Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bad40b-edae-3508-bc51-d4b75f2f9ce6.roa
File:                     d4bad40b-edae-3508-bc51-d4b75f2f9ce6.roa (raw, json)
Hash identifier:          S2Qkj55s0MwjlnLeT34cTxJjltOjJK0OQOAGDQLKA/0=
Subject key identifier:   B6:A4:1F:AA:DE:50:05:FC:B6:88:8D:FB:AB:83:DB:03:4B:8A:76:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E34A71C93D4276BD2BA70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bad40b-edae-3508-bc51-d4b75f2f9ce6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     29891
IP address blocks:        50.236.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:34:a7:1c:93:d4:27:6b:d2:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=4ff9178d-cf7a-4ddb-89cb-2f855800acf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:4c:4b:fc:f3:29:51:a3:5f:94:b7:ab:0a:
                    b9:59:a4:f4:fb:58:70:68:24:2f:73:ab:c1:09:3f:
                    9d:9d:67:3a:e7:3d:fa:a4:13:42:52:7c:03:b6:d2:
                    3d:d6:d1:9b:cc:63:0a:de:79:0b:4b:4f:9d:f0:5c:
                    86:f4:fb:86:e8:0f:0b:d5:49:16:b6:52:d1:09:fc:
                    32:0b:2b:c7:2b:93:16:78:18:2e:f8:df:f3:bf:1e:
                    05:0f:7b:65:3b:61:6a:1d:aa:68:9c:aa:88:d5:fa:
                    e7:f4:42:e3:59:ff:ff:44:fb:67:86:b6:4a:23:9d:
                    7c:4a:71:4b:a8:49:8e:7d:5e:98:10:82:10:41:56:
                    2c:16:3a:47:25:92:59:8a:0d:8e:ec:7e:83:ba:3a:
                    2e:4a:98:8b:0f:11:ce:c8:9d:ab:8f:32:22:f5:8e:
                    70:c0:1c:46:40:f3:03:14:98:85:fb:b5:96:34:b1:
                    54:37:ea:c4:2a:62:55:97:77:e7:37:30:9d:a5:19:
                    5e:e7:15:2b:c5:12:59:2d:4c:d2:7e:09:8d:6d:75:
                    8a:15:46:a5:14:45:f7:f0:6b:86:75:b5:5c:c9:e7:
                    ea:c4:c9:3a:31:58:60:10:82:7a:98:6e:51:c6:fd:
                    55:53:01:b2:7a:be:97:0e:c4:fa:ba:cd:63:88:20:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A4:1F:AA:DE:50:05:FC:B6:88:8D:FB:AB:83:DB:03:4B:8A:76:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bad40b-edae-3508-bc51-d4b75f2f9ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.236.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:dd:04:2b:2d:b8:44:08:65:87:88:83:82:c9:d6:98:79:
         9f:b8:3b:a8:6d:93:40:2a:f9:76:8b:5b:a1:c4:95:aa:23:da:
         b2:77:e1:1b:8e:79:be:ee:35:40:a4:70:56:15:5e:32:70:b3:
         72:ed:80:8f:47:fc:66:ff:55:21:44:cd:a6:00:63:bc:37:2c:
         68:0a:5f:64:eb:9c:e5:0a:e5:bb:0e:0c:f4:f6:8c:13:ce:5c:
         5e:05:8a:cf:74:6a:73:69:8a:79:13:6c:df:46:7a:ca:81:e5:
         91:c8:ed:45:22:46:c9:35:d2:15:03:5a:22:bc:54:0c:35:5d:
         76:36:05:13:72:be:2f:7c:65:05:ef:27:eb:22:8d:34:d0:29:
         92:e7:d1:3f:74:7c:ed:d6:3a:02:2a:b3:fc:c1:ec:c0:a9:40:
         9e:b7:74:a7:e7:bb:99:e2:37:52:6c:83:4c:9a:a7:31:07:60:
         0c:97:68:4e:31:ca:b1:aa:d2:7d:3e:8d:b0:bb:06:2d:53:92:
         51:d9:09:32:bb:be:f1:bc:33:1e:02:f8:c5:88:5f:03:46:3d:
         ff:a7:0c:e5:a8:31:50:a9:71:a9:46:33:2b:62:de:72:f7:4f:
         ce:b4:ef:a6:77:86:b6:8d:a1:d5:ae:dd:08:c0:ab:57:50:4e:
         b7:8c:d0:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebjSnHJPUJ2vSunAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NGZmOTE3OGQtY2Y3YS00ZGRiLTg5Y2ItMmY4NTU4MDBhY2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+FMS/zzKVGjX5S3qwq5WaT0+1hwaCQvc6vB
CT+dnWc65z36pBNCUnwDttI91tGbzGMK3nkLS0+d8FyG9PuG6A8L1UkWtlLRCfwy
CyvHK5MWeBgu+N/zvx4FD3tlO2FqHaponKqI1frn9ELjWf//RPtnhrZKI518SnFL
qEmOfV6YEIIQQVYsFjpHJZJZig2O7H6DujouSpiLDxHOyJ2rjzIi9Y5wwBxGQPMD
FJiF+7WWNLFUN+rEKmJVl3fnNzCdpRle5xUrxRJZLUzSfgmNbXWKFUalFEX38GuG
dbVcyefqxMk6MVhgEIJ6mG5Rxv1VUwGyer6XDsT6us1jiCDkxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLakH6reUAX8toiN+6uD2wNLina/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRiYWQ0MGItZWRhZS0z
NTA4LWJjNTEtZDRiNzVmMmY5Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuxuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrs3QQrLbhECGWHiIOCydaYeZ+4O6htk0Aq+XaLW6HElaoj2rJ34RuO
eb7uNUCkcFYVXjJws3LtgI9H/Gb/VSFEzaYAY7w3LGgKX2TrnOUK5bsODPT2jBPO
XF4Fis90anNpinkTbN9GesqB5ZHI7UUiRsk10hUDWiK8VAw1XXY2BRNyvi98ZQXv
J+sijTTQKZLn0T90fO3WOgIqs/zB7MCpQJ63dKfnu5niN1Jsg0yapzEHYAyXaE4x
yrGq0n0+jbC7Bi1TklHZCTK7vvG8Mx4C+MWIXwNGPf+nDOWoMVCpcalGMyti3nL3
T86076Z3hraNodWu3QjAq1dQTreM0K8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:41:11 2025 by rpki-client