Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3189a83c-6a9a-3970-b731-0daa56be2bce.roa
File:                     3189a83c-6a9a-3970-b731-0daa56be2bce.roa (raw, json)
Hash identifier:          NLZpqcJhbJrJ/bCK+MK/q70BD0VklQmfwlfFLpVGr3Q=
Subject key identifier:   67:53:60:F5:36:75:71:10:BE:3E:7B:F9:32:E8:4D:AF:80:6A:7C:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4774E150AF1AAEE6BCC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3189a83c-6a9a-3970-b731-0daa56be2bce.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        50.216.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:77:4e:15:0a:f1:aa:ee:6b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=deb1cdfe-b6dc-40cd-b218-eadc4512a240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:23:e1:e8:7e:0b:47:eb:11:30:b5:c7:51:
                    ce:d0:2a:4e:11:80:87:f8:9b:85:ed:8e:0a:ca:5d:
                    62:8b:1e:14:21:64:69:a8:86:86:78:fd:46:61:7a:
                    07:63:1f:65:d3:6c:69:cd:4c:40:4f:47:8a:14:ea:
                    5e:21:80:00:11:bb:42:ec:8f:04:1b:96:06:f5:4f:
                    e2:a7:b6:09:a8:c4:44:dc:69:54:ec:9f:5a:2d:ef:
                    40:8a:ec:a7:c9:0c:d2:8a:f4:f3:a5:31:34:72:56:
                    94:7d:ff:b6:7e:61:f2:3c:f1:e8:f9:75:62:b3:88:
                    d0:7b:1f:4a:21:ac:41:51:46:5f:a4:63:a6:5a:2e:
                    94:fe:5e:5f:2f:02:d1:18:94:ac:de:1d:17:4f:07:
                    f1:a4:b7:e3:ba:e7:62:6f:62:63:c9:5d:16:ce:99:
                    83:25:63:f5:8c:8d:e2:ef:c7:6a:d5:dc:c7:32:b6:
                    f8:54:77:1f:2a:a3:ee:29:dd:d8:da:56:aa:ca:38:
                    d0:09:13:1e:bb:c3:ef:c7:2c:49:71:d7:76:61:32:
                    1a:24:7b:68:87:c2:ff:d8:fb:a8:22:7a:d1:83:a8:
                    11:ee:33:85:20:52:25:b3:aa:7f:63:38:8a:8f:6d:
                    a5:ea:15:1b:71:87:5e:22:ae:a3:24:25:8f:f9:ae:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:60:F5:36:75:71:10:BE:3E:7B:F9:32:E8:4D:AF:80:6A:7C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3189a83c-6a9a-3970-b731-0daa56be2bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.216.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:30:a7:dd:cc:22:6c:fc:42:56:69:35:a8:5c:0d:fc:96:ab:
         c0:86:70:53:c5:ca:67:1a:a1:71:d5:d0:0e:e7:80:45:c9:3b:
         d0:be:89:ca:06:1d:42:ce:f0:14:e5:b7:12:5e:01:15:ed:a2:
         c1:f3:8e:30:69:2a:85:de:8b:88:d5:b9:0d:c7:df:98:2f:ea:
         60:fb:ba:3c:32:ad:e9:ca:7b:ef:2e:8a:85:57:a4:8f:f1:95:
         ed:10:96:3c:86:d6:7f:f5:5c:95:c4:f7:2f:3b:97:52:c6:7a:
         2f:d0:82:d9:98:99:88:7e:29:60:11:74:1d:ed:df:a7:4d:e3:
         d4:dc:b1:a9:29:26:84:7d:0f:07:c6:c6:de:98:68:7d:2d:fd:
         cd:1d:d0:23:f4:7f:fa:aa:45:b6:d9:b0:80:26:78:a4:90:0f:
         1e:d6:3d:08:82:5c:eb:88:66:8f:b3:b1:da:3f:ae:d1:b9:d7:
         11:54:d2:36:62:39:5f:57:ef:5e:1b:84:e6:f6:57:40:f2:7c:
         ec:e8:17:b5:8d:2d:df:51:24:bb:16:54:54:2c:90:9f:57:d2:
         94:e5:0f:89:23:4c:f5:63:13:ed:96:eb:f9:43:52:26:15:57:
         9a:f8:23:eb:2a:97:44:c9:6c:e3:88:15:3d:9b:4f:99:71:51:
         cf:28:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:34:53 2025 by rpki-client