Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
File:                     5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa (raw, json)
Hash identifier:          l961nWQw2/4f/ykhfAlOLz/pZ2Kplos6jxn4FmcbX90=
Subject key identifier:   9A:91:9A:65:78:F5:86:C1:60:53:D2:64:AC:C1:E9:EF:12:7B:E9:46
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285846F8DD938E60E9ACE7193D6E5C
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
Signing time:             Fri 23 Aug 2024 13:59:56 +0000
ROA not before:           Fri 23 Aug 2024 13:59:56 +0000
ROA not after:            Thu 21 Nov 2024 14:59:56 +0000
asID:                     1239
IP address blocks:        50.7.120.0/22 maxlen: 22
                          67.159.6.0/23 maxlen: 23
                          2001:49f0:d01b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f8:dd:93:8e:60:e9:ac:e7:19:3d:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 23 13:59:56 2024 GMT
            Not After : Nov 21 14:59:56 2024 GMT
        Subject: CN=21f752c0-ddf9-4342-ab8c-d2dee14f27a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:84:25:b9:44:9f:f0:53:b7:10:20:fa:3b:
                    76:4f:78:8a:59:3e:0b:90:ac:98:e0:3b:7d:f7:48:
                    ec:be:d9:a5:fb:9b:43:83:c6:1c:b4:7f:de:5c:5e:
                    f0:c6:a4:25:27:c0:7b:1c:be:9c:16:b3:4d:51:b0:
                    18:1c:1b:df:60:69:25:24:61:32:9c:c5:cc:c6:83:
                    b3:61:fe:25:7f:18:9d:33:9b:f7:94:88:b2:59:ef:
                    01:a5:cf:b8:06:15:72:3f:78:1f:f8:50:4b:f7:1f:
                    ef:4e:0f:8e:54:dd:da:53:ce:c0:b7:6e:d4:5d:0a:
                    16:b3:24:0b:67:50:4f:d7:f9:2a:b0:66:9b:40:c1:
                    db:53:5d:86:7a:1d:83:47:f9:0a:ad:a7:a3:df:ee:
                    c4:96:e4:40:26:2a:c0:9d:c1:f7:a3:b4:ba:82:c3:
                    be:bc:95:41:ff:38:09:ef:a8:f8:1e:f0:b6:38:43:
                    6e:ca:b1:b4:7a:89:2c:0f:cf:7c:a4:b5:cf:5c:91:
                    db:0a:34:82:55:78:4e:78:9b:90:48:77:0c:c5:da:
                    77:d1:53:aa:05:20:b2:a8:90:29:25:83:8a:7e:1d:
                    46:5c:74:f5:c6:db:84:44:66:9d:9d:25:4f:5e:09:
                    08:e0:13:19:7c:c6:2f:1c:fc:2c:8b:03:31:83:4d:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:9A:65:78:F5:86:C1:60:53:D2:64:AC:C1:E9:EF:12:7B:E9:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.120.0/22
                  67.159.6.0/23
                IPv6:
                  2001:49f0:d01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:72:af:76:d6:3a:0d:ca:75:1c:60:f3:0a:05:d9:77:04:ca:
         c3:4c:0c:8a:65:a6:0c:7f:25:57:8d:01:0f:ff:fc:cc:b5:04:
         1d:c5:a0:33:a0:78:41:48:15:3c:91:b4:8d:22:bc:b6:2a:1c:
         4f:9b:d6:de:79:cb:a2:f3:7e:69:30:ae:79:21:b1:60:43:d4:
         76:69:15:d5:83:a9:cc:98:a5:15:f1:ce:6b:0f:ef:d2:3b:8a:
         14:82:d1:54:24:bd:b9:97:6e:d5:d4:15:ce:46:30:9e:a8:12:
         c4:e2:15:f3:bf:92:6f:8b:8d:bc:5c:b0:2b:32:78:40:d5:87:
         55:65:43:38:64:6b:4f:b6:e7:d7:34:8c:00:40:a3:06:bf:cc:
         52:bf:d3:5d:d8:d6:7c:27:55:ff:4b:60:b0:d1:b9:7d:11:1c:
         18:54:9b:7e:44:3b:6c:02:0a:96:00:ef:bb:e4:0e:9e:da:37:
         53:27:d3:fc:b6:d2:e4:a8:96:bc:6d:f3:0f:33:d2:53:bd:35:
         92:29:62:5b:0a:7d:96:29:3b:04:43:00:f5:ca:d9:35:8f:6c:
         1b:1b:2d:f5:96:75:da:30:15:fb:96:c3:fb:22:91:a3:41:bc:
         bb:05:12:22:8c:50:e7:eb:78:30:de:7c:d9:1d:2e:74:99:14:
         1d:c3:21:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org