Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c636da8c-6ac6-3fbf-bcb0-52c11b682817.roa
File:                     c636da8c-6ac6-3fbf-bcb0-52c11b682817.roa (raw, json)
Hash identifier:          V6Q+kjxr3lwaEq8vHQg7uKWAR1vrx+wPTVUmWuVFIfQ=
Subject key identifier:   F2:E2:BF:AE:F2:63:7B:C4:63:17:EE:B8:ED:DA:4A:18:1B:B4:55:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD48F8C3A0BDBABF3D5120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c636da8c-6ac6-3fbf-bcb0-52c11b682817.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33661
IP address blocks:        50.226.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:48:f8:c3:a0:bd:ba:bf:3d:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=288c1bd8-4642-4b75-9b7c-1843dd1b1b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:e9:f5:8a:91:2a:9e:97:dc:70:8f:74:30:
                    0a:14:80:82:9b:61:0d:5f:e5:89:c7:b8:84:fe:99:
                    6d:e5:45:a8:e0:4d:2f:2a:74:00:42:90:09:4a:4d:
                    89:c7:51:7f:6c:0a:d0:87:ab:f5:42:03:ad:b9:06:
                    1a:d4:35:4e:a2:c7:d8:ab:52:55:68:70:03:79:47:
                    d5:4f:a9:a4:47:c3:3a:5b:b9:fa:af:b9:38:26:18:
                    b4:ec:02:35:1f:7d:7a:2c:b5:bb:48:73:ba:54:25:
                    64:55:9e:35:6c:31:9f:0a:ac:a8:25:c3:f2:fc:5c:
                    e8:77:fc:19:a8:21:68:f1:5c:3a:85:55:02:13:4b:
                    67:40:d9:68:84:75:3c:2d:23:7e:d6:d8:f1:ac:0e:
                    36:90:77:43:ef:a5:f1:36:f6:0d:6d:db:d1:58:f7:
                    42:96:a9:d6:5d:48:d2:c6:a6:ec:81:71:20:30:3c:
                    6c:39:2b:ae:19:1d:7a:8d:2f:5b:94:85:b6:54:b7:
                    3d:c8:4f:66:88:af:95:de:83:3b:f5:fe:73:30:54:
                    9a:5a:7a:72:a0:34:9c:3c:cb:7d:42:0b:33:8e:cf:
                    f9:bd:89:c5:00:13:25:3f:39:d5:a8:93:2b:f6:88:
                    ee:ca:57:6b:b8:6a:8a:78:52:41:cb:35:af:90:e0:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:BF:AE:F2:63:7B:C4:63:17:EE:B8:ED:DA:4A:18:1B:B4:55:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c636da8c-6ac6-3fbf-bcb0-52c11b682817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.226.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:f1:65:12:39:46:04:23:fb:a4:f9:c8:26:aa:a8:2f:ff:
         8a:20:9b:43:99:42:1d:0c:ac:86:b9:57:3a:be:4e:ea:4c:4e:
         5c:3c:6b:0f:5a:79:1a:b6:26:30:d3:3a:c4:85:9c:08:2e:7f:
         5b:9d:97:dc:34:67:e7:8f:05:c1:ee:73:94:99:05:cf:26:9c:
         b5:9f:e3:62:b2:15:bf:5b:14:ae:76:95:76:3b:e0:fd:42:2f:
         96:98:a8:39:6b:46:e6:6f:0f:32:89:90:84:ed:17:1d:03:05:
         7d:d7:8a:54:56:b0:1c:a4:3a:59:be:e2:5e:ff:b9:37:e4:c4:
         75:3d:dc:7c:73:d8:39:49:be:2c:32:b2:da:1c:15:a0:73:e8:
         92:ff:8d:74:a3:3f:da:ac:95:5a:ea:8f:ce:a0:bf:55:3f:56:
         a3:e5:eb:02:6a:39:06:61:a7:e9:b2:02:89:9f:95:b5:73:06:
         6e:7c:6e:ef:3f:24:5c:ea:53:ab:4e:63:e5:bb:d2:f5:59:e2:
         77:19:bb:0a:99:d4:f7:4e:c4:bb:a5:44:e4:14:9d:24:73:4f:
         c3:bb:8b:32:73:96:90:3f:1e:94:53:f6:86:f6:31:67:2e:15:
         8b:c0:76:60:4f:3a:4a:68:23:8e:fd:1a:d8:58:ad:82:3c:36:
         f1:8c:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:57 2024 by rpki-client on console-fra.rpki-client.org