Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa
File:                     8b649a33-d8c0-30be-b903-a213a24ec051.roa (raw, json)
Hash identifier:          S0z8CXb8K4NmNRdFEo15XuyHoZ7Wiyn0cum+h9Q5ULA=
Subject key identifier:   84:E0:0F:EF:79:AF:1D:30:9F:E0:39:6D:B5:2B:85:43:51:E8:57:CF
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A38EF47670F7C0622D3B2AD80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa
Signing time:             Tue 17 Jun 2025 15:08:09 +0000
ROA not before:           Tue 17 Jun 2025 15:08:09 +0000
ROA not after:            Mon 15 Sep 2025 15:08:09 +0000
asID:                     35280
IP address blocks:        50.2.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:ef:47:67:0f:7c:06:22:d3:b2:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 17 15:08:09 2025 GMT
            Not After : Sep 15 15:08:09 2025 GMT
        Subject: CN=eab7725b-34bf-463d-8b11-0e78df424e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:ae:64:6a:a3:a5:5e:98:d3:58:42:9f:c6:
                    8b:37:34:bf:1e:90:0f:8d:21:b5:46:2b:6e:75:8d:
                    ca:55:82:f0:5f:43:55:66:6f:c9:8f:18:b9:61:02:
                    3d:71:f3:b1:3e:f4:ed:83:34:a8:f3:67:76:78:e7:
                    66:6d:20:fc:fe:c6:1b:7a:9a:31:ea:1b:6e:c2:aa:
                    e8:88:56:39:12:71:5b:68:06:78:6c:97:30:b0:1f:
                    8b:98:19:ae:14:a0:3d:e3:06:14:8b:5b:cf:f9:0b:
                    38:98:51:8f:0c:23:b3:b3:61:27:1e:b3:6f:49:67:
                    88:f1:07:66:09:a9:25:e9:6f:bf:f0:40:15:79:79:
                    78:5b:f1:19:dc:79:65:1a:a8:62:db:08:50:e9:34:
                    f1:99:af:4b:a3:9a:1b:72:0f:74:7d:34:e6:3b:00:
                    d6:0c:c1:48:57:33:e9:f4:fd:1e:cc:90:e5:d5:e8:
                    6e:49:20:3f:4b:c2:8f:6d:e4:51:7d:ac:26:91:f0:
                    01:f5:a7:4a:a3:ca:e2:c4:72:13:67:ff:44:76:da:
                    ca:5d:88:24:12:ef:48:b7:42:cd:09:4c:96:76:fe:
                    98:91:c4:06:0c:9f:25:04:a5:dc:65:89:02:2b:d8:
                    de:a1:85:fd:e2:23:88:a1:45:91:f8:df:bc:12:d9:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:0F:EF:79:AF:1D:30:9F:E0:39:6D:B5:2B:85:43:51:E8:57:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:7d:87:18:e8:bb:0b:ba:cb:d8:9f:0c:cb:7f:b1:24:e0:
         13:58:db:e6:cf:c2:ad:a3:07:d3:8b:df:ce:31:2a:2f:8a:24:
         a5:a0:16:8d:5a:86:b2:e0:24:83:a1:ed:39:7e:d9:70:07:a7:
         66:15:15:52:0a:f3:cc:1f:e4:38:85:55:a0:c2:e6:74:ce:0a:
         80:5a:d6:4a:8e:3b:80:51:64:fd:d5:ab:0c:c7:1c:53:48:0a:
         d8:29:2b:23:1a:67:35:3e:a1:2e:c9:48:03:bd:66:4b:9b:78:
         5e:21:6c:bd:1b:e9:88:96:dd:4a:13:51:4a:7a:1a:80:f1:fe:
         b7:83:41:b3:4a:27:94:3f:a0:49:a4:34:20:89:54:a2:9b:0e:
         28:ad:3b:c8:82:bf:7e:ee:d4:f6:1f:f3:42:f7:4c:31:db:24:
         60:fe:23:d3:24:f5:df:d3:e4:ea:16:8b:dc:27:80:37:49:9d:
         f0:4e:15:3a:2d:55:93:2c:99:b3:9b:33:8b:87:ee:57:11:8c:
         5f:c5:25:18:9e:03:0e:4e:a9:c0:f6:d6:d9:f3:ff:9c:d7:62:
         eb:5c:16:1a:a5:f2:ab:a5:70:3d:b2:0d:7d:32:70:93:38:1c:
         30:46:15:ea:94:fe:61:9b:b9:21:bd:2e:d3:68:ba:57:fb:10:
         24:16:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:04:20 2025 by rpki-client