Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/ec6f1f6b-1a9a-3156-bdca-6e798e300be3.roa
File:                     ec6f1f6b-1a9a-3156-bdca-6e798e300be3.roa (raw, json)
Hash identifier:          T42JPyBTs6omqNGHUv1rfhyBSsZ3FzepDUeDUlFM33g=
Subject key identifier:   B2:42:BA:EE:7C:84:9C:65:47:3C:33:76:4A:1A:F6:DB:9C:30:E1:62
Certificate issuer:       /CN=30f4d854-2ed4-4544-abe6-b70c9cfcd024
Certificate serial:       010D0C9F4328584A24C55612379281E9753C75C0
Authority key identifier: 1C:EF:21:33:6A:B2:31:DF:FD:FC:00:39:FA:6A:01:A9:26:35:58:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/ec6f1f6b-1a9a-3156-bdca-6e798e300be3.roa
Signing time:             Tue 10 Jun 2025 09:47:28 +0000
ROA not before:           Tue 10 Jun 2025 09:47:28 +0000
ROA not after:            Mon 08 Sep 2025 09:47:28 +0000
asID:                     14618
IP address blocks:        50.115.218.0/24 maxlen: 24
                          50.115.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:24:c5:56:12:37:92:81:e9:75:3c:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f4d854-2ed4-4544-abe6-b70c9cfcd024
        Validity
            Not Before: Jun 10 09:47:28 2025 GMT
            Not After : Sep  8 09:47:28 2025 GMT
        Subject: CN=35839f38-2e20-4821-ac4e-e79edd405d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:86:c0:24:dd:4d:29:77:64:f6:95:e9:34:
                    ba:00:dd:0b:7f:12:df:4f:89:27:4c:58:97:59:97:
                    a4:03:23:0d:fe:f5:f6:2b:64:4a:e5:22:c4:59:c0:
                    52:e0:61:cf:12:2a:b0:c8:58:6c:05:6b:81:21:be:
                    2a:38:28:18:7d:25:51:55:15:15:5f:09:4a:bd:84:
                    21:8f:16:49:cf:38:b9:e1:d0:fd:7e:c1:73:02:e6:
                    91:14:f9:87:de:62:3c:9d:63:8f:25:2c:30:37:fc:
                    09:b5:a6:05:c1:f2:f9:7c:38:c5:2d:68:93:3b:f5:
                    7e:04:b6:91:8f:c4:cc:30:13:d0:d4:db:91:73:d2:
                    c4:91:91:fe:fa:07:bd:6a:06:17:41:eb:48:c0:dd:
                    a9:02:fd:bb:bd:cb:bb:90:5a:e2:92:b3:8f:2c:4a:
                    36:62:d0:96:8b:1f:98:64:e6:ea:aa:f9:9e:6b:ae:
                    c6:7b:11:6c:3b:52:1e:77:ce:83:10:36:81:d7:d1:
                    60:7d:0c:77:64:2a:79:c7:9e:a6:83:6b:61:50:86:
                    e7:ec:84:56:7f:5c:1e:a3:10:02:b0:9e:7f:e5:7c:
                    d6:23:e8:96:f3:18:33:e8:e5:e9:db:e3:b6:1e:03:
                    1c:9b:80:1a:80:81:fa:0e:7c:34:30:de:c7:99:bf:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:BA:EE:7C:84:9C:65:47:3C:33:76:4A:1A:F6:DB:9C:30:E1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/ec6f1f6b-1a9a-3156-bdca-6e798e300be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.crl

            X509v3 Authority Key Identifier:
                keyid:1C:EF:21:33:6A:B2:31:DF:FD:FC:00:39:FA:6A:01:A9:26:35:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:1a:fb:a0:b9:83:42:8c:cf:2b:75:2c:15:42:43:14:48:
         c2:3c:b6:92:a3:e8:cf:1f:21:a6:31:b3:8f:42:9e:91:78:19:
         e7:fd:c0:0b:a0:d9:d1:ec:ee:29:77:b0:45:ab:bc:3f:f5:ba:
         3e:57:a3:d1:d7:02:2c:af:67:e3:9f:e1:e9:b9:91:cc:c7:d5:
         ea:c3:a1:02:aa:ae:df:44:b6:a8:ad:6c:cf:79:5a:c9:5e:32:
         65:ad:fa:31:54:95:50:da:b2:4a:1e:1f:4c:22:87:5e:f5:05:
         ac:6e:02:be:c6:f3:9e:4e:d9:db:40:fd:b7:36:32:8b:8e:31:
         74:a5:47:3c:96:65:36:48:31:9e:30:36:5e:ce:6a:55:74:4a:
         53:bb:3c:96:a1:2d:8b:eb:ba:b2:39:f3:1a:dd:72:24:eb:4f:
         fa:87:ba:cd:97:61:ba:2e:86:d3:3d:2f:08:f9:12:a5:48:23:
         00:fc:c3:ed:ce:d5:fe:fe:00:44:30:17:01:c1:5d:79:de:fb:
         36:3d:88:8f:7e:8c:12:31:1f:b6:8d:e2:df:e0:77:ff:d8:5f:
         23:02:6e:e3:0f:d5:3b:04:a7:75:45:dc:98:aa:1b:69:6f:56:
         10:28:37:38:5b:d1:33:0d:53:c1:e4:e0:bb:40:cd:65:71:f4:
         97:cc:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:40 2025 by rpki-client