Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/72dce4e0-0cca-311c-950d-3a02453bc747.roa
File:                     72dce4e0-0cca-311c-950d-3a02453bc747.roa (raw, json)
Hash identifier:          lCxD5rEQ8VLdNSoSd63jCh/UQJDvCE6unA/pizLOwUc=
Subject key identifier:   1D:D6:C0:89:24:92:A8:0A:51:DE:BF:ED:5B:1E:36:E6:47:55:EA:2F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584722A077426D6C554084A64F20
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/72dce4e0-0cca-311c-950d-3a02453bc747.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     1239
IP address blocks:        50.7.248.0/23 maxlen: 23
                          2001:49f0:d0b8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:77:42:6d:6c:55:40:84:a6:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1c36cb0d-7d2e-445b-a21c-d65812e3bf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:bb:79:c8:07:0c:df:4a:ad:82:72:4b:bc:
                    93:4f:e4:30:f7:db:73:8e:e3:8b:89:d8:18:0d:1b:
                    40:1b:da:a2:90:66:77:c0:21:fc:57:ba:8b:dd:67:
                    85:71:58:fe:cd:04:95:4c:c5:3b:3d:cf:3b:3d:09:
                    a5:f9:8b:16:73:87:9f:09:7a:74:f9:a3:6f:b4:80:
                    98:12:61:e5:02:ac:75:3a:b8:37:c6:e4:ef:9b:06:
                    1c:53:b5:6e:06:81:d5:e4:cb:2d:58:19:34:15:c2:
                    02:a4:64:56:71:cc:ec:b7:73:5f:a2:2b:74:74:32:
                    3a:82:41:55:15:e0:78:62:2b:cc:51:95:b8:ef:28:
                    84:56:74:f8:30:11:a0:67:de:93:76:b2:34:fb:0c:
                    3b:b6:1f:46:34:69:c7:31:f4:25:77:91:bd:83:8f:
                    0a:e5:71:4d:ab:52:67:0d:30:e9:f1:b0:94:e6:da:
                    69:94:df:49:3c:50:ab:a4:d8:e4:04:79:e5:96:b3:
                    cb:b2:7c:c8:df:72:25:23:9c:82:91:04:c5:78:dc:
                    16:55:cd:1e:11:4c:81:90:29:64:e2:c8:b7:d2:34:
                    bb:e9:71:2a:54:5c:14:b7:09:fb:a1:76:ab:18:83:
                    98:b6:97:31:e2:63:1c:eb:30:48:2a:fd:c5:00:ac:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:C0:89:24:92:A8:0A:51:DE:BF:ED:5B:1E:36:E6:47:55:EA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/72dce4e0-0cca-311c-950d-3a02453bc747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.248.0/23
                IPv6:
                  2001:49f0:d0b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:49:29:50:43:7e:19:90:fd:d6:88:79:30:47:b7:09:e6:09:
         08:0a:27:11:b1:9c:1c:86:f6:2b:d2:5b:cd:4e:ac:33:96:a1:
         94:ff:0b:83:3d:fd:e6:88:22:ed:b4:f3:40:8e:bf:47:71:ae:
         7d:c6:5a:fa:57:83:e0:8a:60:f5:ce:0c:65:90:13:e8:f1:1c:
         19:a7:a0:0c:9a:ef:b8:42:46:e2:e5:32:b7:39:9b:04:49:b1:
         1f:d3:89:45:cd:09:df:58:61:ed:5d:62:38:d6:e0:9e:b7:5c:
         8e:12:56:20:cf:a9:a7:1c:97:c6:60:84:ac:d4:aa:3b:ff:53:
         62:01:01:8b:35:85:24:5e:2a:64:ff:34:08:ce:bc:9e:9d:f6:
         8e:a7:9d:84:83:77:15:d0:92:6b:61:ba:27:29:f6:81:c8:d9:
         ed:07:19:3c:ca:e9:21:d3:83:73:ef:cd:c9:b8:2c:de:fa:be:
         c9:23:2a:77:14:d0:44:e0:3c:3b:40:30:2d:d6:d2:50:aa:e0:
         05:e3:dc:19:50:b4:b2:a7:24:94:fc:29:41:e0:0e:8f:83:28:
         fe:29:90:3f:29:e3:7f:e7:ce:ec:62:21:6e:39:df:0a:62:c0:
         64:0f:a8:df:c8:f5:f9:3b:59:96:86:38:30:2a:98:65:20:ec:
         08:85:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:55:13 2024 by rpki-client on console-ams.rpki-client.org