Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
File:                     e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa (raw, json)
Hash identifier:          mL1GtzPdGXhl+dDXdoz8ybFQdIuTa61JqevakMBaK8I=
Subject key identifier:   1B:F3:41:1C:CF:94:F4:33:A2:6E:59:C4:6D:BB:E5:5D:1A:24:65:EE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858477230F1ED0EAE61466F9B6280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     212238
IP address blocks:        172.94.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f1:ed:0e:ae:61:46:6f:9b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=13451b79-8e66-4511-ad3a-3e624070812b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:0a:18:17:03:4f:cd:53:d7:b4:26:ae:63:
                    cc:25:1e:22:a2:44:8a:d1:f9:92:16:a8:73:04:a1:
                    bd:30:e9:32:3b:96:d1:15:41:64:c2:28:83:9c:82:
                    12:cd:0d:a3:7e:75:60:f7:bd:8d:7f:1f:b2:d5:e0:
                    db:9f:7f:3e:6b:c0:37:c0:ac:91:14:4a:a9:2e:68:
                    a2:37:d3:ad:83:8e:af:cb:50:34:24:30:f9:d9:86:
                    47:90:7b:37:33:b1:e2:1e:11:1d:d6:bf:27:04:e9:
                    c8:f0:79:f2:9e:22:d0:29:6a:7a:85:f2:f2:be:8e:
                    08:fd:e5:b9:88:06:4b:d7:98:3b:46:c8:6b:37:76:
                    d7:22:10:bd:38:54:bc:1d:de:df:b6:29:ed:f4:e1:
                    fb:c3:66:12:da:83:d4:e9:f7:c5:fb:f4:2a:e7:c6:
                    fc:e1:cd:24:ff:e0:06:d9:20:7b:06:29:09:79:2e:
                    1b:ba:1b:50:f9:fe:4a:3e:e9:4f:98:a9:26:46:a8:
                    51:92:ae:69:05:f7:f4:9e:19:27:9f:5f:24:91:7d:
                    31:91:56:79:bc:61:4a:6a:c4:36:d0:cf:3a:0a:41:
                    5a:4f:50:85:85:93:28:27:2c:13:d2:a9:14:f8:30:
                    04:80:d2:e6:e5:44:06:c9:5d:91:22:bb:7f:9b:5e:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:41:1C:CF:94:F4:33:A2:6E:59:C4:6D:BB:E5:5D:1A:24:65:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:cf:d9:e5:c3:6b:70:32:62:49:88:e5:a7:d3:ed:e6:20:
         36:d0:6e:7d:53:9f:8a:52:6a:85:41:6a:c2:e1:e8:04:4a:80:
         cd:48:7d:63:b0:9a:53:4e:9a:36:e8:01:4d:87:d4:47:fb:7a:
         9b:d1:39:93:73:b4:9d:2a:44:65:51:39:85:ab:a3:0e:b6:3a:
         35:1c:f5:52:94:ce:e1:0a:d6:3a:fb:3a:c0:aa:2f:52:39:70:
         e9:97:aa:66:f4:47:b7:57:c5:d5:66:7c:2e:c9:0f:0e:0a:87:
         2d:70:71:ac:f5:78:25:91:9a:82:9a:63:3e:6b:62:8b:e1:64:
         e5:78:37:8e:63:39:f5:8b:a5:1a:e1:2c:3d:ab:1a:ba:28:71:
         65:81:f0:44:02:cb:f8:79:64:f7:f3:2d:cc:39:5e:da:df:11:
         db:d4:3b:5e:08:96:0c:99:be:e3:06:a0:02:bf:6d:5e:fe:b8:
         b6:2b:13:56:25:6c:11:3a:b9:7f:ae:a0:0f:92:d4:6d:5b:42:
         3a:f7:c0:6c:83:0a:5b:a5:90:3d:83:91:fd:4d:66:12:78:df:
         e4:1b:e0:d8:59:ec:4c:ec:82:28:b5:36:f0:ab:90:f0:8f:b2:
         8a:e2:62:65:cb:92:14:f6:dc:2b:a3:ed:97:03:32:2c:6b:fe:
         19:4b:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org