Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa
File:                     95244fe7-f5d3-398e-8164-b6de9b979c38.roa (raw, json)
Hash identifier:          gHCNraU1EiEzNc1/wevuffk17zIpBv4SaIvrBTR6c8g=
Subject key identifier:   F5:34:72:CD:13:A7:A0:AD:F6:A2:F7:C6:FB:4B:4A:D3:48:C4:24:C9
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847B2669CA819A24A629DE7E9EC
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     30058
IP address blocks:        50.7.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:9c:a8:19:a2:4a:62:9d:e7:e9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=e529a74c-8aa1-41ed-98be-25eea8f4f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:e7:f4:11:fd:ab:62:d8:aa:30:c1:8f:50:
                    36:d6:58:b3:20:24:ce:78:32:16:cc:8c:13:64:f9:
                    7f:f7:45:84:f8:f3:2d:95:24:82:70:d0:64:a2:07:
                    2f:f9:2f:d4:0d:73:20:30:5e:70:7c:70:80:eb:83:
                    70:a2:c0:1e:64:e0:96:c8:95:df:c7:3a:ce:18:b3:
                    c1:51:ea:86:68:75:cd:90:6a:ca:91:14:5a:25:73:
                    9b:9e:2a:c1:86:56:6c:d1:b9:60:54:15:76:63:4c:
                    1e:5e:79:81:a5:c6:98:7e:a3:78:a1:de:bf:c4:af:
                    44:9d:af:55:78:0d:ec:d8:c0:41:dd:ca:0c:b9:47:
                    44:72:99:75:f0:0d:e6:23:76:0b:f9:4b:24:d9:e0:
                    ff:94:da:7e:90:3b:3c:34:77:db:72:5c:01:0f:45:
                    18:b1:28:06:12:fa:9c:13:6f:a0:6a:3a:c3:5f:b0:
                    10:9c:1f:ff:7a:a3:2c:38:05:df:5e:21:ca:9c:be:
                    58:e9:51:0c:22:bb:a1:3a:fd:7f:23:75:bd:4a:24:
                    b9:ba:95:d8:fc:e8:ac:fe:b7:f5:a2:62:ef:62:77:
                    dc:9d:f0:66:08:ac:9d:ce:ef:2b:db:45:e8:31:a6:
                    01:e8:e3:03:32:22:70:5f:32:79:3f:22:a6:f4:42:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:72:CD:13:A7:A0:AD:F6:A2:F7:C6:FB:4B:4A:D3:48:C4:24:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:3c:14:eb:02:04:54:a5:59:c9:c8:8e:0c:ec:72:25:c1:
         74:4d:8a:3a:8b:79:e5:57:55:f5:d2:ee:73:d4:57:6c:ec:af:
         a6:8f:e2:28:6b:f1:91:f9:d0:1d:7d:0a:53:ca:86:aa:4d:de:
         55:ca:26:b6:bf:2f:40:d4:53:7d:6f:8b:d1:d1:17:87:d2:d7:
         0c:a7:3a:e2:4e:6a:44:61:c6:41:91:9f:4c:53:c1:20:28:9b:
         6f:15:c6:f6:2d:ff:30:eb:fb:ae:06:a1:a8:74:21:56:fc:d9:
         c6:be:03:04:76:9d:57:ca:b8:3a:26:06:8e:3f:79:4b:6f:78:
         e1:e4:95:6b:80:2b:4c:70:e3:e5:77:16:a6:cd:76:09:aa:d6:
         23:c6:b4:2e:ef:7b:0c:df:f4:e5:83:1c:98:96:15:f3:b7:03:
         c4:9d:a8:06:b0:ba:70:69:95:2c:31:7a:e5:71:cd:95:de:aa:
         9e:bc:3d:de:6b:9f:74:bb:c4:24:c4:64:d0:12:50:c4:c3:68:
         67:1f:f3:c9:34:40:cc:80:4c:98:aa:1a:af:ad:96:5c:62:62:
         f2:3c:7a:07:b4:3c:3f:18:80:47:20:8c:b2:9c:78:01:41:44:
         86:8e:4d:b0:4b:c4:3b:dc:38:ad:3e:79:ce:11:3d:19:d2:16:
         4a:91:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:18 2024 by rpki-client on console-ams.rpki-client.org