Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa
File:                     dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa (raw, json)
Hash identifier:          pk2b4ksvWYiY1TcTRw1/NYl8s3C2blKSwTecvB6mals=
Subject key identifier:   47:81:14:C9:51:72:DC:73:24:E3:9C:5F:3C:18:B3:FF:F1:FC:60:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0A0CA5E442472BF90506A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     36679
IP address blocks:        50.204.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:a0:ca:5e:44:24:72:bf:90:50:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9558c8d7-2308-423b-9a40-0fea4b59f38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:ec:fa:c2:6d:c1:32:3b:19:f2:db:8e:95:
                    7d:27:f0:ad:64:dc:a9:72:e1:5b:5b:b7:7a:48:8f:
                    6f:23:a1:b9:1d:ca:57:df:49:09:08:2e:cb:1c:25:
                    52:d7:03:ea:55:07:f1:be:b8:6c:6b:db:68:84:2c:
                    0f:61:78:f8:7f:19:e9:df:dc:b3:17:85:17:2c:3b:
                    c4:96:6a:19:e0:60:8e:2c:0a:7b:18:cc:d9:d3:3c:
                    41:36:b9:a4:c8:7a:c4:bd:a5:ad:64:8f:35:1e:db:
                    6d:cd:14:e5:75:13:d0:45:56:4b:0f:bd:37:8d:5b:
                    b2:62:56:77:8d:e2:a3:a9:23:cd:a2:8e:57:84:73:
                    ef:c4:7b:3a:3c:7c:96:ab:c6:9c:a7:85:2d:51:a7:
                    f7:c5:b0:43:1c:2f:e3:31:a3:ed:5f:40:3b:54:cc:
                    50:55:69:12:1a:97:df:3e:dd:be:31:1e:2d:fa:e8:
                    ae:c3:78:53:e9:ed:33:ed:05:5a:9b:24:9b:63:ae:
                    79:7b:d5:7f:e4:b6:4c:50:f2:70:3b:87:e0:8d:4c:
                    ed:2d:49:33:8f:8e:df:cb:43:94:76:fc:af:30:32:
                    7e:44:b7:3d:21:44:32:d8:07:54:96:ac:c4:f8:62:
                    01:27:54:ae:2e:2b:b4:3f:41:80:41:4f:46:08:67:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:14:C9:51:72:DC:73:24:E3:9C:5F:3C:18:B3:FF:F1:FC:60:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:15:34:15:4f:c7:99:c0:97:bb:c5:f8:36:f8:5a:d0:1f:77:
         f1:82:be:90:98:3f:ef:42:81:8b:8c:ad:92:78:53:cc:17:fc:
         77:62:4a:49:7f:5a:ee:35:a7:5b:ce:c4:78:69:03:a9:f1:1b:
         cf:04:5a:17:a5:41:2c:a7:74:04:67:e9:68:22:11:19:ba:fd:
         e6:f5:34:78:bb:bd:94:9f:3a:f0:5f:24:e8:97:7d:bb:76:a2:
         aa:fb:b5:46:74:db:b5:b6:b9:8a:9e:3e:3e:96:56:93:aa:9e:
         c6:2c:61:8d:9c:a3:8a:5f:a9:39:a3:62:fa:94:62:9c:c8:d3:
         76:b1:b8:4e:37:e7:0b:0c:cb:b0:eb:69:e3:32:a6:e0:88:bf:
         35:dd:d9:b4:0a:cb:4c:d5:5e:29:59:a1:9d:5d:d1:26:60:5c:
         1f:1f:0b:d2:2d:79:a9:5d:ab:7b:7f:5c:ba:4a:3f:75:fe:09:
         87:0e:0f:fc:85:eb:46:ae:30:90:d9:52:64:70:2d:96:59:f9:
         7f:c8:5d:da:fa:09:64:57:51:07:1b:9d:64:ff:64:ee:6f:08:
         80:63:ac:25:e2:b3:7b:4b:11:6a:1d:48:71:f5:6c:ba:69:4e:
         ce:30:d7:81:3c:bc:41:c9:bd:96:71:7e:b3:3e:29:4e:d1:f1:
         99:aa:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:47:57 2024 by rpki-client on console-fra.rpki-client.org