Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cedd9e13-3539-3062-973a-ed1f034a9aa8.roa
File:                     cedd9e13-3539-3062-973a-ed1f034a9aa8.roa (raw, json)
Hash identifier:          /wdFAvEa6y35ZxEmEFG4kEB6NCOy3BO9B+hj3lAqpz0=
Subject key identifier:   C9:E4:07:21:45:C7:68:F0:D3:F3:1D:30:29:7F:97:36:C3:98:58:F4
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285845254041F8E6E55F6916329780
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cedd9e13-3539-3062-973a-ed1f034a9aa8.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     27017
IP address blocks:        50.106.0.0/18 maxlen: 18
                          50.54.128.0/17 maxlen: 17
                          50.45.128.0/17 maxlen: 17
                          50.43.0.0/17 maxlen: 17
                          50.39.128.0/17 maxlen: 17
                          50.38.0.0/17 maxlen: 17
                          50.37.128.0/17 maxlen: 17
                          50.37.64.0/18 maxlen: 18
                          50.39.64.0/18 maxlen: 18
                          192.183.192.0/19 maxlen: 19
                          192.183.160.0/19 maxlen: 19
                          50.126.64.0/18 maxlen: 18
                          50.123.64.0/18 maxlen: 18
                          50.120.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:41:f8:e6:e5:5f:69:16:32:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=c26fa0bc-b566-4a3c-a661-0608cdac8c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:12:f1:f6:01:07:07:91:73:18:16:e7:d8:
                    bc:d0:da:d9:f5:38:f4:ad:ca:c7:f4:48:98:53:1b:
                    ca:9f:60:04:e2:e3:ba:e8:c7:8f:de:63:fc:b6:e6:
                    66:78:60:65:5c:68:22:55:85:1d:4e:c5:26:ba:9d:
                    60:58:06:a8:43:6b:89:cd:c2:c0:d6:63:ed:b1:56:
                    3a:f4:65:b0:48:31:9a:ab:01:c2:40:ec:c5:a3:8f:
                    12:6e:0d:20:5f:50:fc:51:f4:28:f2:86:cc:6a:64:
                    ca:81:71:7a:8b:e0:4e:b5:e4:23:6a:8c:00:67:eb:
                    ca:d3:93:ec:05:ba:f5:97:8a:2e:f9:d1:c1:25:e4:
                    63:ec:ab:e5:61:c4:cc:79:1d:89:47:ee:89:59:ac:
                    75:e6:b5:2e:50:e6:35:47:3f:2b:4f:92:a3:36:84:
                    7c:7b:fb:62:a8:cf:92:a0:fb:81:a1:b4:29:0f:87:
                    4c:b2:40:3c:7b:b2:5c:1a:f7:70:24:bc:51:1b:1a:
                    56:a6:25:13:c7:ae:4f:92:8a:20:06:d8:4c:83:bb:
                    a2:ac:35:3c:f2:41:af:5b:ac:cd:2e:06:00:ae:76:
                    02:75:a6:e6:8b:c9:86:cf:04:b7:6f:52:75:ff:de:
                    6f:73:00:43:79:1f:d1:4e:8c:4f:37:63:19:af:b9:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:07:21:45:C7:68:F0:D3:F3:1D:30:29:7F:97:36:C3:98:58:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cedd9e13-3539-3062-973a-ed1f034a9aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.37.64.0-50.38.127.255
                  50.39.64.0-50.39.255.255
                  50.43.0.0/17
                  50.45.128.0/17
                  50.54.128.0/17
                  50.106.0.0/18
                  50.120.64.0/19
                  50.123.64.0/18
                  50.126.64.0/18
                  192.183.160.0-192.183.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:bf:57:15:0d:ba:cf:68:f3:1e:a3:d9:9d:00:8c:43:10:
         9d:9d:ec:01:4c:21:d4:45:d7:7b:ee:0e:01:8a:f8:d9:70:48:
         03:44:16:ca:e9:1b:79:05:d7:96:2b:84:9e:f8:44:88:f0:5f:
         b2:19:a7:23:de:43:5e:47:0d:de:f3:fe:13:31:db:2e:8c:27:
         c3:d0:99:36:6a:29:fb:1f:f3:83:a9:ba:e3:79:f3:8b:f5:be:
         54:81:d7:5b:4a:1c:8e:33:9b:6c:1d:23:26:16:59:3a:e1:0c:
         d4:40:97:0e:10:c2:14:e9:13:d4:b4:4c:f8:e2:a5:c3:54:f8:
         07:21:51:e9:e6:87:92:32:59:cb:04:bd:81:b0:a4:95:f3:37:
         df:3c:da:5f:a8:35:b5:d8:79:61:72:a2:61:d9:0b:55:04:fa:
         1f:e1:29:e7:c3:76:72:85:00:3e:a0:0c:fc:4d:2a:f3:41:51:
         0c:40:31:99:fa:f8:8a:4a:f1:b0:a8:18:10:5d:14:14:c2:a6:
         42:ef:53:ff:47:df:75:ca:aa:46:73:5c:8f:68:e2:28:8a:de:
         fd:e4:6d:76:6b:68:6f:66:eb:b2:c3:27:0e:85:f5:4a:9e:bd:
         42:11:45:c1:0f:dd:72:f7:ff:02:b2:d4:9c:db:39:3d:9e:68:
         e7:9d:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:34:05 2024 by rpki-client on console-ams.rpki-client.org