Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa
File:                     7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa (raw, json)
Hash identifier:          A1POIj1be19bcLL7FcE/nE36sGRu/PSbK5isYaYTjvo=
Subject key identifier:   C2:2C:8D:8F:D4:D5:85:24:A8:DA:1D:0A:F1:26:C2:C4:3C:05:0A:21
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F432858499C26B15EF40E7B794DAA7140
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa
Signing time:             Tue 22 Apr 2025 11:17:53 +0000
ROA not before:           Tue 22 Apr 2025 11:17:53 +0000
ROA not after:            Mon 21 Jul 2025 11:17:53 +0000
asID:                     32043
IP address blocks:        50.3.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:26:b1:5e:f4:0e:7b:79:4d:aa:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 22 11:17:53 2025 GMT
            Not After : Jul 21 11:17:53 2025 GMT
        Subject: CN=0998f6e5-4b32-4f68-b7fc-88242b576bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:a6:bf:24:56:2d:09:e9:83:3a:43:72:e7:
                    b4:36:d8:db:18:de:b7:14:e6:9f:bd:cd:99:35:c7:
                    3f:7f:5b:39:32:a2:a7:8f:f8:d5:a0:db:5e:77:42:
                    0f:0a:fe:4f:1d:bc:1a:18:2e:0a:4b:64:ca:13:a2:
                    ad:50:83:ed:cc:af:1c:fa:00:12:b0:30:30:5f:de:
                    3f:d1:0f:dd:77:14:5d:0b:2a:4d:9c:fc:29:38:81:
                    33:5e:7e:fa:dc:3b:d6:7b:9e:d8:c7:f2:7e:a0:26:
                    ed:a6:f9:a2:60:4c:8d:ef:9c:3d:14:86:46:04:e7:
                    fc:d3:10:1e:45:29:94:9f:64:14:20:ea:35:ea:d6:
                    ea:8a:0f:8e:d6:76:0a:62:ec:11:b8:28:0d:29:da:
                    6a:98:0b:39:6e:2b:c1:f0:e7:21:84:4d:b8:f8:d4:
                    46:cb:88:86:a3:ca:f4:d6:14:83:7e:b7:e1:da:c2:
                    b8:03:f5:0a:90:ad:c4:36:42:9e:b5:6f:cf:cf:8f:
                    48:0e:a4:36:53:da:a6:24:ff:b9:9d:88:32:47:8b:
                    d5:b4:c9:c5:f4:5d:8f:64:b6:8e:07:e0:0e:80:ef:
                    d7:32:47:fb:c2:5e:9b:cd:aa:5b:74:01:8e:79:cb:
                    74:03:3b:d9:a4:30:b0:fa:f0:30:89:57:bf:80:d0:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:8D:8F:D4:D5:85:24:A8:DA:1D:0A:F1:26:C2:C4:3C:05:0A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:73:a8:c9:9f:1f:07:2f:46:8b:c1:7a:aa:42:ba:42:36:
         bd:51:59:8f:a2:9b:61:5c:74:23:f9:df:27:ff:1a:87:38:53:
         c3:9e:89:1a:18:ba:c5:5b:b5:a0:08:c9:21:01:c6:62:f3:37:
         6a:8a:e8:11:07:39:5f:3e:05:5b:ac:27:74:99:44:49:e0:61:
         90:09:89:29:23:df:24:48:02:1d:ed:ea:21:6d:fc:4e:ce:77:
         5a:4c:fd:70:1d:d3:66:92:7b:45:24:83:9d:30:e4:e4:aa:c4:
         ac:03:d8:b2:1b:70:d9:4c:04:58:99:d4:05:f9:b6:01:eb:1d:
         f3:e7:1c:3a:70:bc:3e:66:af:76:49:65:76:44:1a:28:5b:6c:
         f7:a8:fe:bc:a4:ff:3c:ea:a6:37:b8:c7:c1:51:1e:d1:a6:6f:
         92:00:66:42:eb:22:c4:b1:3e:76:ae:77:ec:98:35:b3:6f:e5:
         e6:ea:a0:e3:e8:23:d8:f2:fa:5e:92:66:61:26:8d:bb:5f:65:
         79:76:11:bf:9e:cb:85:7d:7c:34:c0:cc:75:2b:15:59:33:d8:
         6d:09:b0:45:36:ad:31:4d:d0:52:6e:eb:38:8a:8e:fb:66:14:
         7f:66:2b:fd:76:51:05:4b:23:cd:78:bd:b4:2e:01:4e:0a:d2:
         21:19:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:56 2025 by rpki-client