Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa
File:                     e018228d-818a-33ac-ab77-0fa9e7cdc102.roa (raw, json)
Hash identifier:          AbWoffxRJtFR+ax1T/jRSiiZjbLTke2nKA/MiPSAmnM=
Subject key identifier:   AE:BE:FD:CA:C7:90:0E:34:C5:E7:6C:58:AF:3C:75:53:4A:BC:3D:14
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858498A34649B04FCEB9955953000
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     399910
IP address blocks:        66.96.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:64:9b:04:fc:eb:99:55:95:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=c6c4d9a9-8dab-4179-9ce1-90503db9ebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:73:7d:b5:61:38:27:40:6d:88:2b:f8:2e:
                    eb:42:fa:65:6b:25:be:1b:50:10:b7:fa:a6:8c:55:
                    5d:29:72:bf:60:77:c4:7c:55:f2:88:c6:10:e6:05:
                    52:1d:2d:06:d5:11:8c:ed:9c:7c:bf:2c:12:9f:78:
                    2b:90:97:f9:ba:72:9c:2b:24:19:86:1d:9c:e4:71:
                    1d:96:a9:e5:f8:00:03:d2:9c:9f:95:a3:8b:fc:9a:
                    78:e3:b8:02:3a:d3:3d:d9:fc:1c:d6:e3:44:9d:47:
                    bf:14:24:be:08:59:4b:1d:22:42:6a:01:33:29:f0:
                    7a:22:3f:38:ee:82:22:ea:f4:b0:05:0c:dc:ea:5b:
                    05:c5:ca:68:42:31:13:cb:41:e6:34:8e:46:3f:7c:
                    07:fa:49:e2:3e:69:35:05:c8:0f:0c:2f:c7:0e:74:
                    1a:66:53:72:0d:a7:6c:72:4c:90:b0:58:e9:97:51:
                    9e:bf:ef:fa:95:6e:3e:51:53:74:a9:ce:3e:c7:20:
                    7a:84:0f:e4:2a:bf:7d:1d:71:e8:03:2f:4c:eb:35:
                    10:c6:0c:10:af:cf:4e:b4:2d:d0:ec:39:2e:57:66:
                    b2:73:0c:f7:76:e3:dd:b1:e2:d3:1d:09:b4:81:8c:
                    e1:29:0e:65:23:1e:3b:8f:66:7d:f6:1d:36:60:bb:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BE:FD:CA:C7:90:0E:34:C5:E7:6C:58:AF:3C:75:53:4A:BC:3D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:39:92:54:0e:c0:47:9f:6f:47:50:0b:6e:03:da:d5:2b:fc:
         fe:71:c2:05:49:51:32:17:35:18:08:de:64:f6:cb:3b:1c:2d:
         5d:3f:72:14:91:32:3e:1f:26:b4:24:3e:e5:02:10:2d:68:51:
         8a:bc:b7:55:a6:8a:b2:69:9b:11:14:f1:7a:f1:9d:4c:3c:22:
         c0:81:70:fe:22:0b:85:1f:ea:89:f8:1a:ba:2d:04:71:4c:8c:
         b8:07:4c:be:5b:37:8a:85:49:b3:ed:cf:9c:74:62:4d:f2:0f:
         21:9e:f4:d8:39:36:d5:bb:4d:28:df:bd:46:98:fe:ab:96:54:
         ac:73:ba:43:94:12:9a:d6:8e:d4:49:eb:4d:c7:36:be:d3:ff:
         47:71:44:8c:6b:20:60:d4:c8:76:75:ef:63:c2:b8:b4:2e:7c:
         8d:51:85:a8:49:9a:2b:8a:32:f8:e0:5e:13:2f:ef:5c:f2:71:
         44:10:32:46:70:15:13:2c:19:e0:8a:c9:85:30:d0:0b:53:f4:
         14:b0:bb:e9:76:2e:2e:14:30:0e:26:c9:15:a8:43:07:bb:40:
         06:5f:e4:23:3f:d0:5b:a6:49:b5:8e:39:53:29:c6:c7:ca:78:
         1f:03:b8:50:f5:9a:ba:64:89:b5:ab:31:db:0e:2f:95:69:0d:
         ce:f5:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:12 2025 by rpki-client