Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa
File:                     704f0f0c-b909-3310-ab34-f29746d3966a.roa (raw, json)
Hash identifier:          tP1TxLVVPmcmEgMILoiBGIgPevLGGhMVnGgklJahluE=
Subject key identifier:   01:62:7F:71:C7:85:55:88:40:6F:CB:16:10:13:AD:CC:CA:D7:04:78
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F43285845C5A8E4C76F35B437FAFBF980
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     6327
IP address blocks:        50.72.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e4:c7:6f:35:b4:37:fa:fb:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=01b693dd-50df-47d8-983a-36c3785e0321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:5d:b3:d6:2e:88:8f:30:3f:60:1a:c2:25:
                    59:d9:a8:86:7b:f2:f7:a5:f5:64:d1:cb:86:22:fd:
                    02:c0:55:bf:5d:ac:be:95:f0:80:93:75:bd:80:3e:
                    a5:9c:36:86:29:44:e7:ff:11:1b:88:9f:dd:ce:bf:
                    ab:27:4d:06:36:c6:3a:df:37:5c:de:ca:8a:89:52:
                    56:57:29:12:66:ad:2f:b4:47:ae:06:a6:93:0b:48:
                    68:71:5f:a3:35:4b:44:16:53:c8:d3:78:44:51:f8:
                    7b:d8:da:02:99:82:a5:82:39:c7:19:f1:a0:1a:44:
                    ea:2d:ba:b6:18:ed:8e:b0:66:32:12:91:a6:06:4c:
                    08:7b:c2:0f:ee:cc:14:c0:eb:8f:06:cc:b7:b3:22:
                    e1:65:fa:7f:29:27:36:37:fb:4a:53:95:9d:6e:a4:
                    de:bd:a7:d1:f2:54:1c:5f:3b:16:cc:31:9b:c6:39:
                    c7:de:40:a4:b3:be:5b:75:00:51:98:47:f0:a2:37:
                    03:cc:c5:bc:66:34:c0:8e:37:c9:38:7d:13:96:91:
                    5c:02:65:66:24:82:9a:8e:9f:56:fa:bd:12:78:b4:
                    f4:9c:49:47:ab:31:29:68:7a:09:16:de:6f:77:a3:
                    c2:0c:ea:12:a1:d3:73:aa:dd:9e:be:2c:5e:df:9f:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:7F:71:C7:85:55:88:40:6F:CB:16:10:13:AD:CC:CA:D7:04:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:94:bb:74:23:51:63:7d:61:26:ac:73:bc:7a:5c:b1:52:
         74:1d:c1:e8:b1:af:32:dd:2d:c1:54:56:7f:fe:5f:2a:66:e9:
         b5:bd:c2:6c:38:f1:73:8c:6c:1b:11:6a:52:bf:90:d0:00:87:
         e6:3b:15:99:5a:b5:19:64:2e:54:14:31:54:55:a5:77:ee:5f:
         8a:10:8b:ad:f2:6d:c2:70:bd:fe:34:a6:08:90:e0:3d:d8:e6:
         4b:d3:8d:ab:fb:73:5f:0e:6c:a0:77:b6:d6:62:fe:3e:34:09:
         d7:58:a9:aa:58:7d:23:96:12:60:31:a1:bd:d1:31:18:4d:64:
         ea:a6:e6:6b:51:e6:da:08:23:af:76:bf:8f:dd:e6:8f:95:25:
         55:94:2e:81:7c:e1:5c:db:b8:c0:28:b7:28:e1:3c:df:ab:b5:
         88:72:f1:b4:38:43:97:04:ea:a5:c1:77:f3:6f:3a:40:48:35:
         6d:9f:bd:8a:cf:18:0b:89:28:e8:0e:4c:3b:11:55:11:c3:4d:
         ad:4e:ec:c7:1a:6e:c1:88:7b:d6:d0:ef:44:fb:7f:99:a8:fc:
         5b:22:3c:0d:6f:1a:bf:3c:b2:9c:45:e7:41:0a:2d:2d:6f:ae:
         09:22:fc:de:00:d9:ba:0d:2d:50:c4:30:a0:d1:7a:68:8f:df:
         f4:f2:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:12:32 2024 by rpki-client on console-ams.rpki-client.org