Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
File:                     d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa (raw, json)
Hash identifier:          EbS1pMkqkSiI8gBiQdUy25GitYeXv/NVjSFR7zvV0nU=
Subject key identifier:   AF:36:FC:BE:30:BC:1C:B2:51:08:9D:BE:67:49:B4:21:E7:7A:28:27
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F432858477BF659E8B0278B628273D980
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     13329
IP address blocks:        50.115.149.0/24 maxlen: 24
                          50.115.150.0/24 maxlen: 24
                          50.115.151.0/24 maxlen: 24
                          199.180.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:59:e8:b0:27:8b:62:82:73:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=0d6bebed-6f8e-4cb4-82a4-e5ba51e82dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f6:9a:5b:52:11:74:00:d5:d9:54:cd:fe:70:
                    bb:08:14:ec:af:8a:ac:fc:80:f9:ba:c2:ad:ca:0a:
                    52:02:cd:cc:5a:4e:70:09:70:76:ff:0f:b2:50:d9:
                    63:88:73:26:1a:21:fb:b5:c5:ae:3b:00:30:82:f8:
                    3c:1a:fc:12:d5:b5:81:66:8a:4f:ad:37:13:df:a3:
                    94:12:75:c1:7a:31:00:28:e0:f4:4a:84:1f:48:03:
                    20:fa:27:88:a0:75:70:15:37:2b:13:94:53:30:ed:
                    45:dd:22:90:ff:d6:4e:05:fd:20:02:6a:cd:34:a9:
                    fd:2b:63:2e:3a:18:21:84:1f:2e:f2:d3:b9:a2:e5:
                    63:01:70:d7:28:1b:dd:f6:56:92:a7:28:ff:61:d3:
                    f9:cf:b7:d0:1b:79:84:b8:ed:43:20:cb:cd:79:94:
                    73:74:de:ba:ad:be:a8:66:44:bd:20:7f:46:9d:33:
                    2b:c4:eb:b5:b1:b0:a9:9b:70:d5:27:10:7d:a1:57:
                    32:59:64:72:3a:70:b9:ef:8a:ba:9b:56:d8:08:b6:
                    5a:bf:eb:65:4c:f6:fb:a4:08:cc:0d:04:93:ff:29:
                    58:ee:4a:17:32:db:20:90:5b:5d:7d:bd:ea:1f:3f:
                    a0:18:d6:fd:f8:bf:9e:ff:72:d1:37:f0:48:f5:39:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:FC:BE:30:BC:1C:B2:51:08:9D:BE:67:49:B4:21:E7:7A:28:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.149.0-50.115.151.255
                  199.180.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:de:14:a1:5a:4e:f8:59:27:fc:49:f7:b4:c7:12:cf:ab:d6:
         b8:98:af:51:15:40:bd:bc:2b:5d:26:73:f2:af:3d:9b:45:d8:
         36:c7:0b:5b:a2:bf:ab:1f:08:8f:77:59:a8:43:d8:b4:30:f9:
         da:1b:01:6a:b2:8c:0c:6f:ac:01:89:66:44:32:b0:3c:95:9f:
         a8:4f:8e:d2:e6:ea:8f:d1:5f:0f:60:d5:7a:00:18:76:c2:e5:
         b0:01:84:c1:aa:1c:2d:20:51:17:5b:22:ee:12:10:9a:b3:1b:
         a8:89:23:4e:ff:a9:eb:42:cb:a8:af:01:1e:2a:2d:8c:c0:ad:
         1d:0b:d0:8f:b0:b2:dd:f1:5d:b7:34:39:9d:6d:5a:ee:1b:1e:
         d5:3a:46:30:81:04:63:df:6d:ea:ce:1b:e2:b0:97:39:ed:ed:
         d2:32:35:3d:4b:77:78:bf:e3:b3:b8:83:61:ce:b6:16:6d:26:
         3b:09:eb:35:2b:fc:e3:24:e7:70:5f:93:38:ef:8c:1d:1c:d3:
         2c:bd:82:06:c4:1a:f5:3e:30:25:84:51:dc:71:2c:ed:00:39:
         f4:57:65:b1:40:2a:41:0a:4f:58:08:51:c8:f8:3a:43:c7:6e:
         a6:a6:9f:97:21:53:61:37:c8:3c:b1:00:71:c1:1c:b3:a9:43:
         7a:11:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:39 2024 by rpki-client on console-fra.rpki-client.org