Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa
File:                     d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa (raw, json)
Hash identifier:          e8kL3S81upL/2cCiSpmaGKDGnk9p1/Auf+L5skPbh5U=
Subject key identifier:   2D:CA:91:68:10:E8:91:48:6A:E2:0F:E2:03:83:4F:EE:BC:73:03:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABBDA9E1CA180175EEF400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33668
IP address blocks:        50.202.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:bd:a9:e1:ca:18:01:75:ee:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=a848c5b0-df7e-4680-adb8-f43d4dca3dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:ce:68:de:e1:50:fb:21:79:32:4f:ad:6d:
                    d1:ee:ab:af:55:61:1f:32:b4:19:b2:19:3b:af:cb:
                    5b:ca:01:de:fc:5d:bb:9b:da:5d:33:ee:ab:ab:3b:
                    e5:76:2d:ad:8f:b6:b1:a6:c2:ca:a6:64:6c:ee:c6:
                    39:79:48:3a:e5:80:fd:74:b4:34:7e:2c:83:f3:8f:
                    5f:5d:dc:85:24:72:c4:2c:39:29:f2:09:f0:ac:82:
                    0c:73:37:a7:32:02:5f:79:0b:d1:fc:ea:8b:44:55:
                    31:81:84:08:71:ab:94:64:43:ff:9b:15:8a:b8:3a:
                    f4:cd:17:fb:53:d2:c5:b4:85:01:ba:c1:68:e1:89:
                    93:d3:96:1f:91:b9:c7:e0:4c:a2:7b:40:09:06:b6:
                    55:81:6f:da:31:78:02:6e:c5:15:61:ac:fb:e5:ab:
                    19:c0:f6:cc:dd:f7:1f:6e:74:73:01:32:15:57:82:
                    06:07:01:f0:26:37:0f:91:87:58:5d:c5:4c:e7:c8:
                    ec:df:c0:0d:fc:d0:5f:6a:f3:be:76:89:5a:6b:eb:
                    8c:9f:67:3c:c0:88:71:0d:84:23:b1:53:60:c2:a0:
                    f5:e1:c9:a5:4a:e6:28:e7:53:86:16:c2:b0:b4:ed:
                    b3:af:ca:81:71:08:e5:1b:55:ec:f7:69:0c:1a:e1:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:91:68:10:E8:91:48:6A:E2:0F:E2:03:83:4F:EE:BC:73:03:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:9f:05:28:56:91:56:2c:e1:71:1f:b4:9b:69:29:ea:20:
         18:29:c4:2f:ac:37:fa:69:da:8f:55:d3:96:b7:7c:2d:6e:d1:
         49:e0:c5:2e:ab:5c:f0:15:53:40:08:8d:60:fd:a9:81:a6:9f:
         db:09:95:d4:eb:3c:22:8c:a6:a5:99:ab:e5:41:46:2d:aa:16:
         32:d3:d0:97:f2:15:c0:c0:13:ca:ca:df:46:b1:d4:60:59:8c:
         64:e1:de:3e:b9:d9:a2:ab:9a:3b:7c:9f:ea:e1:53:4d:84:82:
         d3:ed:cb:05:1c:d5:c3:83:f5:28:d9:76:0c:cc:28:37:52:7d:
         8f:dd:b2:8f:f6:e1:4c:97:15:b6:a9:79:a8:12:f5:cc:13:72:
         50:11:39:97:54:21:15:08:dc:87:a1:37:08:6e:83:54:11:97:
         e4:98:7e:fa:21:0d:20:bf:54:e3:59:c5:fd:d4:5d:7c:f7:ab:
         f2:ba:ed:83:e8:9e:33:57:b4:69:13:d2:aa:f6:48:f5:86:d1:
         3b:dd:55:1d:96:53:c0:35:56:5e:84:9a:61:9f:3e:6c:30:e7:
         5e:43:ae:92:02:1e:26:28:5f:87:5b:3e:28:a7:fa:99:77:23:
         53:63:66:bc:73:af:ef:0e:ab:21:94:a8:69:1e:10:d3:ca:50:
         94:e4:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:07 2024 by rpki-client on console-fra.rpki-client.org