Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d995bc53-7d22-3c67-a561-da43179a8e43.roa
File:                     d995bc53-7d22-3c67-a561-da43179a8e43.roa (raw, json)
Hash identifier:          8mo/Q6sbiODH3gzopCB8PWo4VPF892kRFvbfq4vQbC4=
Subject key identifier:   27:56:23:8E:E6:EF:61:D4:10:18:13:F2:75:4D:13:64:17:59:9C:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BDEE69B744F935F9140C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d995bc53-7d22-3c67-a561-da43179a8e43.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.50.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:de:e6:9b:74:4f:93:5f:91:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=785b302c-a788-459a-9d95-368f46398968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:70:f2:73:9e:95:e1:c6:21:5e:0c:48:02:
                    e3:21:1e:98:c8:96:68:ca:61:a0:fd:a1:82:eb:82:
                    0e:81:37:3c:3d:4c:d3:98:9e:aa:92:07:16:8c:36:
                    e5:1f:af:60:e4:c9:76:50:3a:d3:3d:cd:38:cc:09:
                    cc:98:15:8e:ee:af:e7:d7:6d:e2:ff:28:39:3c:fb:
                    ec:7d:14:80:de:de:22:da:9a:6f:cc:4c:45:20:4a:
                    36:06:01:bf:e6:83:4d:25:31:7f:61:38:ae:e2:7a:
                    dd:fa:dc:f0:ee:83:36:fe:ae:31:97:97:90:87:76:
                    48:08:90:6c:71:de:76:59:50:23:50:3c:8b:30:2b:
                    5d:28:f0:ac:5a:d0:a5:ad:87:08:60:2e:89:d5:2e:
                    94:5d:2e:2e:f2:06:a1:a7:01:e2:03:72:9f:1d:c1:
                    d2:48:cb:d2:14:c8:fb:f3:51:36:73:e3:75:51:2f:
                    c4:f7:8f:e9:59:dd:02:4e:a7:14:ca:34:b6:1b:ce:
                    6c:87:8c:8e:2a:07:5d:74:7f:e9:e5:c3:4c:d6:44:
                    de:a4:25:6d:dc:d8:88:f7:92:9e:5c:99:65:01:ae:
                    36:0b:57:16:d0:65:03:db:e5:16:64:e1:4a:6e:ea:
                    f5:3c:2d:60:ab:44:9b:9a:af:ba:f6:1c:de:c8:fe:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:56:23:8E:E6:EF:61:D4:10:18:13:F2:75:4D:13:64:17:59:9C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d995bc53-7d22-3c67-a561-da43179a8e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:09:d0:74:b8:33:a4:e0:21:df:e2:7d:be:51:70:92:c3:4e:
         50:c8:f5:2b:64:b1:ac:fb:aa:74:39:0f:0b:ec:62:ed:09:b1:
         c7:02:5c:fd:14:6f:84:34:91:7b:38:5f:fe:6a:47:30:a5:50:
         38:15:f2:5d:be:5c:82:72:15:4a:cf:d1:8e:df:3c:c3:73:75:
         2b:56:d9:37:cd:74:20:b8:52:0a:3f:75:40:80:0f:04:69:4f:
         b2:90:ed:e0:cc:fc:48:74:4f:7e:84:ea:0b:01:67:53:8f:f0:
         33:09:e5:8b:21:eb:45:26:8b:e3:0e:11:02:25:93:1e:69:ce:
         b4:c4:26:1a:58:b0:45:15:9e:f3:23:61:cd:1d:38:3a:a8:0c:
         72:77:f1:20:d3:96:28:a9:ec:27:97:10:d9:77:5f:3a:9b:e1:
         b3:81:de:fd:f6:2a:4f:3b:cf:52:e4:a2:0b:5f:bf:3a:3f:f9:
         8d:a0:a8:ee:77:d0:aa:79:9e:0d:f3:09:5e:95:aa:43:23:4b:
         7f:90:77:3f:86:8d:82:51:b5:ff:c4:6d:bf:b5:2e:b5:f0:a8:
         61:5a:4c:05:14:c5:d0:97:c3:2d:9a:ec:af:59:ea:72:3d:ea:
         e0:1f:26:ce:53:bd:d5:27:39:77:b6:41:09:33:f6:1c:b7:15:
         d9:8a:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:34:36 2024 by rpki-client on console-fra.rpki-client.org