Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
File:                     d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa (raw, json)
Hash identifier:          Tzs2/1zICTO75ozZD9QKG4aAKRvOnWDbqRUB2FC/k8I=
Subject key identifier:   BA:8B:66:C9:52:FD:EE:F2:C3:9B:65:C5:BD:B3:E7:68:85:61:28:67
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584A1B5FF6D8D198157FDBEF0200
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     13329
IP address blocks:        50.115.149.0/24 maxlen: 24
                          50.115.150.0/24 maxlen: 24
                          50.115.151.0/24 maxlen: 24
                          199.180.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f6:d8:d1:98:15:7f:db:ef:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=cb96c049-6d6e-48b3-8891-975e38b761fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:01:a6:2d:1a:84:75:cf:3c:16:17:43:df:
                    13:c4:7c:1c:62:87:95:d9:2c:b1:b3:e8:32:5a:b4:
                    30:43:9b:69:44:a5:de:ea:b4:f4:e3:e4:db:1b:42:
                    e9:9f:a5:a8:3e:9f:c5:66:ee:21:9d:3e:b8:74:f2:
                    10:be:63:57:5c:35:8e:0c:f6:91:39:fa:0c:72:cf:
                    a5:0e:ef:3d:b3:ac:af:af:f8:78:70:c1:c0:3d:43:
                    99:e6:90:a2:48:23:54:f4:0c:e0:8c:c9:09:72:cb:
                    fa:80:3b:7f:52:a2:c4:8e:0d:cb:35:3a:3f:21:8d:
                    e8:fc:a9:a3:60:58:ea:9a:bb:e3:c7:71:af:7e:83:
                    59:a1:49:b6:49:a4:c4:fd:6f:64:22:e4:c0:9e:b6:
                    22:f0:95:79:75:41:07:0f:55:80:06:78:81:51:6e:
                    c7:03:f9:16:0a:b2:56:cf:1d:74:f1:52:5d:2b:32:
                    ce:c5:af:d2:ca:70:75:fe:68:e3:24:d7:a0:51:46:
                    d4:72:e3:ae:28:f3:6e:31:5c:f6:37:c1:a6:2a:dc:
                    db:2e:5f:cd:ba:9b:f3:45:47:fb:b8:ad:a6:b2:2e:
                    7e:8c:b2:7d:0c:f8:c3:a1:8f:7a:82:49:05:01:88:
                    0d:58:78:19:40:8b:20:72:99:c2:68:da:f3:bf:50:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8B:66:C9:52:FD:EE:F2:C3:9B:65:C5:BD:B3:E7:68:85:61:28:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.149.0-50.115.151.255
                  199.180.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:87:26:db:f3:40:6d:59:37:4c:9f:5d:de:03:59:03:87:
         30:7a:88:2a:f2:4c:a6:20:84:47:80:63:2b:8c:4a:62:a2:a8:
         d5:1c:9b:b8:20:34:e9:a3:2a:b7:4e:e4:e7:e5:40:9b:40:c4:
         85:b2:78:81:56:05:70:7b:98:3f:22:49:c4:95:d2:58:e7:2b:
         83:73:57:30:ae:a8:00:7b:f4:b4:d8:f2:17:e4:8f:96:b4:82:
         d2:3d:a9:47:c6:4c:4c:ab:de:33:09:9c:42:6e:94:3c:74:97:
         36:2b:ae:4a:56:1f:bb:0f:1d:86:db:6c:d5:91:f1:d2:1f:3b:
         2a:cf:ad:83:47:20:30:a3:3e:02:8f:9f:cc:a5:40:65:49:13:
         54:5d:5c:90:67:0d:09:e3:68:aa:92:87:0e:28:a6:2a:ea:d7:
         ec:8e:2e:70:5f:d4:35:e9:e8:76:b4:9e:c6:57:05:7b:36:e5:
         96:f1:96:68:0d:0b:4c:6d:a4:10:67:0f:44:c3:d1:36:94:d6:
         32:71:58:31:e1:d5:f8:78:bd:98:aa:b1:5f:85:d2:42:88:6b:
         0f:c2:cf:38:d3:d2:ff:87:d5:3b:f0:87:a3:fe:08:6d:3f:ca:
         67:ac:8b:d0:2d:68:11:45:be:4d:bb:9f:7c:08:df:a9:4c:fb:
         fe:e8:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:24 2025 by rpki-client