Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa
File:                     704f0f0c-b909-3310-ab34-f29746d3966a.roa (raw, json)
Hash identifier:          ygBYQqaAPNaz8YnLgSzPbl0y3dra6spLSbNAHs0uyYY=
Subject key identifier:   A4:52:23:D9:1C:F9:50:28:C1:14:97:23:50:F9:55:C5:10:73:6D:E0
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F43285847845673C470FEAD3EA59E9F80
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     6327
IP address blocks:        50.72.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:73:c4:70:fe:ad:3e:a5:9e:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=e51efc53-5da2-4541-843b-5f245c96385f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:10:bb:57:79:0b:aa:85:92:6a:b3:a6:55:
                    23:1f:68:65:c4:8e:19:1f:b4:f7:7e:8a:b4:de:80:
                    f9:c3:f2:f0:e9:fc:72:c9:73:93:00:ef:df:b5:a1:
                    b2:d9:89:71:b1:f0:5b:d2:2b:f4:41:ab:a5:02:de:
                    84:0d:f9:f6:4f:54:f9:18:d8:72:16:ec:b0:55:7f:
                    35:4e:f1:d8:84:4e:6b:25:ae:84:d0:55:68:ef:b7:
                    e9:7a:70:f5:26:2f:b8:ca:80:c0:95:d4:89:e7:aa:
                    02:b9:1e:82:59:55:67:50:b3:d2:11:af:41:5a:91:
                    82:16:86:d7:eb:97:ca:53:6f:83:cd:d2:dd:5d:cd:
                    b4:23:8f:7d:11:56:de:ee:a4:3b:10:5b:27:39:aa:
                    58:e2:02:a5:75:63:76:60:cf:15:ae:a7:6d:0b:dc:
                    44:25:07:01:1a:73:80:cd:e3:1c:18:0e:7f:90:df:
                    f1:40:2c:a4:7a:b5:f0:ac:c1:74:e6:e4:d5:09:bd:
                    94:37:c5:84:77:69:e7:8a:f4:37:5d:02:41:2e:89:
                    ce:05:2d:f6:d2:ba:66:dc:49:f4:e5:11:cf:41:b3:
                    75:74:b2:3d:87:3f:8f:91:90:7a:ed:a8:57:12:a8:
                    99:82:4f:a2:d8:8d:b8:66:97:83:60:af:69:20:f5:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:23:D9:1C:F9:50:28:C1:14:97:23:50:F9:55:C5:10:73:6D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:81:f9:e1:ba:a5:ba:32:d8:57:b9:a6:a0:cb:00:af:3a:ce:
         3b:71:9d:77:f7:36:d5:84:27:46:a1:a3:6e:34:b2:f6:f2:6e:
         98:6a:a8:c9:5f:68:2f:36:58:d9:07:4a:56:07:07:d3:5a:31:
         7f:da:19:0f:fd:f3:50:af:4a:84:86:7f:15:41:13:13:f3:e7:
         bc:a9:9c:29:ab:47:ef:eb:bb:d3:bd:7f:ef:80:93:e3:39:02:
         a7:3e:08:76:f0:78:28:cb:85:48:36:5f:ea:0e:f3:42:46:2b:
         92:71:d2:da:df:e3:14:3c:5c:46:93:03:48:e2:de:ab:09:2a:
         0f:84:ba:18:48:1d:1c:e3:d7:52:e0:99:8d:94:c3:96:dc:38:
         2f:ab:38:5e:e6:2e:a7:14:93:16:1c:f2:57:a3:32:1b:84:9d:
         de:8c:eb:e9:3e:b2:ea:ce:dc:2e:04:0a:36:92:54:64:45:09:
         d5:f9:04:49:b3:62:d6:31:08:94:15:40:31:68:45:a1:6d:40:
         8d:6c:1b:0f:ed:d5:7c:8b:1a:d4:48:2f:53:81:0e:3d:15:95:
         f2:53:c1:b0:cf:8a:7b:0f:a2:29:ba:d3:97:be:93:2d:da:72:
         d9:ac:ab:8c:ff:32:dc:ec:f8:4d:20:55:69:99:dc:27:bd:c0:
         32:a9:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org