Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa
File:                     7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa (raw, json)
Hash identifier:          jeUxMI0geipbzwvSjFwk64+pgfvzPJHuWso2gsUZSnU=
Subject key identifier:   D8:AC:AB:51:D1:3F:1D:18:97:75:27:E0:9C:96:73:2B:E4:D6:E0:90
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285849C20A05ACDA24CA4EBD8DD400
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     398395
IP address blocks:        172.111.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:05:ac:da:24:ca:4e:bd:8d:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9f195f69-bdc4-49d3-aaea-4ae8f579f369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:8c:9c:c6:84:84:12:ca:d9:e6:47:89:a7:
                    52:d5:d2:dc:be:95:8a:63:6d:f8:dd:1e:66:71:1f:
                    69:db:ea:a3:35:67:92:40:1c:b3:e3:d2:ea:e3:38:
                    5a:16:9c:aa:16:bc:99:d0:85:5f:08:22:72:3d:07:
                    62:47:30:80:9c:2f:77:32:0f:63:ba:46:9a:87:b2:
                    bc:d0:50:8d:2b:ec:31:85:e0:12:75:00:38:e8:db:
                    e7:2a:ad:ce:05:86:73:0a:78:d5:9b:e1:79:92:47:
                    c7:cd:64:6e:64:99:c8:4c:ec:72:f0:17:0a:1f:08:
                    47:66:0b:d8:b6:85:5b:65:39:e0:ee:0f:71:b2:c5:
                    27:a1:08:fa:08:9d:b0:c0:95:28:30:ae:95:c2:f9:
                    ba:15:b8:ec:9b:88:58:bc:bf:fd:85:c8:64:98:78:
                    d2:9f:6d:f3:64:9f:9f:75:4a:18:da:da:57:41:bf:
                    04:23:93:34:bb:ab:9c:ba:4e:ac:6d:ea:dd:de:3a:
                    b7:f4:83:11:96:05:76:31:6c:4f:db:a7:de:b4:87:
                    e8:b1:93:34:88:df:bc:c0:27:b0:51:92:81:84:d7:
                    d3:23:4e:bd:26:db:6f:fe:fe:70:aa:8f:e6:be:af:
                    b6:66:a1:af:9d:b5:99:b0:eb:41:ce:4e:8d:c4:a5:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AC:AB:51:D1:3F:1D:18:97:75:27:E0:9C:96:73:2B:E4:D6:E0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:ed:c1:ae:3d:75:ad:76:e7:22:ec:6d:05:a2:99:fb:06:
         43:b8:5d:9a:d7:22:cd:ba:2e:8f:be:71:d4:b6:8a:9b:cb:0d:
         da:f4:7d:3a:66:53:4b:26:27:1a:14:93:c5:1b:68:b7:3b:d1:
         23:00:43:ca:e3:c8:41:93:1c:19:4d:61:97:f3:6d:fb:a7:76:
         ef:08:68:5a:5e:19:c3:cf:90:c4:17:b8:9b:d2:3a:44:51:be:
         1c:70:b3:dc:19:d8:32:e8:c9:a2:1a:4b:cf:a6:aa:7e:9a:e8:
         8c:b8:a6:01:2a:bb:a5:2d:3c:5e:96:02:81:45:3b:c3:f2:e9:
         46:dc:4a:62:de:07:ff:ba:c8:ff:54:45:af:11:08:90:2e:09:
         3e:3f:5a:13:e8:f6:a0:cc:d2:bd:8f:32:64:dc:8a:2d:76:6f:
         5d:d3:28:ae:9b:98:a2:a7:77:f8:8a:cb:21:8e:66:ce:d1:db:
         36:d9:39:f0:ee:22:9e:7a:45:1f:26:3a:d9:77:d7:74:70:c8:
         da:78:f8:57:85:39:6f:77:62:ed:f8:67:36:c3:81:d2:a5:be:
         07:d2:a6:37:d7:12:d7:28:2f:9c:12:9a:87:0d:f8:a6:61:ab:
         be:aa:a4:9b:f4:a3:70:e7:6e:af:c9:05:e6:67:2b:1e:d0:20:
         47:c6:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:33 2025 by rpki-client