Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
File:                     5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json)
Hash identifier:          tGr/eRCoQsnwaDR/vSdEVWH/WiTOIwTy1YqoWnO8B5Y=
Subject key identifier:   50:A4:4A:7F:BD:C5:B8:F0:E5:A6:57:13:A7:F4:CB:6B:C9:D9:C6:04
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F43285845ECBE7F39D45B0EFC655BAC80
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     64227
IP address blocks:        50.20.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:7f:39:d4:5b:0e:fc:65:5b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=2d2c472a-a73c-48c1-9c56-ef16fa680034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:b6:fb:f1:05:c9:16:81:69:56:d8:5c:60:
                    39:1f:b0:3a:6e:dc:88:18:75:94:9c:d6:df:21:26:
                    3e:d7:1c:35:0a:bc:f1:84:78:9c:f5:65:c3:6c:22:
                    45:c3:80:a4:e8:d4:06:24:d0:88:66:36:d2:eb:a8:
                    ca:80:f2:d2:00:3b:f4:7a:6b:ed:8b:2d:cd:71:e7:
                    21:39:9d:94:cf:d8:61:a6:f0:60:99:20:90:6d:31:
                    45:0e:1a:ae:21:6f:da:ea:35:7a:91:19:11:bf:d5:
                    d1:64:83:ae:b4:99:e5:f9:4e:45:41:f1:62:f4:4d:
                    16:34:8e:2c:ad:21:ce:8c:33:91:6e:2d:95:d6:0a:
                    da:48:cb:bb:35:90:32:28:2e:d6:53:b4:65:06:16:
                    84:98:89:48:14:79:49:1d:54:28:33:32:e9:4f:39:
                    0d:20:df:42:16:cf:69:3b:b2:fd:aa:70:35:a3:84:
                    cd:ad:4f:09:64:55:65:a0:bd:8d:fb:b7:3b:d8:59:
                    1c:7f:a3:05:fb:07:7f:22:0d:ec:e2:92:da:db:a4:
                    36:60:e5:7e:ed:94:10:fb:da:e8:3c:01:4f:fb:c9:
                    e1:a4:15:8f:30:da:e2:fd:a6:21:a9:f7:e1:f1:33:
                    65:7e:05:8a:86:e1:a1:b4:c8:66:ea:7a:3b:f7:ae:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:4A:7F:BD:C5:B8:F0:E5:A6:57:13:A7:F4:CB:6B:C9:D9:C6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:85:7c:06:9f:81:fc:91:ce:21:c7:9e:c2:9f:a9:27:b3:
         0a:96:bd:30:9b:1d:65:35:fc:40:b3:b1:b3:dd:32:4b:0b:62:
         90:13:33:0e:b9:5c:a7:70:36:58:78:5d:97:e9:9b:d5:d8:d5:
         9c:60:28:c0:95:63:ae:22:01:7d:ee:2a:d3:4f:d4:67:7e:7b:
         f4:e3:d5:9d:9c:5c:46:14:84:61:d3:20:c5:94:3d:09:54:5a:
         c5:5f:eb:c1:3a:be:f7:f7:61:1b:f6:a7:c9:5a:d8:45:13:d5:
         34:db:b7:aa:fa:e3:c2:9a:7a:37:4f:20:78:0a:d7:14:be:ec:
         4f:b1:c1:39:ed:47:9c:d4:a6:7b:9c:50:a3:9c:06:9b:f0:e2:
         a7:54:db:0b:31:47:84:07:6a:55:b9:a7:91:12:80:af:e8:60:
         26:04:cd:70:2f:b6:57:e8:6c:94:4d:8c:1e:0b:ee:22:c8:d2:
         31:6b:37:ff:eb:80:7c:77:7a:e3:08:c5:f4:d3:07:8d:29:bb:
         d5:0a:d2:7d:f0:d3:ed:17:9c:c0:f6:52:76:2a:54:b8:4e:32:
         8b:25:6e:49:77:40:f9:77:25:a6:c7:91:2f:a5:ce:5a:3a:3b:
         84:54:72:85:af:dc:55:09:f1:cd:9c:d3:84:bd:54:28:fd:d6:
         f4:e7:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:28 2024 by rpki-client on console-ams.rpki-client.org