Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31121fe-edf5-3beb-9aaa-a14099515f5b.roa
File:                     e31121fe-edf5-3beb-9aaa-a14099515f5b.roa (raw, json)
Hash identifier:          zPpB/PHJoA+ETqs0rxKIxt1rBPe9dEOIiugUPqCzyWo=
Subject key identifier:   A3:BE:7D:8A:58:1E:E0:E0:DC:D2:7A:82:86:F5:EF:FB:0F:91:7F:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0001AA9AEA943A1BBCE20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31121fe-edf5-3beb-9aaa-a14099515f5b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        50.79.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:00:1a:a9:ae:a9:43:a1:bb:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=eddf0369-d7d0-4d55-864b-c140c3ee58c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:c7:73:4c:f5:93:ad:2e:21:16:ba:ae:ac:
                    a6:c6:2c:fe:cd:9b:6b:64:8d:b9:6e:71:41:95:d0:
                    50:68:49:b9:3c:1c:5e:16:b5:bc:fa:a4:07:c6:59:
                    5f:f2:ef:4f:3d:ec:f6:db:22:45:51:ce:93:44:7a:
                    f0:70:98:76:18:01:67:c9:54:42:73:14:78:4b:c1:
                    1b:8a:87:3e:78:ab:91:a4:28:f9:99:f8:9b:7b:c2:
                    ef:2b:4b:29:92:5c:79:78:e0:36:2e:61:d5:fc:ea:
                    89:ac:2e:3f:94:04:30:ed:94:cf:51:b6:1d:1f:43:
                    1a:c0:2d:e7:f1:67:2c:1f:8c:f9:bc:74:f0:90:85:
                    57:43:33:1b:10:0b:cf:b1:dd:84:39:74:82:09:da:
                    ac:57:1a:84:ac:f2:e0:5e:ed:ba:75:31:ba:68:c2:
                    12:72:cb:0e:5b:5c:5a:fc:da:aa:6b:54:57:ff:16:
                    a8:c9:01:b1:16:73:4a:c1:e7:5f:24:92:c4:f0:5d:
                    ca:77:4a:2d:c6:fd:ba:1b:9d:76:94:31:00:f1:2e:
                    7a:73:fb:88:34:9f:a8:74:65:e6:03:77:93:47:96:
                    02:8e:05:91:0b:57:c2:01:c1:9a:fa:6a:bc:9c:22:
                    58:d9:7b:b5:b1:49:4e:e7:c5:09:1c:2a:0c:88:44:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BE:7D:8A:58:1E:E0:E0:DC:D2:7A:82:86:F5:EF:FB:0F:91:7F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31121fe-edf5-3beb-9aaa-a14099515f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.79.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:ec:74:b5:83:0e:b7:fb:c5:33:85:f0:88:04:fb:1b:24:
         aa:7b:05:cd:77:77:20:2a:36:fe:61:78:32:17:28:66:15:fc:
         7a:04:8f:31:e4:98:fc:a0:4a:0f:b1:7c:69:64:6b:49:09:f0:
         c7:99:8c:ff:80:96:62:ae:c5:c6:90:3d:b4:83:a9:5a:1c:18:
         17:3b:06:9d:e2:d5:49:b9:5f:06:6f:06:f1:c3:6e:03:f0:b7:
         94:75:2e:1b:11:d1:64:fc:a0:20:76:8e:e5:2b:11:eb:08:de:
         8b:cb:fe:f1:2f:c5:ba:1c:5c:c6:63:f0:3f:e9:f9:fe:45:06:
         63:ba:eb:e5:1c:f8:7c:4a:9b:44:9e:97:60:50:e1:68:e5:5a:
         e1:1a:ea:03:ba:53:b5:79:c9:20:18:7a:39:ad:3b:bf:00:f9:
         88:9f:31:bd:c1:49:b9:33:dd:97:00:8b:c0:ab:a4:de:a3:ab:
         5e:e7:02:c4:d5:89:47:a3:c4:64:66:26:b3:80:88:fb:09:3f:
         a4:a0:d0:0a:96:ac:56:0e:02:20:ee:df:ea:c8:56:e1:b8:40:
         3f:81:db:bd:d7:dd:ad:b7:09:68:f5:8d:b3:a7:a9:c1:71:8b:
         4f:aa:ae:07:d1:ff:ea:03:93:ea:c9:40:ee:f9:9d:79:7e:ad:
         57:17:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:47 2024 by rpki-client on console-fra.rpki-client.org