Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
File:                     d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa (raw, json)
Hash identifier:          4POhA//QStf/7JVptpwPj/uUb05oRyoHZtXhpw1Sr7E=
Subject key identifier:   3F:21:88:F4:76:D8:3B:BE:BB:7B:9C:97:A5:34:80:42:26:EC:3D:67
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F43285845BD48D5446168F0AB1BBEE940
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     13329
IP address blocks:        50.115.149.0/24 maxlen: 24
                          50.115.151.0/24 maxlen: 24
                          199.180.86.0/24 maxlen: 24
                          50.115.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:d5:44:61:68:f0:ab:1b:be:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=373f5327-15fd-4a49-b346-a35fa5dd44ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:a8:87:a0:c4:d8:df:6f:14:77:dc:88:9e:
                    71:31:11:d8:f0:3f:f5:0c:43:8c:a3:27:9c:86:13:
                    a1:1b:0b:32:73:2b:75:bc:d5:d2:f0:7f:9e:85:85:
                    10:ec:02:8f:3b:58:2d:b1:a2:cf:68:3e:b8:b0:65:
                    58:e9:6a:81:5c:a9:00:4a:25:d0:6e:6f:ba:0a:a2:
                    2a:11:e4:13:44:55:77:0c:dd:67:1c:a7:be:1d:8f:
                    aa:cc:b9:9e:c3:ab:7a:8c:27:a1:e8:23:5c:b6:7a:
                    0d:4b:70:62:85:8d:6f:85:b1:17:2b:58:b2:0e:34:
                    2c:41:38:44:c0:44:b3:ea:71:fb:6c:86:17:7b:a9:
                    c9:4d:6a:6d:68:3f:52:9f:da:11:dc:c3:54:70:9d:
                    22:3a:8a:2a:f1:ca:f0:46:85:c3:e8:dc:1e:5c:55:
                    f7:7f:1e:94:b3:a3:23:81:1a:95:59:05:b2:44:92:
                    94:31:79:e8:1f:2d:c0:ac:1a:c9:00:40:ad:ce:b9:
                    e1:b4:f3:82:7f:ef:4d:5c:a9:df:93:9b:43:21:85:
                    af:e7:a5:3f:05:0e:22:d1:10:6f:b2:d2:17:51:a2:
                    94:9b:bf:e7:b7:fb:19:d7:fc:92:8a:e3:f9:c3:db:
                    4f:58:77:b1:c5:cc:28:fd:cd:54:61:02:7a:a4:f4:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:88:F4:76:D8:3B:BE:BB:7B:9C:97:A5:34:80:42:26:EC:3D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.149.0-50.115.151.255
                  199.180.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:b7:1c:12:95:61:d4:98:86:7e:60:81:a5:c0:a0:8a:7f:
         a8:fe:29:33:76:7b:44:c0:f5:cd:de:08:27:f0:a8:1d:8d:f3:
         35:ca:3d:8a:09:dc:32:04:42:45:b3:c6:18:4f:cb:99:46:1c:
         d3:ab:c5:ac:9b:17:27:69:ec:27:14:12:7b:91:32:e3:5a:dd:
         06:1c:ae:64:b1:b0:32:14:a0:ce:91:79:f8:a5:72:c2:4d:49:
         ef:65:95:7d:7f:89:be:a2:3a:d5:97:1e:5e:60:c6:25:0a:3a:
         ad:a9:5b:8c:00:9e:e8:c1:5c:15:ef:52:79:ee:7d:70:ee:22:
         14:60:6d:21:b8:28:7c:ad:55:69:0c:f1:55:8b:33:43:f2:16:
         08:05:7d:8b:6f:97:ed:c2:23:a7:51:5f:3d:ca:74:0e:40:ee:
         10:fd:00:1f:51:65:7f:3c:8e:b3:1b:26:14:4d:69:d0:0f:ac:
         fa:4d:ee:b4:38:46:9c:bf:42:4b:e9:21:4b:c0:44:43:54:d9:
         74:4e:84:33:6b:fb:58:15:92:a5:c0:66:fc:d0:56:26:10:98:
         60:55:e0:9a:8a:22:d7:c9:78:d6:cb:56:3c:70:67:0e:4b:b1:
         6d:3b:ad:4f:82:30:77:4c:d6:0e:bc:1a:e0:90:f4:04:c6:03:
         54:7d:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:50 2024 by rpki-client on console-fra.rpki-client.org