Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fa3562-d737-3702-bde9-3e8f8b243e37.roa
File:                     f0fa3562-d737-3702-bde9-3e8f8b243e37.roa (raw, json)
Hash identifier:          00d5mAaFqaINVC6LkocEm4mmgmy1BNy+maKOZMxmeh4=
Subject key identifier:   B3:64:EB:93:A1:52:44:8A:81:9D:F7:C4:18:FB:43:63:CE:D1:62:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0352EF68BDA2E34224FB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fa3562-d737-3702-bde9-3e8f8b243e37.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        50.223.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:35:2e:f6:8b:da:2e:34:22:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e78869ba-d5d5-4c2b-a549-aa8155f63030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:a0:bb:02:92:3f:c6:16:6f:5d:54:fa:74:
                    1d:85:a4:ba:86:66:ac:2a:1e:cc:be:dd:24:d3:a6:
                    ce:75:94:04:ad:3c:bf:03:a8:d9:3b:90:78:a0:35:
                    bd:29:0c:27:ac:39:f8:16:75:6b:a9:14:f7:9e:2c:
                    fb:65:62:c0:79:06:c1:0b:05:ff:31:74:0e:87:56:
                    d5:7a:9f:2c:f4:47:e2:c6:f4:5d:88:3e:72:6e:57:
                    30:3a:54:ee:ae:a0:da:21:57:a9:6f:1b:69:2e:89:
                    03:a1:17:de:b3:bc:86:98:97:e0:97:86:07:ad:fc:
                    8c:24:23:57:73:06:1f:01:ca:6f:83:e5:c6:65:9d:
                    39:94:47:20:3e:ac:f8:db:1e:d4:48:4c:62:04:70:
                    57:8a:0c:78:b1:33:f7:17:1e:d8:b4:50:2e:c9:72:
                    e3:84:a3:d5:9e:40:aa:79:ff:c8:4f:ed:6e:ee:05:
                    8f:79:73:65:2c:26:a2:2d:7c:8b:75:e4:76:59:c6:
                    f6:c9:8c:bd:cd:f4:22:44:0a:f2:52:d0:c6:24:c3:
                    96:84:15:59:9a:d3:a3:5b:81:5e:22:f7:c5:f7:2b:
                    d7:75:76:91:42:a0:83:fc:e1:57:62:72:6e:af:c3:
                    70:57:a8:0c:06:17:5a:ae:04:72:3f:9e:48:b8:0f:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:64:EB:93:A1:52:44:8A:81:9D:F7:C4:18:FB:43:63:CE:D1:62:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fa3562-d737-3702-bde9-3e8f8b243e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.223.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:87:12:a7:23:72:98:fc:34:7f:e8:4d:a0:ec:03:20:05:fb:
         51:21:23:81:c1:8a:1d:db:b5:67:9a:05:fc:c7:48:c3:5a:30:
         aa:d2:1e:c7:d6:cb:a7:3d:17:bd:a7:f5:9b:5d:ce:dc:c1:76:
         7b:6e:32:e2:09:ef:c5:da:9f:c9:24:c6:e9:bf:d1:bb:57:20:
         78:35:91:ca:96:35:3c:13:9a:c6:54:60:3c:b1:a7:ec:3b:d3:
         7e:1f:38:88:60:19:f8:fa:fa:b7:fc:76:63:69:58:67:14:aa:
         a7:e1:03:c1:4f:8b:85:cb:8c:1a:f3:41:4c:43:2d:a4:6e:9b:
         8e:9b:a2:95:c3:e0:22:69:f5:11:7e:5f:ee:1a:ac:7c:f6:11:
         6d:0a:44:47:86:48:55:8a:d3:1c:f3:3b:5f:7d:04:2a:90:ef:
         08:65:70:ff:50:7f:b4:a3:46:dd:5c:2a:43:9b:02:a5:42:dc:
         4e:a3:8a:72:c9:69:55:ef:7c:8c:05:d6:84:98:69:67:e2:91:
         7d:9a:0e:9f:df:29:be:8c:7c:c6:85:9c:5f:70:18:0f:3d:ce:
         f4:4f:92:30:e4:c1:d0:90:a8:00:bb:c7:6f:ab:96:26:ef:fc:
         75:1f:b2:ab:7d:db:10:fc:66:fa:4b:13:84:5c:fc:d3:30:da:
         33:f7:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:34 2024 by rpki-client on console-fra.rpki-client.org