Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
File:                     bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa (raw, json)
Hash identifier:          g/deD64tcXc6YCC6Krqa0+BdYfVAHErpg5q9jqaXlLo=
Subject key identifier:   DE:D7:89:B4:81:63:D6:13:EF:1A:27:B7:0E:01:54:25:A9:1A:9B:44
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964DA609A8892504746A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        50.91.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4d:a6:09:a8:89:25:04:74:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=71211d5f-0c4a-41ba-a22b-fbbffd2a3a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:28:01:f1:01:94:44:3e:7f:2e:11:46:83:
                    96:7c:f7:46:73:4e:4f:a8:52:24:d4:fb:2d:74:1d:
                    3a:17:5a:a5:3a:ed:8c:8f:ef:3e:b1:ab:d6:42:31:
                    71:e7:4b:69:b7:e6:bc:00:1b:45:6e:9e:a8:8a:e0:
                    55:5f:3d:3a:a4:eb:ed:30:ad:f8:06:91:99:8d:d5:
                    6e:aa:b4:d8:8d:65:2f:27:ae:80:47:13:72:b2:65:
                    01:2b:65:1b:4c:59:e3:eb:78:a7:87:eb:dd:23:2f:
                    d7:f1:5e:a5:e8:a3:95:e3:c5:3f:dd:7f:b4:bd:6f:
                    15:8c:89:5d:29:bc:a6:3b:55:90:99:f9:57:86:67:
                    e2:5d:9f:0f:f9:d9:a1:ef:2a:37:c6:71:49:13:b8:
                    e7:4f:7e:d5:9b:e9:48:92:f9:4b:35:53:6d:1c:30:
                    b6:73:d0:ea:4e:0c:7f:ee:a7:91:44:62:cb:67:64:
                    86:9d:cd:c0:2c:f4:97:ee:80:f4:b0:8d:1e:74:16:
                    0d:a0:7a:41:a6:11:e7:fb:77:eb:2d:90:76:b5:37:
                    47:9e:0d:34:ad:2a:ee:42:41:6d:c2:f7:a4:e9:75:
                    a3:0b:75:47:d0:dc:60:81:bf:0d:47:a9:1d:80:b6:
                    40:42:2d:4c:c3:84:1b:01:98:8c:3b:e8:ea:63:2f:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:89:B4:81:63:D6:13:EF:1A:27:B7:0E:01:54:25:A9:1A:9B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.91.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:22:19:ec:64:ff:7b:c4:85:61:8a:b6:22:0f:b5:9a:bc:
         bd:f1:de:e4:62:d3:b7:86:96:b8:d9:13:f9:d9:c6:7f:d3:d1:
         de:91:66:85:82:99:16:f8:59:fd:ec:9c:06:11:25:7b:85:75:
         ff:99:2d:96:9a:a4:5e:c5:db:bb:13:92:c6:eb:27:69:ba:74:
         15:d3:99:14:47:74:b9:49:73:bd:2b:12:07:cb:30:39:44:ad:
         92:1d:cc:15:ee:af:c6:d8:30:d6:7b:61:72:71:b3:20:d9:1d:
         90:c7:36:5a:36:80:7b:90:2e:d2:f6:8c:56:0e:fd:12:82:2a:
         21:a2:90:89:92:b0:52:7b:03:05:3b:22:45:cf:01:b7:6e:eb:
         a1:c6:e6:b2:b7:55:72:ac:b9:15:69:d8:7a:56:13:69:b9:55:
         7e:c0:0e:73:ec:a7:39:13:2b:c1:a3:4d:bb:3d:4a:71:0c:4c:
         bf:0d:55:ef:96:cc:82:90:4f:71:fb:ca:bd:73:ab:cf:c1:ba:
         e3:55:55:12:cd:99:4d:57:68:18:39:60:cd:19:01:06:e4:60:
         19:43:93:ec:0d:36:4e:f3:4c:a3:70:be:55:1f:1a:00:cb:ad:
         2a:4d:3b:23:38:9a:7e:37:c3:b3:cf:ee:27:97:ab:99:86:5b:
         c9:20:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:15 2025 by rpki-client