Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
File:                     99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (raw, json)
Hash identifier:          BW/X7mOcQ776vjaw8U+FcJgnmN+U9Pc6hVXfTN52+BQ=
Subject key identifier:   D8:15:1B:25:D1:26:F9:88:AC:41:A6:2C:53:E2:B1:8B:37:9C:05:10
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584A9D30FE43A0FDCE443C524880
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     47870
IP address blocks:        198.17.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fe:43:a0:fd:ce:44:3c:52:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=bbec6ccb-4767-4818-b503-1c4042ba734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:a1:a8:85:e1:3e:a9:2c:b6:cf:24:e2:9c:
                    27:cb:01:d2:76:fa:b2:22:81:cb:72:9f:fc:b5:33:
                    f3:e1:1e:ad:a2:10:c9:07:4d:9e:d4:19:2f:9b:43:
                    f3:2f:14:6f:da:e6:5f:95:fe:26:71:8a:7e:d8:b4:
                    e9:69:14:cd:ce:01:10:13:c9:2a:72:35:e6:ae:00:
                    c6:69:a0:bd:e0:f9:24:34:3b:36:1c:45:d8:ef:58:
                    bd:99:61:22:a4:88:d2:de:9b:d9:e8:e6:f4:5d:b9:
                    b1:7d:ab:be:06:1a:dc:f1:24:92:4a:a8:fb:8f:0e:
                    46:b3:dd:35:47:04:f6:e1:bf:e7:39:ed:0f:dd:35:
                    62:fa:1b:3a:5b:8d:a8:0a:d9:57:2c:73:34:02:03:
                    53:34:e4:1a:19:90:f1:06:dd:77:c9:b6:ea:d8:57:
                    23:94:74:8d:df:03:32:61:c1:b2:ed:13:49:73:32:
                    43:c3:5b:31:88:2b:69:6b:2d:74:e4:39:13:98:e7:
                    3a:32:ad:65:8b:b7:f3:b5:28:29:18:ed:b3:ee:78:
                    0d:c9:a8:16:62:2a:f9:fc:fb:18:28:9d:3f:9e:17:
                    bb:b8:69:a1:6c:f4:fe:0a:f3:51:39:1a:f9:f6:9f:
                    5c:ef:ce:b6:1c:84:78:e7:fd:4f:c9:93:37:18:88:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:1B:25:D1:26:F9:88:AC:41:A6:2C:53:E2:B1:8B:37:9C:05:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:8d:7b:5b:dd:5c:96:97:6d:6b:20:93:d1:de:8e:51:f2:
         bd:40:39:02:81:b8:88:2d:92:05:e1:e6:b9:91:fb:b8:79:05:
         ca:93:cc:dc:f9:4e:c8:2c:b7:e1:5c:77:3c:91:af:8a:fe:9a:
         08:a5:99:28:d3:d1:91:a2:64:1c:4a:13:b2:ba:46:6f:81:93:
         81:2e:83:af:09:25:3e:e8:b3:86:df:2f:b8:e4:15:d3:19:7a:
         bb:87:7c:ad:ec:cb:90:39:ac:e2:42:7e:79:5a:a4:ee:5f:59:
         89:6a:eb:07:ce:3d:e1:77:89:07:68:b9:a9:1a:02:19:ef:a2:
         d8:a9:8f:82:df:e7:b1:69:38:48:33:de:15:4c:a2:54:29:08:
         76:69:29:9e:dc:bc:6f:d0:aa:d1:b4:11:21:19:ee:1e:63:3a:
         6c:f1:06:d4:45:91:15:b9:ba:e1:4a:08:ef:66:e2:7c:8f:27:
         49:af:89:54:29:48:3f:c2:8b:e1:58:9c:e0:00:62:c5:91:87:
         30:75:5a:67:df:01:c7:54:a6:14:4e:87:c6:15:9c:52:0f:4d:
         7d:a4:c4:b5:ca:e3:24:85:33:cd:ee:54:a0:ec:3d:fe:69:8b:
         17:67:c9:42:23:12:5c:e9:5c:75:af:5d:c1:f4:85:c2:c9:68:
         d0:43:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:41 2025 by rpki-client