Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa
File:                     36cc9547-29da-3caf-9d80-fa911a69f909.roa (raw, json)
Hash identifier:          nFnqgkO8ipN0AV7xiGi5LOTBpEDedH3XWeVTs1+6AWY=
Subject key identifier:   E5:F8:59:F0:8D:02:13:1B:C4:6A:84:CD:33:77:B1:48:DE:78:C4:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149F6CCD33875628BD52C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     25893
IP address blocks:        50.117.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f6:cc:d3:38:75:62:8b:d5:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=7d933523-4e22-4252-9692-f60c2a40d549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:71:aa:d8:50:24:4c:12:bc:01:78:71:52:
                    85:61:7f:28:27:0d:94:f8:4f:56:3d:ef:36:d7:63:
                    8b:e1:87:29:f5:c6:0f:bb:57:41:64:c1:a3:bd:8a:
                    fd:6d:59:e8:da:c0:8e:21:d8:8f:2a:c6:d9:54:9a:
                    05:79:06:60:0c:45:19:b5:5f:39:06:e4:16:5f:d6:
                    e6:77:1a:48:0f:7e:68:b5:ff:be:96:2e:f8:0d:b4:
                    4d:62:88:ca:cc:e2:39:8a:b7:18:72:f4:30:64:45:
                    1a:5c:c2:75:73:00:90:bc:d1:e9:0f:24:20:6c:cc:
                    49:ff:87:f7:d8:78:bb:fa:28:27:8a:03:3c:d1:e0:
                    21:67:e5:d1:6f:3c:71:e5:5c:dc:25:87:11:ff:26:
                    68:68:75:c2:08:2e:26:39:3e:52:d9:b0:4e:db:93:
                    06:ff:83:15:50:67:ed:62:9d:4c:09:0a:fb:8f:66:
                    93:aa:fb:c7:71:81:6a:a8:11:0a:1c:08:a4:6a:ba:
                    a1:30:79:1a:16:10:ec:cc:1f:66:f4:c6:a9:85:86:
                    44:43:f2:7f:7b:47:68:f2:66:90:0b:35:82:bf:b6:
                    93:64:f2:e3:22:9c:b1:38:73:45:42:cf:ca:10:33:
                    32:d2:a1:1e:22:7b:d7:d5:1e:97:98:c2:25:dc:dd:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F8:59:F0:8D:02:13:1B:C4:6A:84:CD:33:77:B1:48:DE:78:C4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:26:d8:1f:5a:8d:ee:2c:9c:53:d0:04:74:f3:dd:13:dc:7a:
         a4:d2:a4:06:5b:eb:9d:7c:47:f2:f8:7f:8d:05:b6:58:0e:5d:
         94:9b:ad:e9:f6:96:55:3e:c9:c7:3a:5e:99:4d:03:56:d5:c7:
         ee:8d:8d:2e:ab:32:e8:e5:9e:ac:39:cb:9b:8c:2c:46:d4:66:
         a1:54:66:d3:09:6b:7e:b1:f6:15:ce:b1:71:cc:59:8b:99:69:
         f0:ad:48:3f:3c:04:a7:ed:e1:96:ac:84:96:d2:b0:cb:15:ce:
         ef:0b:50:3c:fd:93:8d:95:8a:7b:e8:b5:b3:d2:b8:d1:66:8e:
         3d:dd:eb:de:15:69:39:e5:ed:94:d0:80:b9:06:c7:a7:4f:e0:
         1e:0a:45:c6:29:a9:7f:71:d3:bd:d3:51:56:2a:d0:61:ca:70:
         4c:c7:b0:d8:62:20:e2:99:c4:fa:8f:60:34:67:21:25:1b:0c:
         05:bc:a5:21:f6:4e:b4:6c:b9:bd:8c:cc:33:38:03:ae:ea:f4:
         ae:3f:5f:6e:ee:86:5c:ac:93:46:e7:ed:9f:76:e5:11:9c:fb:
         b6:19:52:fe:d3:47:71:fc:59:a4:91:72:86:11:0a:2d:f7:f3:
         b1:8a:28:f0:ab:cb:f5:d0:ad:12:4e:a0:28:60:8e:10:b9:92:
         c9:da:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:05 2025 by rpki-client