Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa
File:                     ad23560b-502a-3050-bc78-08a9194af303.roa (raw, json)
Hash identifier:          t4+LB50FsSY5A+kmQelx+CZNzunI/cRQc4MtXk3hrZw=
Subject key identifier:   41:90:13:C3:A7:54:B4:F0:7D:D0:35:F8:F3:B7:95:FB:1E:4A:E2:FF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332DB1AEF4838781F98F680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        50.96.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:db:1a:ef:48:38:78:1f:98:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=231dd199-5f67-4306-9b77-3b0902e6db01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:dd:10:71:ea:a8:ff:14:72:f7:2f:00:5b:
                    83:59:82:45:33:bf:74:59:94:6c:52:42:26:7e:73:
                    f2:4c:af:ef:00:8f:88:83:a3:72:96:a7:b0:a7:3f:
                    90:a2:ff:a8:e2:3b:aa:6d:de:fe:85:de:e3:24:7f:
                    48:a0:30:50:5d:7c:9f:6f:ca:e4:28:6e:31:17:44:
                    1a:5b:26:57:b0:db:aa:5c:d7:eb:28:5c:59:3b:16:
                    43:36:b3:98:1b:10:a9:27:c6:da:60:d4:d0:3d:8e:
                    65:79:32:81:9e:50:c9:2b:8f:54:4b:2e:da:58:2a:
                    78:50:c0:da:8e:36:e7:68:9b:8e:07:7c:17:04:3d:
                    3b:5a:e3:7c:af:b4:d5:df:80:f1:25:5b:fd:36:87:
                    b1:87:38:02:c0:78:64:58:08:e7:ae:72:a4:03:59:
                    be:ab:07:97:27:be:b5:ae:6f:9a:8a:1a:8b:69:02:
                    87:1d:76:3a:e4:5f:33:34:dd:89:15:76:29:59:ca:
                    03:0b:55:da:be:d0:89:ad:a7:32:7c:e6:38:96:28:
                    b1:a6:03:48:b6:33:b2:b9:00:a7:d3:78:9a:a8:cd:
                    38:b4:34:28:b6:cd:c5:0e:24:19:bc:aa:24:3f:9a:
                    3e:46:9e:9c:4a:b4:37:4c:fd:cb:ec:11:35:37:56:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:13:C3:A7:54:B4:F0:7D:D0:35:F8:F3:B7:95:FB:1E:4A:E2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6d:82:35:34:8f:67:0a:67:9a:a7:66:49:df:ab:81:c1:10:
         d4:4c:ef:40:36:1d:21:90:3c:b8:56:7c:c9:a5:b0:dd:cc:73:
         e1:66:39:b6:e4:c1:ee:ab:69:b0:79:da:13:87:6f:bb:2d:1b:
         38:7a:a0:e0:98:9b:3e:62:70:00:01:19:39:fc:c7:6a:ae:7a:
         1e:e6:6d:4b:9b:76:98:10:5e:6c:53:e2:4c:f0:30:9b:45:84:
         16:12:fc:40:3b:24:f4:72:a1:c3:f5:f6:1b:2d:73:01:af:11:
         10:c3:98:08:af:dc:a9:cf:35:d8:a5:a9:e3:55:d4:3d:3a:6f:
         e6:29:39:a3:42:56:2f:61:fa:f1:e9:e9:34:02:0c:50:aa:fa:
         85:ff:bf:f2:b1:88:3b:c9:16:24:1b:03:a4:46:42:6e:a9:16:
         ea:c2:39:eb:ac:11:5e:84:4e:bf:31:89:ca:76:1c:43:e5:9d:
         77:16:95:97:40:58:42:22:c6:a7:c5:3e:45:4a:a2:ca:24:12:
         d1:15:3c:8c:3c:3b:d9:fe:92:aa:12:ec:57:32:7a:8a:8c:bd:
         32:2e:ba:58:53:06:8e:64:85:02:95:00:a2:2a:0f:a0:bd:23:
         bb:48:7c:a6:d5:5b:d3:58:c3:df:2f:f5:bb:ec:46:d3:83:e7:
         c8:fb:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:54:22 2024 by rpki-client on console-ams.rpki-client.org