Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa
File:                     50c57776-26b1-31a1-8de0-d6e883c06944.roa (raw, json)
Hash identifier:          D/6pQvNto2t4HylfT+BW3VvwAy79QSsNOSSSqYkH35g=
Subject key identifier:   C2:99:C9:DB:F3:F9:9B:92:4C:78:4D:D7:86:E3:6A:1F:05:D2:71:63
Certificate issuer:       /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial:       010D0C9F432858499AF47A16E7D35275B1A82F40
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     14362
IP address blocks:        192.101.77.0/24 maxlen: 24
                          199.33.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7a:16:e7:d3:52:75:b1:a8:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=ba0bfad5-27a4-40ff-8245-23e174adbe3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:5d:58:d8:78:2a:dc:49:5c:63:e3:58:72:
                    58:35:a3:ed:7b:fa:1f:a9:22:d3:a1:1a:1c:e9:95:
                    f2:03:76:fe:98:02:c6:f0:f6:b8:a6:49:f9:cc:e3:
                    d1:8c:c7:c2:de:74:9d:2c:6c:43:fb:15:be:53:1e:
                    c9:1c:a5:57:3a:80:b5:b7:d7:de:91:5c:3d:46:d2:
                    93:d1:f9:48:aa:e6:b0:c5:97:86:f4:92:0c:c7:be:
                    c8:e7:ee:0e:14:3d:e4:f9:02:29:16:2c:91:e7:31:
                    e7:d1:42:2b:f5:76:2a:17:7c:0d:ad:15:d8:17:93:
                    b9:fc:9e:0c:58:07:5b:a2:fd:13:79:d9:d3:04:bf:
                    e4:d1:7a:31:37:1b:86:a0:8a:7d:46:fd:9f:c8:18:
                    99:d1:bc:24:1f:35:56:92:ee:b4:37:66:95:2b:0c:
                    53:01:18:18:4e:9e:d2:4d:67:e0:d0:35:57:fe:55:
                    d1:93:6e:e3:93:42:8a:ee:ed:ea:b8:9f:0e:40:ce:
                    44:23:3a:ef:fe:71:68:14:de:ef:c7:45:11:7c:41:
                    ea:ff:a3:9f:ff:db:2a:6a:1c:73:46:f6:aa:c9:4a:
                    54:28:8a:3d:99:24:d6:97:03:d9:f6:ca:f9:a2:47:
                    c0:18:ab:fe:68:fe:0b:49:8e:9f:5d:66:25:fd:a8:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:99:C9:DB:F3:F9:9B:92:4C:78:4D:D7:86:E3:6A:1F:05:D2:71:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl

            X509v3 Authority Key Identifier:
                keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.77.0/24
                  199.33.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:4c:62:77:4e:f2:68:20:49:0c:4c:2a:ec:20:dd:82:1c:
         56:0e:95:3c:ca:50:41:a0:2b:20:b1:41:f5:95:4a:2f:42:0a:
         7d:24:0b:dc:8c:14:2f:2c:0f:e8:7d:73:fd:2f:3c:5e:e3:fb:
         05:76:c4:39:2e:3b:18:9c:26:da:50:02:2b:57:0e:73:2d:4d:
         c3:de:f6:a0:2b:ea:bd:56:de:36:52:39:c9:3b:fa:64:c9:62:
         28:f5:d3:4d:e0:7c:a1:4a:94:e2:29:35:a8:ec:7e:ec:98:58:
         c0:a8:54:ee:8a:7f:ad:cd:6b:55:f1:ab:3d:30:ef:d5:8a:ab:
         53:61:62:30:fd:aa:f2:81:04:a5:5d:5f:76:5e:70:df:0d:57:
         af:20:32:c2:8c:6d:08:97:07:02:a6:82:8e:cb:09:f8:3f:99:
         b0:ae:06:65:7f:c2:d4:28:24:54:7c:f8:ae:2f:31:67:ba:cf:
         ec:7f:04:5f:d9:79:27:b7:76:0b:1e:7e:2c:be:e8:d9:36:68:
         89:79:8e:fb:d8:f6:2e:d9:e4:5a:df:eb:44:00:2d:43:67:19:
         d8:88:43:ee:f6:07:fc:7b:56:c8:ab:c2:af:b0:25:c3:04:d0:
         0d:37:0e:ba:8c:17:c3:37:83:c5:4c:15:41:89:b7:8b:b0:ec:
         ae:7f:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:55:11 2025 by rpki-client