Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a879bf03-0e98-3894-860f-2df1e8e154eb.roa
File:                     a879bf03-0e98-3894-860f-2df1e8e154eb.roa (raw, json)
Hash identifier:          IWmySstQ3rjtLng4dYc0FF4LLCH/hahT9OrKo4MZbqk=
Subject key identifier:   B3:5E:D9:84:58:53:D0:D0:69:98:B9:B3:8E:60:72:BF:C6:BD:0E:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA659D9EACAE347664A8B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a879bf03-0e98-3894-860f-2df1e8e154eb.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        50.233.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:59:d9:ea:ca:e3:47:66:4a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0a3d8d63-3a1f-4f31-b27a-347b7c98269c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:ff:61:34:4f:20:d2:cb:39:49:6a:fc:51:
                    23:05:b9:0e:7c:ec:7e:76:c2:03:ee:08:85:e6:ec:
                    35:b9:78:64:28:8a:f4:b3:40:1b:0d:28:f4:a4:ef:
                    b6:ac:10:7e:64:30:a6:72:04:ce:fd:e7:35:ca:b8:
                    f1:2b:b6:1b:b2:86:bf:ab:a2:09:bb:e7:42:55:96:
                    15:7d:ec:7f:11:e5:81:d7:6d:60:1f:67:03:47:73:
                    74:63:6b:07:94:a2:18:ab:33:d2:ec:b1:54:47:b8:
                    b7:54:c3:ec:5e:03:f1:fb:ed:fe:13:a3:a9:eb:87:
                    d3:3b:be:75:f1:62:df:2e:81:64:f5:0e:11:ac:97:
                    ed:0f:a0:59:87:ec:51:18:85:af:16:0d:cd:f8:9c:
                    7e:d6:b1:dc:66:83:a7:19:39:2b:46:55:2d:d9:ee:
                    52:a6:c5:a6:a5:59:b5:61:a0:1d:90:cc:5b:a4:8d:
                    e4:0a:ad:74:be:07:ca:df:40:81:7f:fd:5b:d8:3e:
                    a3:c4:05:6f:96:bb:05:e4:b4:75:5c:65:25:1d:f5:
                    a5:35:86:7e:7c:41:43:93:fe:9c:de:85:d1:a9:4a:
                    3a:13:c5:45:ca:1e:fe:dc:4e:15:84:83:03:9d:d7:
                    31:f2:22:d5:16:58:08:05:d1:d6:e8:61:e5:78:fd:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:D9:84:58:53:D0:D0:69:98:B9:B3:8E:60:72:BF:C6:BD:0E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a879bf03-0e98-3894-860f-2df1e8e154eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.233.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:e3:b0:26:ff:d3:04:5f:ed:a5:66:04:71:cc:45:54:44:
         86:7c:50:3f:6b:a5:ce:fe:3f:6d:a2:db:82:19:91:5d:c9:24:
         bf:ab:49:6b:eb:9b:36:5a:d1:32:f3:fc:f1:f8:9a:0b:2c:1e:
         19:b6:87:40:9c:2a:19:be:7e:92:7b:4f:93:cc:98:04:0f:23:
         b7:95:d4:a0:63:40:24:a2:bc:ca:e7:02:1b:59:81:f8:2d:ba:
         1b:0d:2a:12:f0:c6:26:79:d0:eb:58:b9:82:b1:ee:03:02:2c:
         2f:cd:09:d3:71:53:04:b9:33:52:93:ad:1e:cc:c4:f1:97:ea:
         cc:b7:7a:17:33:50:09:6f:8f:5e:a2:d1:35:b2:d9:04:77:d7:
         1a:5b:6c:b6:65:b8:a0:30:87:e2:cb:a6:69:1a:e0:4c:77:30:
         26:41:93:9a:0b:7b:86:c2:3b:58:d3:a0:88:79:15:8e:a0:f8:
         45:87:67:87:61:d8:07:40:d7:76:f5:0c:fc:88:d7:d6:3d:f5:
         67:62:2b:33:98:dd:cb:4c:bf:5c:76:79:cd:ca:00:de:b0:6b:
         9a:5c:d1:65:74:c1:37:d2:c0:2a:67:0c:91:f4:ca:1d:8a:e9:
         6e:fe:1f:d6:a2:79:a1:ce:12:4e:70:c8:1e:f8:ec:89:c7:87:
         b4:dd:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:04 2025 by rpki-client