Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa
File:                     80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa (raw, json)
Hash identifier:          z5buKoVoZGrBdo9usNeIMIxffSU1D6zzlbhVYBZx9U8=
Subject key identifier:   2E:CE:B8:C6:48:7B:3E:CD:7D:25:81:7D:83:87:55:00:CC:49:4F:0E
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285846DD9EF24FEC1E055F41EA1E80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa
Signing time:             Tue 13 Aug 2024 19:46:55 +0000
ROA not before:           Tue 13 Aug 2024 19:46:55 +0000
ROA not after:            Mon 11 Nov 2024 20:46:55 +0000
asID:                     398787
IP address blocks:        50.62.88.0/22 maxlen: 24
                          50.62.172.0/22 maxlen: 24
                          50.62.194.0/24 maxlen: 24
                          50.62.195.0/24 maxlen: 24
                          50.62.198.0/24 maxlen: 24
                          72.167.25.0/24 maxlen: 24
                          72.167.230.0/24 maxlen: 24
                          72.167.241.0/24 maxlen: 24
                          72.167.242.0/23 maxlen: 24
                          160.153.0.0/24 maxlen: 24
                          160.153.136.0/24 maxlen: 24
                          160.153.137.0/24 maxlen: 24
                          160.153.138.0/24 maxlen: 24
                          192.169.220.0/22 maxlen: 24
                          198.12.144.0/23 maxlen: 24
                          198.71.188.0/23 maxlen: 24
                          198.71.190.0/23 maxlen: 24
                          198.71.232.0/24 maxlen: 24
                          198.71.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dd:9e:f2:4f:ec:1e:05:5f:41:ea:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 13 19:46:55 2024 GMT
            Not After : Nov 11 20:46:55 2024 GMT
        Subject: CN=8df1bc72-61ea-41c2-bdcc-7ba0c1a1d0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:97:43:6c:0b:e1:25:7c:04:8e:bb:ce:e7:
                    ad:58:a3:89:63:0e:4e:69:c3:05:88:e3:4b:86:b4:
                    ec:a7:4f:d5:2e:57:39:66:a6:12:29:85:99:0d:44:
                    52:51:81:70:f4:cc:f6:e8:e3:ed:7f:32:57:15:db:
                    00:75:33:d8:38:d3:aa:e8:47:2f:09:ab:ca:65:b8:
                    c5:5d:44:0c:33:02:ef:7c:71:3d:77:74:bf:0f:44:
                    5b:5b:2b:5d:74:c8:cb:00:46:de:f0:48:16:8c:a1:
                    1d:79:36:75:85:36:13:e3:0e:4f:f0:c3:4e:9e:e6:
                    c6:cc:2c:1a:68:70:05:5e:8d:7d:64:93:b8:69:95:
                    3c:46:8d:bd:ae:bb:fb:e8:cc:00:b1:ba:db:42:cf:
                    0b:19:a9:ab:ea:db:75:0e:b2:1c:2b:05:a4:d8:94:
                    59:a9:d2:b1:67:03:bf:af:db:f8:57:45:b5:a5:03:
                    5c:1e:a9:c9:23:fd:0b:bc:bc:a7:17:52:7d:fa:57:
                    21:d2:80:90:ce:d9:56:38:01:ec:8c:be:80:f9:58:
                    70:b6:f2:aa:8e:31:7b:b7:a6:1f:01:0f:6e:23:20:
                    a1:ff:fc:e6:1d:17:d7:57:7c:5d:78:fb:ec:b8:76:
                    53:4a:21:59:66:26:e7:b0:80:b4:52:ab:bf:5b:24:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:B8:C6:48:7B:3E:CD:7D:25:81:7D:83:87:55:00:CC:49:4F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.88.0/22
                  50.62.172.0/22
                  50.62.194.0/23
                  50.62.198.0/24
                  72.167.25.0/24
                  72.167.230.0/24
                  72.167.241.0-72.167.243.255
                  160.153.0.0/24
                  160.153.136.0-160.153.138.255
                  192.169.220.0/22
                  198.12.144.0/23
                  198.71.188.0/22
                  198.71.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:63:fb:bd:ef:7f:37:e5:4d:f0:08:3a:25:1d:51:1e:b3:19:
         06:c9:50:d4:ab:d4:88:67:62:96:8a:7f:e8:b5:bb:ae:c2:47:
         97:1e:3e:57:6e:4b:7c:e5:76:ed:89:17:9b:20:39:ee:1e:e6:
         ab:55:b9:ff:67:d2:fe:a9:08:53:f7:25:bf:bd:33:8d:a6:73:
         c9:1c:22:b5:cc:ce:b0:26:95:0f:10:66:c7:e9:3e:73:08:63:
         80:69:26:26:82:5b:43:61:3d:c4:b9:e9:d6:a6:62:81:c3:ca:
         6a:2e:87:13:39:64:ca:02:6d:49:bf:54:2c:31:f0:f8:70:45:
         ab:14:7a:c1:34:ac:08:2b:66:af:5f:31:9c:db:e1:5c:ff:58:
         d2:9b:03:d7:fd:ea:77:20:0a:d4:03:f5:d1:c3:cb:c6:d3:e1:
         d7:6f:a8:93:9e:8e:7f:c8:29:af:db:5c:cd:30:53:5e:e9:8a:
         0c:25:cd:4b:32:56:a2:7c:02:34:92:64:00:2f:67:40:0f:7b:
         a8:b1:0e:d8:62:ef:92:56:70:9b:e8:9e:ad:06:f8:18:da:f5:
         c5:d7:0b:a0:72:7d:ce:6c:07:7e:de:25:77:41:83:4e:22:a9:
         ad:db:0b:22:14:64:6f:66:47:af:eb:44:bc:7c:10:3f:38:ed:
         1e:54:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 18:16:55 2024 by rpki-client on console-ams.rpki-client.org