Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/27156c19-85af-315f-8fca-3951ef03f1e0.roa
File:                     27156c19-85af-315f-8fca-3951ef03f1e0.roa (raw, json)
Hash identifier:          /sNReVgrBJHN53KxKZTexpDwIxLpYpqbsglFRGrBm8o=
Subject key identifier:   FF:54:3E:5B:0D:AC:B7:1C:0A:B7:C2:8B:05:22:DA:F5:9C:A1:90:67
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285845025AD1B902596EEE0F06DA80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/27156c19-85af-315f-8fca-3951ef03f1e0.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     30103
IP address blocks:        170.114.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d1:b9:02:59:6e:ee:0f:06:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=6e9ddc21-e5f3-4852-9e2f-6077b873ae1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:e1:75:32:53:d8:e3:10:92:bc:9c:02:5d:
                    f3:73:47:31:68:6d:94:15:f8:e2:29:1b:8a:7f:43:
                    26:94:25:72:09:9e:c9:25:f3:2d:43:26:0e:ba:bf:
                    06:b6:0f:35:cd:1e:72:ca:35:f7:af:6c:35:9e:2a:
                    a5:73:5c:1f:ba:1f:7c:c6:b7:e5:b3:20:e1:b6:aa:
                    1d:89:11:de:c7:fa:b7:ec:7c:fe:f6:67:82:37:5a:
                    fa:23:c2:8f:48:0d:ae:e1:51:c7:86:df:86:3c:8b:
                    f9:46:0d:93:69:62:8d:cc:71:5c:77:a5:65:3a:44:
                    c3:bf:e5:e6:6e:26:c9:c8:c9:5e:7c:e6:a1:a7:cd:
                    42:7a:58:e0:5c:77:73:3d:33:89:72:a4:79:fd:1b:
                    5d:b4:81:71:4e:d6:62:93:34:a4:f1:0f:15:e6:5e:
                    ec:15:5a:e0:f0:96:cb:d0:5f:3d:30:d6:b2:64:99:
                    90:59:95:00:d8:70:48:4d:85:bb:f3:67:51:1d:98:
                    5a:d4:ce:ea:78:09:dd:66:30:32:16:4c:dc:e3:bc:
                    21:3e:69:6e:00:11:1b:45:54:26:11:0c:bd:c1:83:
                    8c:51:19:cb:b7:d5:1a:fc:3b:c0:32:7a:2d:70:a8:
                    48:6b:21:7e:b5:ed:42:7c:c4:19:96:da:c5:d1:7e:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:54:3E:5B:0D:AC:B7:1C:0A:B7:C2:8B:05:22:DA:F5:9C:A1:90:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/27156c19-85af-315f-8fca-3951ef03f1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:98:07:c2:cb:4f:9b:a5:3c:37:e8:26:13:29:89:94:1d:07:
         4d:cc:c4:d0:78:2c:2e:f6:94:d3:7f:bd:88:2c:c8:4a:f5:74:
         ff:fd:dc:5e:c6:ff:c3:03:99:d8:97:95:c6:eb:9f:3a:46:23:
         eb:06:0b:4b:78:37:b4:84:54:30:35:1c:b5:cf:76:ca:bf:27:
         ea:37:8d:a9:ce:52:05:90:98:a5:70:e1:d5:b8:c5:68:ad:fd:
         b2:5b:17:a0:35:5c:4e:b3:16:20:77:34:c1:6a:4e:1d:77:39:
         f4:ff:ee:30:ad:1d:41:be:59:21:ef:8f:f4:65:f6:28:c9:81:
         6e:4b:1f:5b:95:fe:5d:40:30:c1:c9:8b:d8:b2:ba:da:df:c2:
         af:c1:cc:a2:03:45:f5:16:44:2e:f5:3a:26:36:6c:dd:95:fa:
         72:b2:78:c0:e3:80:57:99:ad:95:03:7d:74:84:ce:e7:a8:c0:
         54:3a:1b:1f:f9:40:ac:e7:14:db:60:a8:3e:dd:f7:b2:0d:28:
         f1:00:e8:35:f8:3d:55:e0:ed:02:3f:06:6c:3d:da:4a:f5:b8:
         a8:b2:b2:de:46:92:52:db:55:02:37:d1:d8:0f:f7:b4:57:c8:
         6d:19:1b:ab:10:d5:13:99:55:bd:6c:31:18:8c:f4:81:b7:b9:
         52:aa:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:59:32 2024 by rpki-client on console-ams.rpki-client.org