Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa
File:                     9611d087-962b-31a2-9513-bcb228516dce.roa (raw, json)
Hash identifier:          Y5AmcK7OxWQxev+LqiodrOlQ3h8GtlmzG4QAO0N+cPk=
Subject key identifier:   75:9E:F9:85:C3:E8:CC:6B:D9:B7:B4:78:AB:7C:A2:F7:E5:0F:71:C6
Certificate issuer:       /CN=50deb463-b2f6-472b-b250-97bddd7db9cf
Certificate serial:       010D0C9F432858455E5DA1F4CBD896C4A9ECDA00
Authority key identifier: BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     397423
IP address blocks:        173.0.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a1:f4:cb:d8:96:c4:a9:ec:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50deb463-b2f6-472b-b250-97bddd7db9cf
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=f411a1b7-4c0f-4bb2-82f0-9471417be2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:1a:fe:76:94:dd:69:de:2c:f5:2e:dd:79:
                    32:97:53:e5:39:c0:22:e2:d3:b3:c3:1d:17:d8:57:
                    37:e1:16:23:7a:26:23:f7:db:2c:e7:9d:35:f9:ad:
                    d0:32:97:03:2b:95:db:e0:12:c0:f4:73:79:f3:4f:
                    c8:8f:81:d4:3f:44:18:d3:46:c1:4a:8b:c6:d3:d2:
                    7b:d1:e1:df:a8:05:24:64:55:d9:01:d4:ce:d4:89:
                    f4:19:4f:d1:53:2d:a5:f8:15:c0:e4:0a:90:4a:b0:
                    76:d7:f9:5e:f8:16:49:ab:34:f5:cd:2e:11:ac:94:
                    3c:e5:2c:9c:8f:e6:11:f7:68:50:4d:8b:58:8a:8c:
                    41:26:80:05:e2:81:96:19:43:be:27:9d:90:5a:95:
                    0c:e5:f4:5d:e3:cf:f0:f2:8e:2c:d2:1a:03:f2:47:
                    c4:2a:09:ed:af:2d:05:72:30:8c:a1:ed:0c:6c:27:
                    e2:a0:11:e3:cd:43:3f:71:6d:67:88:7b:20:67:14:
                    36:24:03:0b:b6:a3:8c:df:64:8a:d0:bc:88:26:a7:
                    77:f9:ae:0c:f5:c2:51:fa:41:18:67:ba:85:5a:55:
                    c3:25:0c:10:f8:ea:0c:43:0d:c3:bc:bd:eb:68:fb:
                    0c:4d:8d:2d:2f:fc:c6:2a:00:7b:bb:f5:89:7b:54:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:F9:85:C3:E8:CC:6B:D9:B7:B4:78:AB:7C:A2:F7:E5:0F:71:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.crl

            X509v3 Authority Key Identifier:
                keyid:BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:23:1a:fc:99:04:c6:f4:b1:93:4a:d6:51:10:67:01:42:
         59:64:1e:79:85:25:02:4e:3f:6b:e2:25:a4:32:51:af:df:a4:
         19:f5:06:34:1e:22:94:50:95:2c:31:55:a5:56:f0:51:de:eb:
         62:4a:ce:c1:df:a9:ea:3e:26:40:ab:11:36:5f:e1:21:1c:37:
         99:0e:b8:ec:0e:94:08:c5:e4:7b:4e:6b:e5:94:93:14:34:38:
         4b:7c:a2:9e:f6:4b:38:29:94:a7:ae:2e:c0:ab:61:c1:b6:bb:
         eb:c2:e3:56:c3:2d:9b:5f:4d:06:71:82:cd:6a:df:f6:a2:54:
         59:cd:10:93:54:2c:47:4a:02:a6:89:bd:b2:db:9a:0f:31:ff:
         05:9e:d5:bd:95:97:88:68:6d:85:2c:93:11:04:2d:f4:9e:0c:
         ac:6f:5c:b2:4b:26:f6:72:7f:c5:39:69:24:3c:99:1e:1e:2a:
         35:f6:d5:f8:b6:31:c1:5d:88:a8:9c:5b:1d:d4:da:09:f4:d9:
         a7:71:a9:48:aa:83:52:90:8c:b8:07:20:6b:1b:cc:51:ae:06:
         e2:34:5b:36:db:0b:24:a5:c0:3a:f1:7e:0f:8e:4d:93:08:9f:
         3f:8f:dd:f9:7a:d6:13:91:b8:56:cf:56:90:34:fc:fc:d5:9a:
         07:c9:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:05 2024 by rpki-client on console-ams.rpki-client.org