Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd14158d-ee46-3ab6-82a1-1c57e41b9723.roa
File:                     fd14158d-ee46-3ab6-82a1-1c57e41b9723.roa (raw, json)
Hash identifier:          jqTj03DqM/5fI2M+won2ByNaXAKSQMJ4qofW6CezwUY=
Subject key identifier:   E2:E6:97:00:3A:41:14:A6:F6:44:A0:36:2F:50:B7:32:9C:36:2C:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAC2F979095A4705A62D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd14158d-ee46-3ab6-82a1-1c57e41b9723.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        50.170.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:c2:f9:79:09:5a:47:05:a6:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=0a21c090-675c-4060-b87c-7a232e4f7a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:49:98:94:96:2a:f7:b9:33:29:cd:18:b5:
                    ac:5a:2b:a2:79:28:fb:3b:a4:78:a4:a8:5e:19:ba:
                    d3:8d:87:b9:62:66:fc:79:20:d6:6d:72:c6:27:70:
                    b3:32:e3:91:13:2a:3e:db:04:e4:3b:8e:0a:3e:1a:
                    68:53:24:21:71:9f:b1:a6:ea:7e:71:0d:4d:74:7e:
                    7e:2f:d1:7e:fb:25:dc:f8:09:23:9e:c7:3f:4c:c1:
                    0c:a8:4f:22:80:6e:9d:a6:80:7f:26:02:00:91:8a:
                    8c:7a:82:09:c5:4f:2c:81:25:53:4e:3a:50:a8:18:
                    5c:d9:62:8f:9d:5a:0f:9d:bc:ac:7c:72:ab:c8:28:
                    fd:81:22:9a:38:5f:aa:30:36:db:7b:9c:8b:04:89:
                    8a:2a:8d:2f:3c:50:db:f6:04:f6:d3:e9:2d:22:45:
                    ad:19:c9:eb:f0:9a:93:79:a9:ce:ed:72:bc:bb:1e:
                    e5:48:8e:ba:88:ce:b5:8c:62:28:7f:c4:f7:73:e5:
                    31:45:82:cd:22:27:e1:ad:94:91:80:8a:4b:4a:ab:
                    78:18:65:03:fd:cd:49:9b:98:9c:0a:e7:82:6b:85:
                    41:5e:9b:e3:9c:60:bd:0e:3c:ad:56:5b:ad:b5:a6:
                    f1:2a:bd:64:ab:3e:83:73:0d:62:33:45:e4:e2:f6:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:97:00:3A:41:14:A6:F6:44:A0:36:2F:50:B7:32:9C:36:2C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd14158d-ee46-3ab6-82a1-1c57e41b9723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.170.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:db:c9:c4:91:53:37:0a:50:2e:2e:2e:20:31:f4:30:a1:
         2f:ac:4a:d4:22:45:9e:68:b8:71:97:d4:c6:eb:89:c4:80:33:
         ef:e2:60:8e:e6:f0:c4:cb:43:f5:d3:2a:9a:3a:0c:d3:0e:92:
         14:88:e1:a5:c6:ce:82:d3:15:fa:71:5c:a6:e3:64:3e:e7:89:
         cf:06:36:35:8e:ea:76:0f:bd:5c:ce:e8:72:0b:68:7a:8b:59:
         e9:e5:bf:b2:db:56:b7:c0:9b:ae:69:d8:b9:75:63:cd:a7:91:
         97:45:6c:da:04:59:de:c2:ef:4b:8c:f6:8c:06:ba:7d:c9:4c:
         d2:45:60:4a:d0:42:91:a3:ab:5f:1b:23:8e:02:99:52:cf:cf:
         74:a2:0f:ae:a5:b9:f7:2b:25:8f:c6:40:0d:64:18:36:b8:22:
         45:e7:5e:d9:a8:5c:18:da:2a:87:fa:09:67:a8:62:65:ae:75:
         1d:8f:6b:98:f7:1a:d4:7d:7d:2d:a1:87:de:04:41:67:98:fc:
         d3:5a:f4:54:27:88:55:5c:13:b1:c3:0e:ff:0e:76:67:3a:cf:
         d1:62:ea:55:cb:99:d3:92:50:58:14:1f:0b:61:f2:7a:fb:4f:
         14:a2:32:d8:46:12:b7:dc:af:9e:01:31:d6:9c:bf:d7:f4:ab:
         4d:c8:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:12:27 2024 by rpki-client on console-fra.rpki-client.org