Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa
File:                     e2704b78-9d82-3568-a016-2154a9361521.roa (raw, json)
Hash identifier:          EObI+vVZzmO1Qx4aHwExCqN/tZHDgif9gCYJGhDUK8A=
Subject key identifier:   69:78:5E:D0:2D:D5:7C:B3:92:D8:93:6A:82:94:28:8A:1B:59:BD:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D9F75F7CF47FEDB234C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        50.252.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:9f:75:f7:cf:47:fe:db:23:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=32481025-9127-4b41-be7c-8dab4c56d926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:ed:c5:8c:32:4f:8d:93:02:09:9d:84:1d:
                    d1:77:e9:ee:4a:99:e5:0f:91:e9:24:f9:f8:7b:e9:
                    3b:8f:84:18:93:23:2e:40:80:86:87:8f:c8:dc:a1:
                    a6:57:a0:cc:ef:fa:c9:bd:7e:cb:98:25:35:c0:47:
                    a7:6c:72:21:7f:92:2e:da:11:27:eb:7f:47:86:ba:
                    54:f5:45:c0:2d:be:c3:cb:37:3c:be:0e:9e:fd:bd:
                    da:7a:5f:5c:6f:fc:e4:4d:33:44:c5:bd:6e:08:67:
                    70:a5:22:97:52:e6:5e:bb:6c:59:a6:c9:07:c2:2e:
                    30:c6:83:81:48:af:49:cd:2b:d7:da:a5:93:d9:44:
                    b2:23:31:d4:ab:83:88:14:41:a0:1d:f1:a2:3f:72:
                    5e:94:de:8d:61:35:fe:0b:9a:68:c2:b4:01:9e:47:
                    07:51:86:54:c3:d9:4f:b3:f8:7a:7a:28:5a:ba:5d:
                    f8:2c:74:ce:e0:8b:18:5f:1b:0a:4c:79:93:87:d7:
                    7d:f1:2c:de:33:66:69:94:e5:86:62:4e:19:54:86:
                    1d:c4:b7:81:57:ca:a3:e8:10:84:70:5e:35:1c:da:
                    67:52:df:3d:49:00:9e:9d:fa:e3:00:86:26:90:20:
                    f4:73:c6:94:e8:07:3b:13:ec:7e:37:26:8e:10:9f:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:78:5E:D0:2D:D5:7C:B3:92:D8:93:6A:82:94:28:8A:1B:59:BD:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.252.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:b2:b7:f7:00:50:df:45:59:ac:d3:17:84:b5:19:aa:fd:
         e0:f4:79:98:d5:32:f7:0c:04:66:9d:bc:95:52:b0:66:0c:d5:
         4a:34:53:37:a2:52:d2:53:5c:e8:dd:f0:b5:02:ca:c4:1e:d5:
         21:5e:d5:bf:dd:23:1d:cd:68:68:47:24:27:7a:41:b1:53:02:
         c6:7c:d6:b0:e2:51:5e:2f:b2:b1:db:22:28:2d:6e:83:44:46:
         f4:4f:9d:c3:ec:d7:ca:f7:cb:d7:0c:47:07:61:bb:11:7d:7f:
         d8:93:44:9f:36:41:aa:73:3f:13:dc:a3:66:85:e2:a4:22:c5:
         e9:2b:d9:34:59:4b:0f:a3:d7:71:80:b5:9f:9f:3e:92:d6:1b:
         c0:ed:92:37:b7:ea:c0:f6:c0:8b:72:44:3e:52:e5:bd:6d:ee:
         fa:99:60:11:bd:f2:26:22:8c:b8:a4:39:bd:d8:f5:48:4f:8d:
         20:12:93:88:79:25:67:91:2b:db:ad:87:85:10:b9:71:b5:e8:
         d6:45:4a:ca:2b:55:e0:50:98:eb:6a:8e:46:13:72:0a:fb:1c:
         68:a4:b6:c3:19:a0:c2:b1:f8:54:3d:94:69:10:41:bd:43:ac:
         3b:b4:f6:53:07:ac:8a:9d:4b:92:e4:13:cf:1f:05:c0:4c:2b:
         f4:d4:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:38 2025 by rpki-client