Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7bc241d-1694-3a9a-9267-a5a7d16ad645.roa
File:                     a7bc241d-1694-3a9a-9267-a5a7d16ad645.roa (raw, json)
Hash identifier:          nUmcMb1NT2/AoxUMOx5ksVVavWWFxqIojsAg/94d30E=
Subject key identifier:   D1:D8:7B:C6:44:EA:5E:1C:E1:3C:48:08:6A:9C:E1:97:F2:C8:91:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584908817DD6A01D996ABDD34A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7bc241d-1694-3a9a-9267-a5a7d16ad645.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     62958
IP address blocks:        50.144.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7d:d6:a0:1d:99:6a:bd:d3:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=7ee7acb2-95e6-4cfd-8fc0-39911cd9137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:c1:09:2e:83:19:56:ea:de:ed:51:a0:36:
                    04:6b:f0:ef:69:28:a2:6a:79:af:dc:e4:5a:c4:0f:
                    bf:d2:f4:d0:e3:3a:a3:74:c6:27:13:0e:e5:79:ca:
                    7a:72:b4:dc:de:95:91:86:47:03:b6:97:fa:46:c6:
                    db:e5:9d:52:2e:bb:4d:fa:1f:88:18:e8:d4:24:02:
                    45:3d:54:4e:8f:b4:5f:a8:3a:41:84:d5:27:65:8d:
                    21:6c:e5:78:16:e8:34:cf:89:70:fb:5a:60:27:71:
                    ad:4f:ef:90:b1:95:6d:66:a7:af:1c:14:ae:55:6b:
                    fa:89:f6:3b:67:fa:9e:24:c0:a0:d5:02:7b:7a:46:
                    0f:37:fe:7d:f1:d9:46:49:c3:e7:37:f4:82:be:4e:
                    c1:03:69:2f:78:5c:70:da:46:eb:ef:99:c5:f0:fa:
                    a1:ba:fc:d3:52:ed:51:6d:2c:4a:63:8c:0e:96:27:
                    a4:d5:07:87:b6:ad:dc:ca:3d:ef:a8:5c:56:6c:a8:
                    6b:a6:84:fc:39:e5:b2:35:1f:43:65:28:ce:3d:ab:
                    c7:7b:23:e9:61:9f:b3:f2:3a:87:40:b0:60:12:38:
                    53:b2:57:5e:7e:15:4a:38:c8:d7:dc:28:26:ee:f6:
                    18:46:cc:e5:42:fd:4d:81:9d:26:35:09:6a:70:a5:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:7B:C6:44:EA:5E:1C:E1:3C:48:08:6A:9C:E1:97:F2:C8:91:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7bc241d-1694-3a9a-9267-a5a7d16ad645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.144.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:bf:f9:b9:1b:d8:18:c4:43:00:ff:23:96:3e:1e:e1:20:
         09:d1:66:57:7a:35:dc:5d:9d:e1:18:d7:e6:8b:fa:b3:b9:e2:
         0c:6c:f0:f3:8d:d7:d2:37:5d:52:47:86:90:91:63:c2:96:cf:
         bc:7b:52:e7:fc:3a:34:9a:3c:21:de:3d:10:c7:a4:20:5f:48:
         50:a7:8f:03:b2:bb:11:2c:e2:a0:78:12:aa:ae:b1:83:dd:f4:
         9f:18:85:16:04:bb:80:67:32:0b:0b:c3:c0:c3:2a:31:94:6e:
         61:90:9e:ff:d7:55:03:ea:cc:83:31:aa:26:a8:8b:38:40:c6:
         f2:63:57:bc:39:62:9e:89:93:e2:f5:eb:9c:c5:a6:ab:32:04:
         44:f0:57:49:3f:25:43:e5:32:99:90:e1:cb:b1:6b:b5:2a:4c:
         12:a0:25:83:ea:9c:5c:21:c4:5a:27:a7:9f:88:23:ee:69:3c:
         45:98:d8:74:e0:2f:d7:1c:13:92:26:4a:55:a6:07:75:8f:6d:
         af:71:37:ce:e9:fe:4f:37:99:3d:23:eb:e1:27:63:71:24:88:
         9d:ac:b9:d4:07:02:64:c6:ce:7c:38:5f:57:e3:94:2b:2d:c5:
         3b:d6:d6:d5:a0:84:8f:6a:5b:38:f8:ce:07:0e:30:39:12:42:
         11:22:f8:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgX3WoB2Zar3TSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
N2VlN2FjYjItOTVlNi00Y2ZkLThmYzAtMzk5MTFjZDkxMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9zBCS6DGVbq3u1RoDYEa/DvaSiianmv3ORa
xA+/0vTQ4zqjdMYnEw7lecp6crTc3pWRhkcDtpf6Rsbb5Z1SLrtN+h+IGOjUJAJF
PVROj7RfqDpBhNUnZY0hbOV4Fug0z4lw+1pgJ3GtT++QsZVtZqevHBSuVWv6ifY7
Z/qeJMCg1QJ7ekYPN/598dlGScPnN/SCvk7BA2kveFxw2kbr75nF8PqhuvzTUu1R
bSxKY4wOliek1QeHtq3cyj3vqFxWbKhrpoT8OeWyNR9DZSjOPavHeyPpYZ+z8jqH
QLBgEjhTsldefhVKOMjX3Cgm7vYYRszlQv1NgZ0mNQlqcKUYJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHYe8ZE6l4c4TxICGqc4ZfyyJHTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdiYzI0MWQtMTY5NC0z
YTlhLTkyNjctYTVhN2QxNmFkNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMpARMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxev/m5G9gYxEMA/yOWPh7hIAnRZld6NdxdneEY1+aL+rO54gxs8PON
19I3XVJHhpCRY8KWz7x7Uuf8OjSaPCHePRDHpCBfSFCnjwOyuxEs4qB4EqqusYPd
9J8YhRYEu4BnMgsLw8DDKjGUbmGQnv/XVQPqzIMxqiaoizhAxvJjV7w5Yp6Jk+L1
65zFpqsyBETwV0k/JUPlMpmQ4cuxa7UqTBKgJYPqnFwhxFonp5+II+5pPEWY2HTg
L9ccE5ImSlWmB3WPba9xN87p/k83mT0j6+EnY3EkiJ2sudQHAmTGznw4X1fjlCst
xTvW1tWghI9qWzj4zgcOMDkSQhEi+PM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:40 2025 by rpki-client