Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3905b37-56c8-3a60-9e7a-9c057784b98d.roa
File:                     e3905b37-56c8-3a60-9e7a-9c057784b98d.roa (raw, json)
Hash identifier:          9indN0cbUuxmFrJQCeuU9v+TyFnvCjmBnpjB8IzZlmo=
Subject key identifier:   C7:26:59:2E:5D:1B:2E:53:AD:63:CB:5A:36:07:E1:A0:74:7B:1D:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF73D4A83D35212A0CE4840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3905b37-56c8-3a60-9e7a-9c057784b98d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        50.226.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:3d:4a:83:d3:52:12:a0:ce:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e09286d2-1819-4a6c-b535-ee5956100201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:6c:22:3f:df:5a:05:46:37:d4:50:8e:73:
                    e4:e7:66:39:54:8b:04:17:98:7e:16:4f:e4:d7:17:
                    f8:07:70:39:3f:f0:93:a2:dd:e4:41:de:26:fa:a7:
                    97:55:45:35:dd:4d:fe:83:a5:c8:dc:e5:0d:86:88:
                    af:4d:96:1f:d4:bf:eb:e1:d1:e5:59:2d:dc:7d:e6:
                    b6:bc:4f:16:f4:79:77:c2:bd:9b:24:da:0a:2f:e5:
                    f8:cb:bf:f6:0f:71:06:8f:2f:3a:1a:d8:23:dc:96:
                    66:ee:53:f7:48:07:8a:82:53:b7:13:89:52:28:cd:
                    91:ca:c6:da:21:f3:2a:58:20:61:65:96:56:7b:aa:
                    aa:36:2c:b0:49:5e:e7:d2:26:8d:79:27:cf:fe:f9:
                    ff:6d:10:c0:a1:b9:66:32:d9:80:ef:05:89:b7:75:
                    da:d8:b5:b7:56:ac:67:78:ab:27:89:73:3c:37:cf:
                    d7:6f:e1:c1:e0:e1:9d:cd:e0:d0:0e:df:fd:d5:01:
                    92:98:1b:b7:d9:c1:9e:a2:5d:51:71:58:97:72:41:
                    51:7f:8b:8e:81:d3:ff:0f:e2:15:bc:e4:83:f1:db:
                    49:f6:04:19:d3:f8:7b:7e:71:79:00:dc:a4:2f:59:
                    5a:04:ab:2d:15:32:78:46:9b:43:3c:59:78:dc:6d:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:59:2E:5D:1B:2E:53:AD:63:CB:5A:36:07:E1:A0:74:7B:1D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3905b37-56c8-3a60-9e7a-9c057784b98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.226.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f2:dd:fb:f6:c0:b2:ea:78:3a:34:52:d0:81:60:ff:a7:de:
         d3:fa:51:ea:5b:3f:d3:44:c0:3c:e7:74:80:9b:29:17:ba:71:
         3d:fd:6a:c5:70:29:6a:d4:9f:15:16:aa:ad:5f:26:94:0c:f7:
         86:e4:75:52:9a:2a:de:b8:a2:2f:14:6a:f2:68:d7:da:2f:ff:
         ce:22:c4:cb:d5:e3:73:c0:9c:4c:76:97:d3:e1:4e:db:d9:90:
         cb:22:88:78:52:77:b0:c8:4b:19:79:3f:8b:27:47:48:65:38:
         90:da:cf:da:22:3f:60:c2:0a:e7:07:60:06:e7:53:58:c5:4d:
         b3:44:03:30:37:5c:28:3c:10:a6:fa:dc:a6:20:1d:c7:7f:56:
         77:5f:04:6d:7f:6d:13:38:6f:e4:f3:47:dc:ea:85:ac:fb:f3:
         80:ba:31:ce:d4:cc:72:13:7f:44:f6:1e:b6:db:db:b1:50:94:
         91:5f:18:d8:1e:b8:71:fb:db:12:60:8a:fd:8d:a8:5b:4a:fe:
         4d:4e:72:3d:64:d3:83:08:14:e6:52:e6:ad:62:d0:05:de:c0:
         90:f0:98:15:bb:ab:93:03:59:ce:1b:9d:13:89:cf:79:3d:7f:
         c4:ea:50:b2:c8:7e:60:7e:0d:6e:2d:ab:4f:a3:b2:6d:e4:ba:
         e2:5d:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:22:03 2024 by rpki-client on console-ams.rpki-client.org