Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb916a3c-2c8d-3d88-a63c-90671a915524.roa
File:                     cb916a3c-2c8d-3d88-a63c-90671a915524.roa (raw, json)
Hash identifier:          KYqBB7krGz93Klx8XO3XEb4yCUClFSxY0GRm0k8KSg0=
Subject key identifier:   DA:A8:6C:92:B1:25:C7:E0:D0:B2:D6:91:61:F2:15:74:51:41:75:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845A41D857A59704DE47425B880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb916a3c-2c8d-3d88-a63c-90671a915524.roa
Signing time:             Tue 23 Apr 2024 12:38:08 +0000
ROA not before:           Tue 23 Apr 2024 12:38:08 +0000
ROA not after:            Mon 22 Jul 2024 12:38:08 +0000
asID:                     7342
IP address blocks:        199.7.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:1d:85:7a:59:70:4d:e4:74:25:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 12:38:08 2024 GMT
            Not After : Jul 22 12:38:08 2024 GMT
        Subject: CN=9558c750-d3b0-4ea8-a8dd-6f522254bc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:c4:a9:52:55:4e:ab:0c:73:8f:96:3e:53:
                    ba:eb:07:7b:60:03:84:f7:14:04:b2:03:57:f9:5d:
                    1b:0b:ea:bb:2d:f3:f8:a4:6a:76:58:ae:0f:53:1e:
                    42:37:63:df:51:26:f4:00:83:c5:98:4f:16:02:56:
                    fd:66:8f:ef:6f:4b:6c:01:8b:0f:6a:e4:7a:e5:29:
                    35:75:af:7c:7e:99:03:87:7a:67:d6:54:19:ef:cd:
                    b7:32:59:16:e5:2a:35:d9:c4:1a:a4:a0:91:94:42:
                    a7:9f:4f:34:35:dc:d7:ce:44:7d:c3:b9:bc:ff:13:
                    e5:a9:78:21:26:91:e0:16:fb:ec:21:d0:c3:05:c8:
                    ab:0f:e4:3e:bd:35:03:43:40:d2:37:49:df:05:78:
                    f7:f7:7a:ef:30:28:d2:67:ae:0a:4c:ad:b9:6c:88:
                    08:cd:a7:c2:3a:34:71:e9:2b:c1:6e:ee:db:1f:04:
                    30:7a:bd:d2:11:87:3e:7f:05:a9:a9:1e:da:ec:21:
                    2e:0e:9d:39:32:1b:0b:2a:52:e6:13:8d:66:40:8a:
                    70:ba:10:80:2c:57:7c:ca:1e:5b:44:32:85:43:53:
                    f8:34:71:ca:99:bf:6b:c3:a5:ef:a3:cf:49:11:bb:
                    e7:b3:f9:32:57:bd:11:3d:5a:02:8b:73:fd:1f:3c:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A8:6C:92:B1:25:C7:E0:D0:B2:D6:91:61:F2:15:74:51:41:75:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb916a3c-2c8d-3d88-a63c-90671a915524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:86:f6:ae:be:3f:cf:ab:55:27:f4:82:c9:b6:15:d8:1d:c8:
         6c:85:c3:71:ad:83:be:73:0b:49:4c:9f:78:03:38:4a:44:ff:
         d7:b5:db:72:86:50:3a:dc:dc:b4:1d:6d:54:bb:5d:59:ad:c3:
         df:6f:0e:b7:e3:49:a1:95:d6:87:bd:85:df:34:f8:5f:3c:7b:
         01:b6:95:27:59:dd:c9:6e:2f:5e:c3:8d:31:d3:86:6e:9b:06:
         87:88:71:8c:63:42:5c:12:d9:47:6c:4b:a4:6b:c9:cf:53:17:
         0a:dc:5e:ea:6a:a6:05:c8:26:41:43:84:62:f9:61:17:78:2e:
         8a:a4:bc:67:3a:71:b7:46:32:a4:47:95:7a:42:b5:b5:f3:6d:
         1f:6c:f1:1e:8e:20:d0:c4:84:0e:44:d9:e2:f3:f3:3e:13:5a:
         22:c2:de:6d:a4:32:48:e7:e5:8c:c0:c8:59:91:36:22:70:3e:
         6d:d1:01:e7:7f:16:95:b6:9c:36:e1:99:17:c1:f5:f2:7d:37:
         b2:52:a1:4d:a3:24:1c:be:62:8d:df:89:18:10:97:43:30:90:
         12:75:99:16:4d:a1:8c:07:9a:dc:bb:df:8f:8a:1e:c7:9d:36:
         53:48:00:6f:d9:30:16:1b:d3:9a:76:92:16:5e:ee:35:43:0f:
         96:a9:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:05:23 2024 by rpki-client on console-fra.rpki-client.org