Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85d4bfa-2353-3212-950c-923decec58ce.roa
File:                     e85d4bfa-2353-3212-950c-923decec58ce.roa (raw, json)
Hash identifier:          lYdeH5k0eX3xCxwr/984QR32A/8CQYfCVJkvWLrkXDU=
Subject key identifier:   C7:5C:4B:43:EF:CE:80:83:E8:AB:DA:0A:B9:34:80:47:62:4C:96:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC6A729F188962A68A4800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85d4bfa-2353-3212-950c-923decec58ce.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     35961
IP address blocks:        50.207.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:6a:72:9f:18:89:62:a6:8a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=6fbaebf3-4459-4e74-9b55-b9bfd8b06b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:e4:ee:de:c2:74:ae:27:5d:c3:e7:5c:2d:
                    5e:56:13:ce:ef:89:90:19:54:fc:54:1d:7a:4b:cb:
                    af:0f:87:51:2c:fa:d8:39:bd:97:a8:50:ab:0d:b8:
                    34:86:2c:29:40:4b:54:6c:fc:8f:96:42:45:88:86:
                    7b:5b:49:e9:86:f5:6f:b1:8e:ee:f5:a7:5a:e2:48:
                    c2:20:46:e1:44:26:8f:3e:2e:4d:e0:73:f1:99:bd:
                    2e:17:eb:ef:ca:9b:15:a6:18:b8:66:eb:39:a5:b2:
                    9c:0e:3c:0a:63:e8:1b:12:57:58:1e:a5:b8:fa:ac:
                    d0:da:cf:be:12:ce:28:1a:93:47:c4:2b:dd:7a:5e:
                    37:f5:89:c3:f7:31:f6:2c:65:4e:b6:cc:9d:cf:90:
                    e7:38:3e:ee:b5:0e:f0:06:3f:a4:33:fb:c1:eb:81:
                    42:0e:9b:bb:ff:b2:60:79:a1:1e:cb:34:7b:08:c6:
                    f6:e8:12:d0:50:32:36:2a:a6:55:9e:f1:09:a8:a3:
                    f9:0c:0b:46:ec:dc:cb:bc:c0:94:fc:2c:9f:d4:f0:
                    39:d6:28:34:b2:cf:5a:b0:99:f9:e4:b0:a1:06:cf:
                    40:87:ed:84:e4:9b:35:3a:c2:3b:f7:59:d8:84:9c:
                    05:e7:62:d5:fc:4a:6e:d6:c5:0b:7b:39:54:80:0f:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5C:4B:43:EF:CE:80:83:E8:AB:DA:0A:B9:34:80:47:62:4C:96:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85d4bfa-2353-3212-950c-923decec58ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.207.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:1c:b0:c1:91:d4:68:9e:3e:48:d9:6a:8c:89:0e:ee:74:
         92:ad:bb:f3:61:16:97:3e:ba:ed:4e:c7:f7:49:ba:33:4d:f8:
         95:0b:bb:90:87:30:da:25:0a:b9:45:8c:ee:d9:7e:db:14:98:
         af:c2:8a:b8:58:8c:fe:4c:45:60:c1:d4:44:db:56:c8:a2:9a:
         4d:5c:b6:a2:24:8f:58:13:73:6c:c9:73:f6:bb:16:24:5d:6c:
         f8:b5:c6:f9:20:86:ad:97:54:31:c7:34:93:a6:ab:6e:b1:8b:
         03:d2:5c:2a:6a:38:b9:68:2b:e9:c4:21:39:32:12:e2:ec:6d:
         63:bf:b8:a2:4a:2a:54:17:69:f8:3b:9e:38:25:3e:35:e1:bb:
         42:0f:12:f3:d7:68:2d:5a:72:87:5c:6c:5e:c3:f1:a3:72:a4:
         97:34:6f:2c:50:70:e3:ab:78:cd:1c:2d:52:2d:54:d0:2b:e9:
         a3:c3:c3:88:e4:42:1b:c9:fe:c1:68:51:27:fc:d2:8d:88:9c:
         a5:da:94:d2:25:ca:41:15:c3:cf:b4:85:ec:38:50:ee:57:39:
         53:bc:0a:27:72:da:ea:d8:d0:e3:ad:a9:6f:5a:43:a0:4f:99:
         26:e2:e9:40:e2:32:cb:87:ff:7a:cf:dd:64:c2:99:03:25:d1:
         70:c9:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:48:31 2024 by rpki-client on console-fra.rpki-client.org