Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa
File:                     d5ab2c96-78de-378d-9c1c-314f4d271aec.roa (raw, json)
Hash identifier:          jYv2M2YKtKfs1+tzvnfOpwuO2HgoHDnUQsEhl2fzLOo=
Subject key identifier:   79:FF:A6:86:51:AF:6E:74:88:F6:EF:DD:90:3E:B4:37:A2:A7:25:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CB82F4C65FF66607CC180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        50.220.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:b8:2f:4c:65:ff:66:60:7c:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=20c61d42-33bd-4559-a810-cd0b2a2e9fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:d3:7c:ae:f0:ff:f0:7c:2f:08:88:f3:43:
                    1b:74:8a:a8:96:66:f4:80:b5:66:54:6c:2e:b9:db:
                    99:fa:3e:21:16:4e:64:dc:d6:d6:eb:77:1c:8e:dc:
                    2b:67:cb:20:85:91:24:e7:cd:43:af:c9:1c:61:83:
                    5b:bb:25:39:1d:a2:3e:b9:ee:e7:5a:bb:b3:7b:9d:
                    b9:e6:3f:0e:62:fc:34:0d:aa:dd:3d:b2:d9:cc:35:
                    b8:b9:7d:8a:e6:a3:b1:58:51:69:8a:9e:e8:2e:6f:
                    6a:aa:9d:b3:ed:db:9f:a2:1c:58:20:af:1f:fd:3e:
                    97:b8:ee:09:7a:94:1c:3b:72:43:6f:7f:94:43:a7:
                    41:4c:0b:47:00:de:14:00:9c:84:39:6d:ca:57:21:
                    69:4d:ae:f4:f2:4d:68:15:d9:5b:1a:ee:eb:68:7c:
                    f8:e8:49:0a:7f:55:77:80:3a:b9:f4:ca:7d:e7:8a:
                    e9:5f:d3:76:f8:0d:d2:0f:83:6e:7c:a6:0b:68:8a:
                    f1:eb:83:a8:15:d2:cb:91:55:2a:f4:7d:3d:f2:a6:
                    ee:e9:fd:d9:b3:e8:18:70:2c:3b:ec:fa:ab:6f:3e:
                    0b:8a:9a:9e:dc:29:38:c8:12:e0:26:0e:72:6c:ed:
                    69:d8:08:6e:56:f0:79:9b:0c:ec:5d:d5:56:39:37:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FF:A6:86:51:AF:6E:74:88:F6:EF:DD:90:3E:B4:37:A2:A7:25:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:31:af:75:24:ca:af:64:a7:53:1e:79:d8:a1:f0:79:eb:4c:
         bc:32:47:3a:7b:75:47:5d:f7:c9:4c:10:a2:e1:22:5a:f0:d4:
         b2:bf:e8:af:f9:c3:9b:f2:53:d4:61:18:57:66:5e:8a:f4:32:
         15:18:ee:d9:cd:25:03:01:21:b4:a1:e6:c8:c3:5c:0c:68:a4:
         0f:e0:71:2f:9f:6f:6d:37:2f:20:73:96:7e:20:03:dd:e1:6d:
         c6:cd:92:e6:c5:03:86:f1:da:e1:7f:21:65:64:55:79:12:1c:
         f8:dd:df:a5:5c:25:2e:a5:e5:f5:08:8c:4d:63:38:60:2f:f8:
         60:e7:54:7d:9e:99:6b:89:5a:6e:48:77:71:74:f7:be:63:1e:
         3e:47:2b:ae:53:ec:4b:89:21:b3:81:3f:e0:55:ab:c5:1f:1e:
         06:13:88:49:70:94:ed:76:8a:2c:d4:13:30:bf:ab:9f:d9:fa:
         66:09:b3:bb:50:48:4e:3e:1b:88:93:7f:20:f4:7b:c5:a0:58:
         57:9e:e3:b8:bb:c3:df:cc:5e:c6:ad:00:a7:12:a1:4b:76:c4:
         9e:aa:4c:e6:2d:cc:ea:8a:3d:4a:f5:1b:04:94:2f:cd:e6:a7:
         9c:4d:d4:21:4e:58:1e:d5:24:2f:63:cb:be:dd:46:ef:13:a9:
         89:75:54:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebLgvTGX/ZmB8wYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjBjNjFkNDItMzNiZC00NTU5LWE4MTAtY2QwYjJhMmU5ZmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosbTfK7w//B8LwiI80MbdIqolmb0gLVmVGwu
uduZ+j4hFk5k3NbW63ccjtwrZ8sghZEk581Dr8kcYYNbuyU5HaI+ue7nWruze525
5j8OYvw0DardPbLZzDW4uX2K5qOxWFFpip7oLm9qqp2z7dufohxYIK8f/T6XuO4J
epQcO3JDb3+UQ6dBTAtHAN4UAJyEOW3KVyFpTa708k1oFdlbGu7raHz46EkKf1V3
gDq59Mp954rpX9N2+A3SD4NufKYLaIrx64OoFdLLkVUq9H098qbu6f3Zs+gYcCw7
7Pqrbz4Lipqe3Ck4yBLgJg5ybO1p2AhuVvB5mwzsXdVWOTcMUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHn/poZRr250iPbv3ZA+tDeipyXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVhYjJjOTYtNzhkZS0z
NzhkLTljMWMtMzE0ZjRkMjcxYWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtyXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgxr3Ukyq9kp1Meedih8HnrTLwyRzp7dUdd98lMEKLhIlrw1LK/6K/5
w5vyU9RhGFdmXor0MhUY7tnNJQMBIbSh5sjDXAxopA/gcS+fb203LyBzln4gA93h
bcbNkubFA4bx2uF/IWVkVXkSHPjd36VcJS6l5fUIjE1jOGAv+GDnVH2emWuJWm5I
d3F0975jHj5HK65T7EuJIbOBP+BVq8UfHgYTiElwlO12iizUEzC/q5/Z+mYJs7tQ
SE4+G4iTfyD0e8WgWFee47i7w9/MXsatAKcSoUt2xJ6qTOYtzOqKPUr1GwSUL83m
p5xN1CFOWB7VJC9jy77dRu8TqYl1VK0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:30 2025 by rpki-client