Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ef423f9-a9b5-3a4d-8630-9968aefe11d9.roa
File:                     4ef423f9-a9b5-3a4d-8630-9968aefe11d9.roa (raw, json)
Hash identifier:          0bygkjrBNhgJcdoJwMUsyH3kn3SS5dkYi8i4P5Gc/Og=
Subject key identifier:   33:DB:1C:97:BC:61:0C:ED:44:91:82:DA:55:E3:EB:23:86:6A:95:2A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849AFC276B0944969F1E439FD80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ef423f9-a9b5-3a4d-8630-9968aefe11d9.roa
Signing time:             Tue 29 Apr 2025 11:52:06 +0000
ROA not before:           Tue 29 Apr 2025 11:52:06 +0000
ROA not after:            Mon 28 Jul 2025 11:52:06 +0000
asID:                     174
IP address blocks:        50.3.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:c2:76:b0:94:49:69:f1:e4:39:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 29 11:52:06 2025 GMT
            Not After : Jul 28 11:52:06 2025 GMT
        Subject: CN=93e59304-600e-45cf-bb82-59bec9b3ed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:15:b6:53:df:3a:4e:83:c1:6c:96:80:6e:
                    c1:b1:96:b5:63:fa:4a:5c:e0:9a:61:5c:84:aa:6a:
                    a1:17:e7:26:fb:91:58:72:50:b6:e7:27:02:3b:20:
                    3d:80:eb:47:f6:de:fc:62:ee:3c:44:a2:67:b2:70:
                    c5:18:b1:5d:cd:18:40:4f:c2:33:f2:89:f2:cc:50:
                    fe:60:ab:c0:2b:39:d7:01:14:0d:ba:fc:02:9d:dd:
                    51:0e:46:43:4b:ff:0a:35:62:60:15:84:5c:b2:6a:
                    38:d6:01:3f:21:09:df:07:82:d6:0a:6d:7c:e1:48:
                    0c:8d:0d:ba:d0:2e:0e:07:fa:7c:4b:c0:ee:4a:05:
                    f7:bc:ba:30:02:df:c1:63:be:72:e2:3c:11:df:a1:
                    41:02:6d:0a:83:1d:e5:32:f9:2c:a1:8e:40:88:c0:
                    f8:91:e9:0f:45:b5:16:ac:02:76:cb:98:b4:6c:7c:
                    b1:04:ca:58:b1:7b:72:84:fc:e9:58:29:47:1c:42:
                    51:93:01:dd:fa:8f:98:28:8e:31:6c:b0:14:12:ca:
                    df:0c:a2:31:0c:1a:19:1f:31:31:5c:35:74:87:45:
                    98:5e:28:49:ed:4b:23:fb:7c:fb:8d:fd:33:ec:75:
                    80:e8:5e:08:0f:1c:46:1b:40:f3:83:ee:10:52:6d:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:1C:97:BC:61:0C:ED:44:91:82:DA:55:E3:EB:23:86:6A:95:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ef423f9-a9b5-3a4d-8630-9968aefe11d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:01:84:0e:7d:d0:9e:d4:36:2b:4d:bc:de:57:a2:2e:06:
         69:2d:e5:e8:e7:c7:aa:0f:10:2f:9c:40:ba:bd:bb:17:f5:c1:
         50:31:54:64:d3:e9:70:5b:20:55:41:7f:59:84:55:0c:07:18:
         65:c7:cb:f7:9f:d9:07:a7:47:d3:7d:fe:5a:f1:b7:a5:58:54:
         7c:2a:1b:d4:6c:8c:f9:7a:f2:d9:ec:aa:fe:dc:4a:3f:6d:c7:
         e9:8f:3a:1a:bf:d8:3c:f0:aa:b3:6c:12:df:99:b8:4e:fe:03:
         56:03:bf:97:d9:ac:05:12:44:79:1e:ad:0a:be:b1:ee:81:d1:
         d7:15:ba:c0:85:1f:6f:4c:ef:83:4d:c2:c5:fb:c9:a4:b8:7d:
         81:3e:73:07:99:25:3f:11:4f:da:d2:21:d5:e9:34:88:82:fa:
         a8:8e:43:4f:71:22:d3:a2:cd:21:13:70:5d:d4:a7:0c:47:1a:
         0b:7b:cb:19:32:31:7a:f7:6c:e0:ad:7e:d0:09:78:55:ad:bb:
         2f:68:b7:13:e5:77:22:8b:f5:e3:9d:cc:b5:60:6e:80:92:d5:
         1f:fb:c0:7a:47:1f:50:8c:8e:99:12:ef:15:02:57:b1:a3:c9:
         cf:bb:04:f1:c6:71:2c:7a:80:68:2b:66:a1:45:0b:d1:2c:1b:
         f7:39:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:24:55 2025 by rpki-client