Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/c96683e2-6a57-3d62-a4c0-fa95e20eea29.roa
File:                     c96683e2-6a57-3d62-a4c0-fa95e20eea29.roa (raw, json)
Hash identifier:          ogvPanGLgaHU6SJo73ko53yrtWCJT+4GXlBerIgEC8Y=
Subject key identifier:   01:F2:CD:B2:72:F8:29:58:BB:E9:CC:73:AE:AB:26:F1:53:F8:1F:B7
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F432858477BF65A6FA4A5ED66C899AD00
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/c96683e2-6a57-3d62-a4c0-fa95e20eea29.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     13329
IP address blocks:        50.115.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:5a:6f:a4:a5:ed:66:c8:99:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=dae8606d-d5de-4cff-ab30-6780771deeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:65:9e:29:a5:b2:53:d0:4d:85:67:49:2b:
                    5c:e7:93:d9:7f:9a:38:4f:6f:e4:3e:e1:e8:dd:00:
                    6d:66:57:f1:5c:7c:7f:f2:fc:d7:96:4f:97:6e:7c:
                    6d:cc:0b:0f:e8:24:c2:7e:19:f4:e6:26:65:5e:d4:
                    d4:de:69:51:ae:71:e4:06:02:8a:61:6d:5d:9f:9d:
                    e6:3c:a4:9f:f0:80:e5:5f:28:9f:0b:61:0a:d5:ad:
                    16:f4:1a:4c:ed:be:ab:04:db:c1:07:9f:ab:61:de:
                    0c:bc:f9:36:95:01:25:ff:7a:d9:58:43:ba:dc:e4:
                    6e:93:08:18:92:30:bc:b3:e2:1a:2a:0d:8d:e6:60:
                    6a:c0:96:44:2e:43:72:9c:83:4d:18:60:0d:05:19:
                    98:b5:1a:d0:bf:52:63:90:e3:14:d9:eb:df:2c:8f:
                    04:51:f9:1a:4c:c3:4a:58:19:0b:c2:fe:27:e4:0c:
                    7a:9b:7e:08:0f:eb:d5:c4:b7:b4:80:b5:ee:d1:03:
                    46:d8:f6:de:6f:d6:dc:a6:df:5a:b0:4a:1f:b0:8b:
                    bc:8b:00:ff:7d:f9:21:47:66:bd:8f:4b:ec:07:46:
                    a1:a5:48:55:ca:da:60:ca:66:38:1c:0e:56:ba:f0:
                    f8:f8:ea:e4:b0:b7:e6:0c:b9:c8:4a:75:2e:5c:29:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:CD:B2:72:F8:29:58:BB:E9:CC:73:AE:AB:26:F1:53:F8:1F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/c96683e2-6a57-3d62-a4c0-fa95e20eea29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:5e:e2:2a:06:82:96:af:f6:0f:c7:8b:a2:ee:af:f8:9c:
         a5:00:a0:6b:82:52:3e:58:40:15:84:5e:c4:27:74:37:3f:da:
         7a:d5:ba:36:44:5a:f4:4d:cc:01:11:b3:bf:da:14:02:b7:29:
         20:f7:9e:da:42:0f:db:1d:ab:30:6a:89:9b:70:b7:b6:56:6f:
         5a:36:f6:fd:dc:26:76:f0:79:20:9c:85:92:14:7b:28:00:55:
         01:2d:f6:d2:8f:91:87:51:e5:45:9e:cd:b6:30:11:b5:7c:7f:
         1b:f9:a1:cd:06:ed:94:4c:af:e3:72:d9:75:58:75:f5:e8:fb:
         52:0b:1b:cd:d9:1b:cb:46:29:9d:d6:2f:f6:bf:be:e3:67:de:
         30:d4:1a:86:2f:47:03:e5:e9:f2:2e:fc:ec:3e:c4:f7:9e:43:
         db:44:ec:2b:7d:48:20:86:15:15:2a:29:6d:66:cb:a4:14:ae:
         c8:0b:7c:b1:1a:f7:c5:2e:c1:80:98:97:ad:6f:ac:8c:f8:37:
         5b:79:33:1e:5c:6f:e6:92:96:01:08:ca:84:5d:b9:40:17:40:
         11:28:85:96:ef:d8:ac:52:4d:f6:7c:e6:b4:de:ca:3c:ca:54:
         c2:15:24:5c:8b:ae:cc:c8:fc:0f:79:50:a6:18:bd:82:7f:73:
         32:1e:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:19 2024 by rpki-client on console-fra.rpki-client.org