Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa
File:                     ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa (raw, json)
Hash identifier:          AzJibEKujwVIsOYwMHrFtgBh+ocTltH9JTUH7BKKrXI=
Subject key identifier:   84:E4:E2:36:8B:0C:ED:4C:04:5B:00:20:45:F4:24:35:38:FB:E3:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF92B5F22DE8467513DA19A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        50.229.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:2b:5f:22:de:84:67:51:3d:a1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=653391b7-57b8-4b2f-b46c-0d66e5cf17de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:ea:f1:3d:94:0e:f1:60:58:14:84:c1:b3:
                    df:f5:0a:78:1e:f4:4a:12:b5:16:5c:c1:77:b1:e2:
                    25:1f:c7:28:04:ea:47:44:63:af:84:f9:2c:9f:06:
                    fc:00:46:59:70:d1:f5:51:b4:cb:b9:18:c9:fc:28:
                    13:87:e4:8e:49:47:40:98:b0:c8:fc:91:42:3a:f4:
                    35:3a:c3:16:f2:ad:eb:be:73:d9:11:cf:6c:7f:6c:
                    6d:30:86:33:22:2c:8f:e9:aa:56:a6:58:eb:70:31:
                    ec:e3:f5:4e:ed:65:57:2c:d9:56:67:a1:28:9b:d6:
                    f2:cf:7a:cd:ef:c4:a2:f4:cc:2d:0b:77:3f:de:93:
                    58:c7:65:e4:9c:15:c3:bd:b6:2f:82:0d:d2:24:fd:
                    55:d2:f8:98:05:4f:b9:4c:0f:3f:b2:62:1b:c2:fe:
                    3f:22:7b:11:55:1b:43:d4:95:85:e6:aa:81:20:d0:
                    31:f3:ce:8a:1d:42:a5:ea:1a:6f:ca:ed:7d:8b:87:
                    0f:a2:ff:38:e4:56:f8:54:f9:78:90:4d:d6:50:b0:
                    b1:98:f0:b1:41:b7:1b:69:c8:b9:07:be:4f:25:fc:
                    3e:7c:81:d8:5f:7f:b7:2f:f5:91:41:42:f4:07:08:
                    65:cd:12:39:5b:31:d4:7b:38:a6:7d:69:d0:2f:b4:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:E2:36:8B:0C:ED:4C:04:5B:00:20:45:F4:24:35:38:FB:E3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.229.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:22:21:6a:37:3c:6a:76:c4:b7:36:b7:a7:dd:15:08:89:95:
         55:d2:b0:9c:ad:c3:d9:ef:9f:dd:db:50:88:9c:18:de:6e:5d:
         f0:79:76:22:eb:6c:9e:49:38:64:4e:eb:40:fa:c6:10:3d:b3:
         2a:da:d0:98:4e:36:23:55:9d:c1:70:36:1d:24:58:3a:19:22:
         3a:16:5e:ea:96:c4:9d:d5:ee:c5:a3:9c:c0:6d:8e:9a:0a:89:
         a0:07:83:1b:fe:94:1d:d0:3a:ac:25:9b:42:f9:42:47:65:a8:
         31:2f:ba:ef:ad:e4:9e:1f:69:f3:93:1a:a6:d7:83:e7:99:28:
         09:4b:69:ba:c1:08:11:99:5b:ad:61:6b:cc:f9:d7:ff:de:ee:
         70:80:f0:f2:39:bd:d3:c5:38:04:8d:4e:44:65:54:09:b0:14:
         cc:d7:c3:78:b5:cf:62:ed:e2:61:10:75:fb:81:f5:12:08:2b:
         e9:b0:de:7d:c5:af:89:f2:d0:f8:14:29:2b:49:6a:b6:36:83:
         c5:d6:c7:79:b5:1d:6b:b2:26:7c:cb:f2:ac:09:36:0b:28:8a:
         9a:c2:04:de:0a:ce:c8:0f:12:0b:66:3f:a6:ce:aa:72:78:ea:
         0f:f4:c6:e3:85:0e:f3:0c:b6:9d:b6:75:2f:66:ec:2b:fe:23:
         42:61:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:29:12 2024 by rpki-client on console-fra.rpki-client.org