Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/33367fff-2fb2-33d6-b018-13fdb7a57286.roa
File:                     33367fff-2fb2-33d6-b018-13fdb7a57286.roa (raw, json)
Hash identifier:          Y7ZIVbkbCE1z1vNp9ive8ii5DgZ+uBeofm/JxCP/JfM=
Subject key identifier:   00:37:A0:B1:34:9A:E3:90:6E:76:A2:78:1F:63:C2:BA:C5:19:78:9B
Certificate issuer:       /CN=50a1e076-031a-4889-966a-80f9220a2ed6
Certificate serial:       010D0C9F4328584A268AAFEC4DED5E0707600E00
Authority key identifier: 77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/33367fff-2fb2-33d6-b018-13fdb7a57286.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        174.34.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:af:ec:4d:ed:5e:07:07:60:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50a1e076-031a-4889-966a-80f9220a2ed6
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=98f61775-3091-40ab-998e-a72b1c88d501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:6e:56:80:02:a3:5c:06:ba:cb:c4:22:dc:
                    d0:9c:9f:1d:cd:bd:55:2a:6e:03:ee:a3:7f:d6:41:
                    8e:b7:32:a1:57:ff:de:a9:be:93:21:df:0b:c0:e6:
                    7c:0d:e2:dc:b7:b6:2f:f3:e5:34:47:6a:ea:54:66:
                    0c:30:c3:2d:e4:45:09:60:1b:66:d9:87:24:26:df:
                    18:4b:f6:73:ca:b9:75:b2:0f:b6:f9:ad:72:ae:03:
                    46:d6:b6:91:f6:49:03:a4:7d:0d:1c:77:2f:ff:6d:
                    c5:41:7b:1b:4c:14:92:8b:5f:3d:64:2a:f9:86:61:
                    10:96:a6:20:99:0e:51:8c:34:3d:b5:36:86:3a:60:
                    e9:d4:a8:9b:e4:8e:74:fc:30:a1:bb:56:9f:08:22:
                    34:10:f0:c5:38:b8:52:19:68:75:30:fa:fc:58:0a:
                    7a:8b:59:b2:df:20:ae:f6:28:b8:91:72:16:42:2e:
                    3e:80:7e:de:4f:b9:ec:2a:75:d6:fe:69:0f:01:3a:
                    10:97:3e:ca:79:ad:a6:c1:72:a9:fc:10:13:06:4c:
                    a8:43:b0:25:a4:2e:90:17:fe:4d:05:24:71:14:4e:
                    e9:0d:0a:35:ed:b2:7c:89:ed:af:1d:1a:7d:e6:29:
                    1d:ee:d6:10:2a:b3:60:5c:cb:9a:fe:b8:6d:65:73:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:37:A0:B1:34:9A:E3:90:6E:76:A2:78:1F:63:C2:BA:C5:19:78:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/33367fff-2fb2-33d6-b018-13fdb7a57286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.crl

            X509v3 Authority Key Identifier:
                keyid:77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:99:e0:03:5e:57:a2:d0:65:0e:a1:6e:19:04:36:c4:49:f0:
         d5:88:af:80:94:55:2c:79:2e:41:a9:2a:3b:59:6f:d4:40:70:
         3c:01:01:9d:c8:d2:d2:8c:c8:c5:49:a2:77:e7:e0:70:a8:a5:
         36:22:c0:dd:7e:ee:9f:4b:9e:f8:04:40:57:3c:6d:43:09:b4:
         83:41:d9:2b:0e:12:7e:1d:b6:0c:1e:89:8a:85:09:50:73:0c:
         b4:46:c0:0c:de:4a:0f:ac:05:4e:ff:88:54:04:fe:61:b5:4d:
         6f:82:51:4f:e1:9b:fc:d7:e7:9a:5d:7f:32:01:be:ac:c6:10:
         de:78:6f:06:ad:10:13:06:a9:01:fc:68:bf:60:9b:af:2b:d5:
         ae:1c:fc:b4:2d:45:de:98:5c:b8:28:94:e4:84:fc:99:5b:68:
         2f:17:16:b8:e1:4f:08:7a:a9:3d:f4:29:1e:5a:ea:a5:81:54:
         22:70:dd:91:64:19:b9:29:05:cf:bc:82:69:8a:d0:7a:3f:20:
         31:6e:b2:2f:67:9e:28:08:e1:a0:bb:a7:bc:9c:fb:4b:f1:3c:
         0d:e2:2f:25:a2:d2:8c:36:94:96:0a:b9:e9:b2:a6:c9:3c:7b:
         8d:bd:81:34:de:a4:87:c8:49:85:df:7a:19:4c:a3:05:6c:b4:
         2b:e4:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:20:25 2025 by rpki-client