Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa
File:                     f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa (raw, json)
Hash identifier:          yrH9KVxFPT0IZW2Fhk9k7y2yjhLn8knB2s+oJLGBXDQ=
Subject key identifier:   29:46:3E:E0:4E:08:6D:07:5D:EF:1B:31:29:3F:0A:A6:70:15:BF:89
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A10E32089FC5883F7629A23A0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa
Signing time:             Tue 03 Jun 2025 06:51:20 +0000
ROA not before:           Tue 03 Jun 2025 06:51:20 +0000
ROA not after:            Mon 01 Sep 2025 06:51:20 +0000
asID:                     16509
IP address blocks:        50.3.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:e3:20:89:fc:58:83:f7:62:9a:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun  3 06:51:20 2025 GMT
            Not After : Sep  1 06:51:20 2025 GMT
        Subject: CN=d86fb4aa-b337-48ad-86b8-2333d2576301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:1e:b5:d2:52:18:ac:03:c3:3f:d9:df:12:
                    60:fa:8a:4e:e0:28:eb:31:b4:20:38:3a:f9:72:b4:
                    9c:59:26:f9:57:b2:26:71:dd:9d:60:d9:32:ce:d6:
                    d9:28:e8:83:4b:5d:f8:38:66:63:fb:32:09:65:08:
                    f8:b3:f8:9d:4f:87:fb:ac:8f:45:55:1b:bb:b9:bc:
                    a6:5c:52:71:39:bf:4a:1e:ff:a4:da:28:20:57:7e:
                    0d:4d:53:2d:e6:94:cf:08:18:de:9d:47:9e:aa:87:
                    ed:aa:a5:7c:31:3b:d1:ec:80:b3:1d:19:86:9b:e4:
                    cb:18:6f:fb:04:20:98:6f:79:4c:83:2a:ed:0a:7a:
                    f3:03:91:b4:1f:a6:bd:1d:4a:9c:24:d5:57:3c:82:
                    69:48:a8:64:ae:a3:c1:11:c8:75:dd:34:c8:9c:5f:
                    b7:9d:46:ec:d0:4b:28:02:89:c5:e8:21:b8:58:30:
                    44:be:03:b1:9d:30:57:ad:e0:4a:fd:db:51:51:e3:
                    70:83:cc:a9:60:bb:dd:0b:cf:49:85:7d:af:f4:98:
                    46:af:a9:05:7b:99:d1:4b:ee:d5:5a:02:90:89:a4:
                    07:82:f2:d7:79:ab:ac:59:ee:62:07:73:ef:0e:ed:
                    eb:24:38:c3:52:68:2f:3d:80:37:0f:76:70:50:b7:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:3E:E0:4E:08:6D:07:5D:EF:1B:31:29:3F:0A:A6:70:15:BF:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f00b7fd4-7cd1-302f-a851-52754e1b1eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:cb:b2:de:42:e4:41:f2:ca:3a:d9:76:0e:2b:36:e1:7f:
         89:81:e7:97:32:8d:b9:2a:5c:2e:b1:dd:e4:04:44:9e:9a:49:
         9b:4c:05:6b:e0:0b:d1:7d:a3:e5:dc:89:61:0f:fa:aa:ae:50:
         65:19:63:68:4c:fd:2c:bc:b8:b3:32:4c:60:86:58:3c:1a:80:
         c9:a5:b8:58:75:dc:5e:10:02:02:c0:28:20:15:d6:2a:be:e1:
         ea:7f:e1:99:cd:9a:46:4c:4c:13:02:6c:13:42:02:10:72:95:
         e6:24:73:e7:4e:40:3b:08:7b:7a:a0:5f:db:91:58:fd:cb:af:
         ee:a1:bc:dd:50:20:66:fe:45:bc:a8:e3:1e:81:e9:70:bd:b9:
         9f:71:df:b6:12:5a:04:25:fa:7d:92:35:0c:f3:17:61:4e:e8:
         b1:77:a6:69:a0:48:4a:40:eb:d5:32:78:66:0c:1c:55:86:df:
         81:12:28:bd:35:7f:07:df:1c:cb:e6:43:d0:6e:b1:21:f0:e5:
         36:a5:7c:c1:a8:27:6b:d1:1a:ef:24:b8:ec:ea:ae:9b:25:6b:
         03:7b:ab:28:d3:ec:50:c3:4c:89:51:28:9a:e8:c3:6c:2b:4e:
         a2:c1:c8:df:8b:e6:d2:28:8d:ef:85:56:7b:0e:d0:e4:74:2a:
         95:93:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:50:37 2025 by rpki-client