7:D1:1B:55:1C:0F:A7:34:08:6D:2D:E7:66:08:DE:66:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7D67F7FE2F3B10D27CD28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b659dfac-dd3a-3295-af78-2dd0936feef4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        50.174.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:d6:7f:7f:e2:f3:b1:0d:27:cd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=61af5a46-50f2-45f6-910f-3e99ef7a598f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:d1:be:74:b2:e3:55:79:ca:f4:55:bc:f9:
                    5e:12:72:ed:8e:51:97:52:5e:cd:48:3c:d7:99:ad:
                    dd:e6:f1:d0:b1:e3:f5:e2:33:14:dc:1b:ef:cf:db:
                    10:9a:91:3b:39:a1:83:2f:a3:38:5b:3a:35:2d:bc:
                    35:d3:26:f3:c9:96:db:93:39:0b:ff:e0:24:32:68:
                    f0:00:8c:5a:fe:fd:2e:2c:9e:b7:23:c7:28:ec:47:
                    25:29:25:71:29:80:75:06:2c:e5:27:07:22:ed:44:
                    b6:ad:67:ac:e2:48:44:c8:3f:53:85:f9:df:6b:e7:
                    68:01:a0:a4:dd:2f:c1:50:a7:f6:41:e8:73:a7:b2:
                    cf:da:1d:18:0c:99:45:24:94:9a:b0:af:9c:11:a4:
                    80:f2:1a:3f:a0:57:17:db:38:ec:c8:1e:38:4b:24:
                    0c:f8:ed:67:b2:d1:e9:f7:84:0f:b5:48:ab:de:cf:
                    39:5a:2b:67:74:05:3d:5f:f6:b8:01:91:02:1a:85:
                    87:0b:fc:cc:45:7a:b6:e0:2f:31:3d:41:ec:3b:5c:
                    f7:8e:bd:52:76:ac:88:62:26:9b:23:4e:be:46:79:
                    95:96:d7:2a:60:35:7c:43:62:c0:a3:c6:40:1a:9d:
                    19:14:11:c1:a5:f4:65:d3:fd:5d:fa:2d:c9:f8:45:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:76:B7:D1:1B:55:1C:0F:A7:34:08:6D:2D:E7:66:08:DE:66:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b659dfac-dd3a-3295-af78-2dd0936feef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.174.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:11:ae:1c:fd:d9:f3:19:bd:8d:61:eb:ce:b9:67:be:07:32:
         49:99:17:82:02:c5:3f:21:09:ec:da:d8:f5:86:f5:41:df:d9:
         d6:73:ff:28:fe:c2:60:5f:13:ae:0b:4d:41:21:91:cc:ac:d8:
         8c:91:99:14:eb:51:5d:f6:0f:d6:db:c9:28:a9:32:41:d0:fd:
         17:17:5e:c7:fa:ca:86:a3:05:b2:9f:b7:8b:a4:6a:ce:26:eb:
         07:c7:84:6f:c2:15:3e:c4:5a:69:f0:3e:3d:1c:b8:cc:97:75:
         e9:aa:8a:df:79:80:62:bd:e2:1c:3b:33:5a:71:be:c2:ad:57:
         72:5d:55:cc:12:0c:3a:fa:bb:e6:b7:5f:11:23:95:ef:2e:09:
         3f:69:2d:43:15:a5:f4:3a:23:f3:1e:68:13:4b:db:d0:4e:54:
         de:b6:36:28:1b:9b:c0:a7:99:17:61:b6:1f:a3:c3:e9:cb:3c:
         0a:51:ba:c4:97:73:da:54:83:e2:42:b7:a4:7b:00:6f:02:d5:
         33:60:6e:bd:07:69:5c:74:a4:ea:b0:62:05:54:8e:66:b6:b2:
         1c:71:1f:dd:16:86:56:ef:f8:e3:21:80:f5:e6:a1:1f:b4:2b:
         43:8c:0c:2d:ee:33:a6:e2:3a:37:71:fd:aa:1b:d0:48:d2:fa:
         c9:de:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:33:05 2024 by rpki-client on console-fra.rpki-client.org