Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa
File:                     e2704b78-9d82-3568-a016-2154a9361521.roa (raw, json)
Hash identifier:          R0IReQJTgUO4ntR7sZ8fPWFgXYawI/dJwDNPitdOD8I=
Subject key identifier:   31:69:95:56:03:5E:7D:1D:22:A2:DB:9C:8A:44:DB:83:9D:5B:65:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF24036DEA270D44EFBE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        50.252.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:24:03:6d:ea:27:0d:44:ef:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d1cfbb8d-d45b-4faa-abf6-e3de5b8dbffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:85:1f:84:2f:36:9b:53:2b:e8:23:84:cd:
                    7c:cc:04:07:3b:81:f8:7f:d0:d8:76:6c:13:62:7f:
                    1f:09:ad:0a:eb:59:71:44:38:e5:80:53:df:b1:60:
                    86:37:79:b1:20:ef:4f:6e:a6:e7:6c:4d:4e:34:19:
                    9f:86:30:81:97:0f:46:de:ba:cb:12:e9:f3:c1:15:
                    11:ac:d5:93:7f:9c:6f:17:d9:25:cd:47:8a:84:87:
                    b6:69:a6:a2:39:32:dd:d7:80:12:ac:cf:25:bb:1f:
                    53:4e:d7:a1:a6:1b:e0:ef:07:e4:c9:e9:44:cd:18:
                    30:d0:64:59:97:3a:7e:48:ec:5e:4d:7b:53:73:b9:
                    52:22:b5:87:92:30:d2:cf:76:36:f9:32:e8:41:f4:
                    68:ea:bf:e8:d2:69:11:73:59:70:25:12:25:b0:5b:
                    97:60:db:3a:91:dd:ba:6c:b2:f8:89:d4:3d:e1:93:
                    e8:10:04:ec:6b:d5:d1:ab:f8:60:8d:7b:cd:ed:36:
                    06:da:f8:25:22:da:da:50:76:e8:b9:ac:f6:71:7e:
                    5f:88:9f:23:69:ea:39:59:32:e3:bf:32:09:fa:aa:
                    99:31:fd:a2:09:fa:62:ad:fd:69:49:31:72:61:88:
                    78:3b:d1:2c:4d:c5:8e:b8:7f:56:4f:f9:f6:dd:8b:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:69:95:56:03:5E:7D:1D:22:A2:DB:9C:8A:44:DB:83:9D:5B:65:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2704b78-9d82-3568-a016-2154a9361521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.252.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:70:ff:82:9d:2c:eb:c2:24:cf:f9:e6:f1:bf:68:0b:15:ef:
         5d:2c:e4:81:02:cf:cd:07:f6:d3:58:76:50:c0:43:b0:f8:16:
         ed:50:c3:9e:33:af:ee:de:fa:f5:82:aa:9e:89:55:23:b6:bd:
         23:31:16:ba:ce:f3:e2:7e:31:63:10:c3:23:47:52:4a:67:11:
         18:24:55:49:52:bb:72:94:c8:d7:b5:5f:e8:7f:c1:e2:c1:2e:
         7e:51:c6:86:71:89:38:a5:5d:be:eb:34:ee:8f:6e:d0:ef:cb:
         f2:d6:af:f1:7a:d0:d4:41:e8:9b:b3:41:8f:47:20:a6:37:16:
         e1:aa:96:2e:a4:c3:d5:61:f2:de:24:ea:eb:67:45:20:0b:92:
         73:1f:2b:55:4f:21:3f:7e:27:d9:f6:73:77:2b:6a:1f:44:0e:
         ef:84:fe:3a:86:54:59:5a:dd:dc:d0:86:88:8d:b6:9d:3e:8f:
         dd:b2:4e:33:7a:57:51:38:5d:59:63:35:42:0d:c0:e9:d5:99:
         24:6a:d7:8f:71:af:71:17:88:20:42:25:3f:2a:49:b9:45:80:
         9a:b7:95:10:91:d6:ac:53:2f:75:99:19:f0:45:fd:27:9b:6d:
         59:5e:04:28:3c:d8:55:6b:a6:c7:ec:59:8f:47:85:c8:51:31:
         fc:f2:5f:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfryQDbeonDUTvvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZDFjZmJiOGQtZDQ1Yi00ZmFhLWFiZjYtZTNkZTViOGRiZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl+FH4QvNptTK+gjhM18zAQHO4H4f9DYdmwT
Yn8fCa0K61lxRDjlgFPfsWCGN3mxIO9PbqbnbE1ONBmfhjCBlw9G3rrLEunzwRUR
rNWTf5xvF9klzUeKhIe2aaaiOTLd14ASrM8lux9TTtehphvg7wfkyelEzRgw0GRZ
lzp+SOxeTXtTc7lSIrWHkjDSz3Y2+TLoQfRo6r/o0mkRc1lwJRIlsFuXYNs6kd26
bLL4idQ94ZPoEATsa9XRq/hgjXvN7TYG2vglItraUHbouaz2cX5fiJ8jaeo5WTLj
vzIJ+qqZMf2iCfpirf1pSTFyYYh4O9EsTcWOuH9WT/n23YvBsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFplVYDXn0dIqLbnIpE24OdW2VJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI3MDRiNzgtOWQ4Mi0z
NTY4LWEwMTYtMjE1NGE5MzYxNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMvzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNw/4KdLOvCJM/55vG/aAsV710s5IECz80H9tNYdlDAQ7D4Fu1Qw54z
r+7e+vWCqp6JVSO2vSMxFrrO8+J+MWMQwyNHUkpnERgkVUlSu3KUyNe1X+h/weLB
Ln5RxoZxiTilXb7rNO6PbtDvy/LWr/F60NRB6JuzQY9HIKY3FuGqli6kw9Vh8t4k
6utnRSALknMfK1VPIT9+J9n2c3crah9EDu+E/jqGVFla3dzQhoiNtp0+j92yTjN6
V1E4XVljNUINwOnVmSRq149xr3EXiCBCJT8qSblFgJq3lRCR1qxTL3WZGfBF/Seb
bVleBCg82FVrpsfsWY9HhchRMfzyX54=
-----END CERTIFICATE-----
Generated at Sun May 5 02:48:10 2024 by rpki-client on console-fra.rpki-client.org