Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa
File:                     d5ab2c96-78de-378d-9c1c-314f4d271aec.roa (raw, json)
Hash identifier:          nrBb9KI2LgpIjm6v8uUqM53qwfJSYm9NVg1xWRkeSxU=
Subject key identifier:   9E:35:AE:AE:47:A1:6F:0C:4E:31:6A:D4:87:D9:B4:1F:A4:02:DF:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC51273D78AB4320E60700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        50.220.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:51:27:3d:78:ab:43:20:e6:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f2a27381-202d-4e48-8578-8d3236cbd9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:fe:50:ec:2f:7e:db:4b:bf:53:37:aa:04:
                    25:2b:ec:be:f8:03:79:36:f2:df:4a:3d:ea:6e:ea:
                    90:ba:24:58:2e:9a:c7:7d:ed:9f:a5:70:79:e5:a5:
                    5a:2a:9c:d0:30:77:6a:db:ed:55:6e:b7:35:65:c3:
                    2d:87:9e:8d:62:a2:28:b7:95:cf:20:aa:df:b7:c0:
                    b0:7a:f0:09:a4:88:37:07:95:75:d8:c9:ca:e5:51:
                    7c:16:8f:97:f4:7a:a6:ee:33:0d:09:e9:53:5a:e5:
                    8c:9d:7c:3c:ec:30:e0:ac:bb:51:41:07:1f:8e:94:
                    2f:d4:2a:4f:9c:71:30:e2:9e:a9:eb:32:21:7b:ed:
                    81:f1:a8:31:c4:0f:ca:00:2a:6a:3b:a9:83:e2:f9:
                    05:9b:30:40:ba:6a:76:9d:e9:ad:c8:84:13:1e:11:
                    39:6e:0a:d2:87:0a:31:68:37:83:62:71:6c:32:85:
                    fa:eb:05:65:1f:b1:f1:27:8d:18:71:ed:ce:3a:84:
                    ad:03:77:23:4a:5e:7b:64:27:69:0c:f5:fa:d8:ff:
                    be:de:5d:70:d3:88:36:27:15:0d:16:7c:df:c1:0d:
                    9c:c7:20:d0:30:df:a8:d5:1f:86:be:bf:19:41:8d:
                    08:ef:64:ff:d6:ae:f3:3c:9e:e2:92:90:e0:cf:a8:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:AE:AE:47:A1:6F:0C:4E:31:6A:D4:87:D9:B4:1F:A4:02:DF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab2c96-78de-378d-9c1c-314f4d271aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:90:23:71:f8:af:db:6d:57:fa:fd:ab:84:6d:7c:11:d3:2a:
         de:7c:76:b3:bd:11:7d:d3:c3:f8:6c:8a:d9:88:bf:fa:f4:0e:
         aa:35:f2:7e:ab:7c:5b:84:de:2d:0f:7f:3e:c8:43:17:47:eb:
         a9:a1:52:57:06:ee:d1:ca:75:48:02:4b:f4:8a:c5:e0:b2:dd:
         91:80:28:5f:68:4c:06:ef:1f:34:d8:c1:29:86:6b:af:d8:4a:
         13:be:36:21:6f:37:20:f6:25:ef:16:12:db:f3:fe:ad:c4:a8:
         89:10:4f:18:a8:87:42:17:7e:19:6b:ce:b9:83:74:34:93:e6:
         7d:60:5f:38:66:18:82:51:da:8d:9c:ee:1e:52:3f:bc:d5:c2:
         f5:86:3e:4e:d9:2d:db:ea:eb:be:79:be:73:ac:0d:bd:b4:25:
         9e:de:51:2e:fb:cf:95:bd:9a:e4:10:26:74:64:0d:4b:f2:a9:
         c0:05:65:50:d9:e1:3e:2a:6c:76:13:11:52:f4:0e:7d:fc:01:
         93:57:65:55:9f:42:a2:9b:3f:13:ae:19:0e:cb:1c:03:4d:b8:
         1f:05:c6:d9:9a:5f:61:8e:38:dd:70:ad:17:0f:9c:bf:3f:33:
         58:52:7e:9c:fa:da:2e:8f:5a:93:d7:b2:06:51:0d:9b:f0:61:
         a8:d0:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:39 2024 by rpki-client on console-ams.rpki-client.org