Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b12d5a-15e8-3fa2-93d3-1dbd1e6eff73.roa
File:                     f8b12d5a-15e8-3fa2-93d3-1dbd1e6eff73.roa (raw, json)
Hash identifier:          5TOX1hhgmbDdxaf0b2wZZihfDfVJUrrksA9H2ccMNKw=
Subject key identifier:   1F:4B:B9:BE:6F:93:76:06:DD:1D:44:2F:79:DF:F6:49:E6:BF:52:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB9AC7581A6065DEBBB480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b12d5a-15e8-3fa2-93d3-1dbd1e6eff73.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33652
IP address blocks:        50.250.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:9a:c7:58:1a:60:65:de:bb:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0e530f32-b180-4fdb-8ae3-641f2a72b22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:96:23:f3:3f:44:15:06:b6:ea:95:33:67:
                    da:19:37:f3:8d:af:bb:d9:49:6b:c7:bb:42:a6:ac:
                    51:2a:90:1f:2d:9e:01:30:16:b7:97:da:05:f0:a5:
                    7a:b5:1d:6b:b6:04:e0:81:66:05:39:5d:2d:15:a2:
                    af:dd:02:b0:48:44:b2:e7:92:87:85:78:65:03:dd:
                    fd:b4:46:6b:0d:b9:d7:26:92:d4:9f:ed:25:fb:87:
                    49:5d:a3:21:bf:e2:c0:f2:fe:95:0a:9d:6b:7c:99:
                    dd:0d:ea:f5:16:43:e3:35:7d:8d:7a:60:d6:4a:d3:
                    b6:91:5c:9b:45:75:6a:69:1d:42:6d:7a:41:60:c3:
                    79:aa:1f:41:e5:c9:d7:5f:34:67:b4:b9:40:8b:be:
                    d0:20:f2:71:37:d6:b6:90:0e:c8:82:d9:06:fb:01:
                    65:25:70:bf:0c:bc:f6:f6:e4:28:3b:52:0b:92:c3:
                    31:80:46:ef:73:b5:5c:26:be:1b:3a:2b:9a:6d:96:
                    dc:41:a1:3e:1a:39:3c:6d:ad:ff:64:c5:5a:fd:79:
                    df:b0:ca:72:53:8e:28:25:c5:75:7a:6e:03:00:14:
                    53:85:c3:a8:b8:ba:54:2f:08:b2:97:28:11:2b:4e:
                    91:c4:7e:5d:ce:e7:1a:0e:84:14:6e:28:21:fd:ee:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:B9:BE:6F:93:76:06:DD:1D:44:2F:79:DF:F6:49:E6:BF:52:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b12d5a-15e8-3fa2-93d3-1dbd1e6eff73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.250.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:88:1d:73:a1:45:43:6f:94:3a:dc:d0:c5:24:76:23:d6:
         72:f2:42:23:98:94:9e:21:ab:99:1f:e6:30:bd:ed:d8:79:ce:
         1d:62:19:6e:6c:f0:bc:4c:b7:42:d0:2d:49:e2:45:58:29:59:
         f2:36:7b:4b:5e:11:0b:24:cd:28:cc:ea:39:89:11:a9:f1:ae:
         4b:18:26:17:bf:f8:49:18:6a:a3:5b:0e:d6:98:e1:35:9b:45:
         3a:ee:31:89:82:19:a2:b5:a4:47:0d:99:c2:ba:23:d9:f7:29:
         de:43:c8:8d:8c:16:f7:80:de:7d:00:58:04:58:04:36:7b:18:
         f5:8a:fa:0e:41:ac:e9:e1:f3:37:cf:0a:4a:fe:07:cc:91:65:
         92:f8:1a:41:96:b3:19:25:ae:19:1e:be:2e:ab:c7:59:1a:16:
         70:77:57:45:a3:bd:07:4e:61:31:a8:03:0d:2f:16:fb:2f:58:
         9f:37:46:23:a2:0c:df:1e:70:cc:8a:ea:bd:95:05:76:00:bb:
         53:a5:9b:e3:03:2c:3b:77:0f:bd:ec:af:48:3c:95:d6:7c:ea:
         a2:3b:75:7f:36:a9:db:1f:1b:98:c7:29:1e:7e:9c:90:c6:b2:
         64:b1:d6:ba:16:56:81:bc:36:24:ec:09:b2:fa:bc:3c:29:84:
         75:2e:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:24:08 2024 by rpki-client on console-ams.rpki-client.org