Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/48bf2040-4276-30fa-8aaf-39ebad127910.roa
File:                     48bf2040-4276-30fa-8aaf-39ebad127910.roa (raw, json)
Hash identifier:          Ry+m0RQNy8GE0p9HdnBrIThAs2TvDx6Y5pLYj9nmPJs=
Subject key identifier:   06:1F:7E:8C:F2:0B:C2:82:C1:88:EC:EC:03:A0:3E:83:9A:A2:EF:34
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285844F19AAFC16D573F04580DB180
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/48bf2040-4276-30fa-8aaf-39ebad127910.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     13213
IP address blocks:        209.95.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:af:c1:6d:57:3f:04:58:0d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=cef2c253-3d1d-45e0-a450-63e82c797622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:86:69:e8:7c:91:81:38:73:5a:d4:ed:0d:
                    c8:aa:5d:66:58:4e:2e:6d:19:c9:62:81:1c:a2:6e:
                    ea:67:c3:0a:5e:5e:4a:ef:1d:33:83:31:ce:d0:9a:
                    d8:09:f3:87:27:10:c9:f1:32:67:af:7f:1a:3d:7e:
                    76:c4:d2:b8:16:b2:1e:cb:38:39:bf:91:2d:4d:b0:
                    c7:18:b1:3c:f3:2d:96:2f:4a:2c:82:aa:b2:6d:5f:
                    5b:22:0f:59:e8:ab:97:5e:6a:47:7f:6d:81:5c:b1:
                    e7:03:2e:6a:b5:b4:ce:09:f5:dc:40:06:36:77:4d:
                    5e:0a:74:a0:54:32:f9:97:6b:80:e5:21:73:c4:a7:
                    20:a9:cf:42:2f:54:78:90:79:5b:e3:bf:3a:6e:d4:
                    a3:08:da:32:1b:56:24:43:60:20:25:05:b7:2b:21:
                    a9:bd:25:a0:a2:58:15:97:e4:5e:bf:c1:62:61:9e:
                    f8:96:b3:4a:7d:e0:54:a3:8f:81:f0:2f:15:58:4a:
                    2c:e4:4c:ca:8c:e8:62:58:07:68:88:74:a5:b7:b1:
                    76:36:bf:e6:9f:a7:49:55:2f:99:cb:d3:97:ce:a7:
                    bc:22:c4:43:56:a1:e8:42:dd:f2:d1:7e:49:e7:05:
                    c0:7c:7b:dc:af:61:9d:7f:e0:82:90:ae:72:86:0a:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1F:7E:8C:F2:0B:C2:82:C1:88:EC:EC:03:A0:3E:83:9A:A2:EF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/48bf2040-4276-30fa-8aaf-39ebad127910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.95.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:f0:29:cf:cf:97:46:86:fa:06:49:10:62:b3:db:b5:7e:
         f9:e3:fa:3e:fc:b0:0b:a3:79:b0:96:b4:59:df:c5:10:b3:05:
         18:5f:18:47:a3:7a:bb:78:19:25:3a:98:45:aa:fe:bc:7e:73:
         b6:2e:f2:9a:70:4a:5c:d3:3e:9d:a7:40:25:88:db:42:10:98:
         5a:0f:4f:1b:bf:f4:44:0e:9d:d3:14:2c:68:6a:91:1a:bf:cf:
         39:6f:63:62:0d:02:cb:4a:dc:f4:1f:bd:68:b5:1a:4c:89:f6:
         2e:c7:c2:8b:6d:b6:6f:a9:24:62:d1:65:c3:45:ec:60:01:26:
         df:77:49:9b:87:80:fa:92:bf:ee:2b:9c:76:42:47:e4:dc:9d:
         4b:69:b5:82:5f:5a:b7:33:b0:b1:e3:e0:58:03:b7:1e:a1:45:
         18:b1:58:96:1a:5d:fe:fb:9b:43:e0:64:4f:ca:00:6d:1a:32:
         bc:03:e9:e8:ea:20:7d:f4:63:09:81:e9:4c:4c:8c:5e:68:bd:
         ea:9e:49:0b:76:53:5f:92:67:96:89:9f:12:94:08:1d:51:da:
         67:0c:1d:e0:3d:b4:f8:0a:f9:bd:a4:5b:d9:34:d5:0e:f2:9c:
         3c:c9:0f:18:86:99:72:14:2b:eb:38:99:5a:a3:79:86:95:0a:
         46:4d:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:41 2024 by rpki-client on console-ams.rpki-client.org