Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa
File:                     5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json)
Hash identifier:          YJc2+kWvdWA/kXFhyi0MQ//4H0VKpAswUUS2xTFSoEE=
Subject key identifier:   B6:FD:F6:72:C7:89:13:DD:DC:B0:42:67:54:A1:AC:69:2D:ED:58:D9
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285845BD48E2CD7AB54DFBC32EE710
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     29802
IP address blocks:        66.232.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e2:cd:7a:b5:4d:fb:c3:2e:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=18c88ef3-7cfb-46ae-a286-67ca583c0d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:06:15:61:68:a1:77:d2:f6:5a:46:d6:1c:
                    ab:38:96:49:15:72:39:79:d2:9f:c9:75:25:fa:f8:
                    db:d2:88:bc:45:bb:f3:53:95:ff:c8:64:35:4e:4a:
                    71:09:b3:8e:7e:07:2f:0a:ea:fe:91:22:4e:43:b4:
                    d7:ce:c1:12:cc:d9:16:9e:a7:f8:2d:da:b3:49:79:
                    62:e3:6c:bf:e0:95:55:f1:1a:26:ce:31:c5:af:d7:
                    89:c6:01:85:78:fa:b9:e6:24:0c:90:26:9c:8d:57:
                    56:d7:99:c2:e1:d3:1d:60:71:f6:02:be:0c:72:92:
                    45:26:a8:20:5f:91:03:d5:31:68:8f:6c:4e:e8:f6:
                    9e:e2:0a:9b:6d:80:8e:d8:69:58:a2:c8:63:68:f8:
                    04:da:a8:5b:92:85:27:87:d9:a6:07:d5:36:09:b6:
                    26:4c:9d:e9:27:82:86:f6:47:8f:4d:23:43:bb:86:
                    07:77:72:66:67:09:ea:48:77:1c:f5:04:72:87:00:
                    91:c6:56:49:15:5f:e7:26:6d:6d:cc:82:7e:51:d8:
                    6c:a0:76:ad:e0:30:d2:43:cd:7f:d7:9c:a6:6f:54:
                    9c:43:54:78:0b:f9:ef:25:9d:61:76:50:de:43:d8:
                    32:4d:10:f7:d6:b4:ea:99:e4:c4:1c:03:1d:e0:eb:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:F6:72:C7:89:13:DD:DC:B0:42:67:54:A1:AC:69:2D:ED:58:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bc:a1:46:a1:d7:11:c4:eb:1d:3e:b5:d9:1e:bc:98:30:87:
         31:42:f3:2d:a9:bc:f2:24:97:67:31:81:9f:3b:37:71:43:08:
         df:25:79:71:c0:d0:22:17:bc:9e:27:4c:62:87:5a:1f:86:3a:
         0e:66:84:8e:52:45:15:06:a8:3e:82:32:4e:92:f1:2c:65:a1:
         7a:3f:63:23:c2:82:ec:b7:6e:99:1f:65:b5:78:d9:e3:e8:87:
         32:57:78:0f:29:3a:bb:97:97:8b:d8:70:b6:73:98:50:f6:ef:
         53:da:99:28:42:6a:b3:e3:5b:04:31:b1:8e:1e:21:10:4f:f7:
         5f:9a:74:00:9d:f6:0c:a3:29:92:74:dc:7f:94:5a:20:5d:38:
         92:4f:68:3a:04:c2:35:8b:5d:f5:84:7b:d8:fb:3a:53:3f:d7:
         84:81:ce:8e:24:2c:02:37:f6:9a:d1:21:81:9d:fe:83:12:c8:
         84:55:50:33:54:0f:4b:e7:5a:dd:a6:c6:47:a1:37:45:79:27:
         b3:29:e4:02:6f:c2:15:8d:51:f3:68:64:c9:e0:dd:19:d5:87:
         c1:8d:e9:b0:f2:44:8f:09:b3:13:2c:3f:cc:14:fa:cb:a5:b6:
         0b:5f:c5:7a:c1:62:0a:ca:ca:35:c3:8a:d9:43:8f:42:11:f4:
         a8:a4:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:24:04 2024 by rpki-client on console-ams.rpki-client.org