Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c66440a6-5e04-3dfa-9176-c9f0637e9d13.roa
File:                     c66440a6-5e04-3dfa-9176-c9f0637e9d13.roa (raw, json)
Hash identifier:          k3iR2X+nRi9KcDHzWxHtJ9FBqbAdel9FJbYIgPSyqNM=
Subject key identifier:   92:DC:07:2F:C3:81:28:05:37:65:B7:76:3F:F3:06:B3:B7:4C:7A:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBB9898BCF8C80B634FBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c66440a6-5e04-3dfa-9176-c9f0637e9d13.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        50.202.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:b9:89:8b:cf:8c:80:b6:34:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8b57f64f-43d0-4da9-b2c7-af58e25298e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:e7:51:9a:51:c5:0b:b0:16:06:63:56:c7:
                    85:e5:94:d5:c1:5f:40:b8:cc:ec:7b:a5:b5:51:11:
                    2a:15:2a:4b:85:90:bf:53:56:f0:4c:d5:a5:58:63:
                    da:79:e6:ce:17:f3:fb:21:90:06:4f:cb:3d:eb:c1:
                    c7:a0:8b:d8:fa:a3:9e:e3:8e:de:ed:54:4c:fd:51:
                    17:d9:cc:63:ac:8a:e7:43:28:c4:74:82:bb:d6:76:
                    6f:86:d3:91:77:0d:bd:b5:67:39:3e:74:c1:01:c0:
                    f8:65:81:f2:7e:c2:b2:ae:5c:4e:74:42:08:99:f2:
                    e5:96:36:94:d6:8b:09:92:22:42:2d:cc:47:f1:40:
                    5c:de:81:38:ab:ff:08:88:a0:e4:94:0e:5e:55:e3:
                    e0:cb:34:b4:0e:a9:ee:eb:24:22:6f:db:88:f4:76:
                    f3:8c:01:8f:eb:50:44:24:7a:6d:1e:fc:3d:ce:b9:
                    2b:de:eb:ee:56:d9:d4:90:b7:40:f9:ca:62:15:ae:
                    b5:3c:6d:df:34:83:a5:d2:4a:4f:db:c9:75:26:31:
                    a4:08:96:0c:14:5f:71:ce:86:e5:e7:83:3e:2f:e1:
                    9e:2f:ab:b7:22:ea:ab:b6:d9:e9:ff:7a:47:e6:7a:
                    88:fd:43:50:cb:d8:94:32:b1:7d:9e:3d:15:19:09:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:07:2F:C3:81:28:05:37:65:B7:76:3F:F3:06:B3:B7:4C:7A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c66440a6-5e04-3dfa-9176-c9f0637e9d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:dd:21:b7:a9:50:bf:24:98:aa:ef:e6:0a:fe:43:d7:05:8e:
         25:90:74:d5:6f:04:05:57:5a:12:c2:6a:19:52:98:76:85:dc:
         a9:a8:a2:de:c0:a4:8e:20:d4:f7:8c:1a:ed:36:55:81:5f:d3:
         81:6c:85:1b:e0:8c:f8:7a:cc:c5:70:7a:8e:91:4a:15:6b:b4:
         cb:ca:84:20:a5:75:e5:b0:8e:f4:0e:78:d7:7c:f6:65:7d:3d:
         ba:b9:57:85:b4:a9:f3:fc:21:aa:92:b4:68:26:b1:7b:c6:e2:
         b8:d1:3b:36:44:fe:5a:21:10:af:8a:9f:a8:73:af:67:19:f4:
         76:65:a2:4c:19:51:b5:16:55:7e:73:73:6f:44:90:8c:8b:db:
         a9:65:bf:ed:33:74:a9:e8:71:64:cc:29:56:a5:c3:46:23:3a:
         4e:a5:93:60:64:5f:09:91:40:38:b9:53:ef:1e:8c:77:73:48:
         dc:92:88:35:64:4c:1f:97:11:31:1d:6b:60:14:dc:27:a4:81:
         5c:cc:61:41:a5:11:dc:38:13:3e:99:c2:6c:cb:92:a3:8a:0e:
         43:53:2b:f2:be:81:09:5b:b5:83:ae:81:3c:a3:dd:85:e9:7f:
         6d:8d:2e:74:76:90:f9:9d:10:31:88:48:36:2e:b2:78:78:30:
         56:59:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:31:14 2024 by rpki-client on console-fra.rpki-client.org