Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b50c903f-6a4d-3fcf-87db-487e8521be78.roa
File:                     b50c903f-6a4d-3fcf-87db-487e8521be78.roa (raw, json)
Hash identifier:          OrvXMgV4TvTzn8j5ltIA7I4hM7NCUSUIE+314gYNfAc=
Subject key identifier:   6E:9E:52:82:D9:CA:CF:60:09:68:C5:08:95:47:82:15:58:B6:06:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800EFC885EE1E69EF6D950
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b50c903f-6a4d-3fcf-87db-487e8521be78.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        108.51.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0e:fc:88:5e:e1:e6:9e:f6:d9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c688804f-b837-4df5-9011-4a3f9409ddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:f2:8c:a5:c5:ba:6d:ce:cc:81:61:61:2d:
                    1e:54:e6:bb:26:87:94:f9:fb:ca:e0:80:49:c4:a8:
                    65:61:26:3b:c2:f5:64:4d:c3:dd:55:c2:ed:52:03:
                    a5:44:20:cf:a0:de:af:fc:4b:86:63:1f:87:5d:d1:
                    78:cd:2b:f4:61:4e:be:42:73:80:a1:24:0f:dd:fb:
                    51:0c:fa:31:74:f2:56:e4:aa:52:fa:9e:ba:6d:78:
                    7e:da:7a:67:49:97:40:b5:19:99:ef:78:46:e3:c7:
                    61:17:8e:b3:0e:ae:9b:13:c4:c2:ee:88:d4:ef:45:
                    93:f5:b1:43:99:3f:e8:f9:d9:b1:3c:10:35:ca:f9:
                    5f:af:ca:5f:35:5d:37:68:cd:66:3e:b8:81:25:8e:
                    66:46:26:06:74:7f:b0:99:e5:3c:d2:86:5d:e4:12:
                    9e:17:6c:01:97:93:fe:02:cc:57:37:28:42:ed:67:
                    e2:59:49:2d:f0:78:4b:a0:2d:0e:19:a8:c6:2f:e8:
                    ff:33:1d:12:06:78:6c:74:02:40:e1:a0:7d:ce:02:
                    02:2e:12:26:a8:c3:39:d2:d9:c5:32:b2:80:4c:0c:
                    17:56:60:db:ab:13:a3:b8:2a:49:8f:09:a0:ca:fd:
                    2e:36:8d:29:99:bd:e2:76:35:8a:23:5c:50:d3:0f:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:52:82:D9:CA:CF:60:09:68:C5:08:95:47:82:15:58:B6:06:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b50c903f-6a4d-3fcf-87db-487e8521be78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.51.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:87:d7:cb:8b:ba:9a:82:91:30:0c:3a:3d:bf:12:ac:1c:b4:
         82:13:8c:19:1a:16:a1:96:3d:43:cf:c0:b5:a8:8a:2a:50:03:
         85:8c:a0:0d:71:d9:1f:9f:d7:1a:db:35:2d:d5:c8:26:cc:85:
         6a:ae:b4:e7:78:f2:24:e2:dd:20:76:1b:1a:7f:4d:87:b2:ae:
         8d:b8:02:b3:86:8b:f7:5b:bf:d9:e7:c4:d7:53:97:c8:10:67:
         5e:b3:5a:a1:e6:69:f6:57:ae:eb:b7:ff:08:e7:50:a4:29:04:
         74:92:8c:5d:49:47:ea:ee:b7:93:47:48:9d:44:d4:50:ee:48:
         14:ed:eb:f8:4b:1a:38:a7:89:d7:90:1c:f4:c5:c9:cb:68:dd:
         42:54:3c:95:c5:b5:67:e9:93:96:2c:76:39:2e:5b:ba:dd:08:
         d7:87:8f:1f:52:c1:82:71:84:00:73:d3:be:b4:d7:69:95:18:
         3b:60:00:20:ae:be:be:e7:1e:f5:82:8f:d6:3f:55:8c:04:ef:
         ca:6d:0c:25:55:7b:9d:2c:48:54:a5:fe:3f:2b:95:32:c8:84:
         e6:4c:16:45:52:73:f4:23:21:c3:3a:20:77:b9:ca:63:97:ec:
         ab:11:a9:3c:62:d9:85:39:4e:d1:5d:23:db:81:5c:f6:64:2d:
         85:0f:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:23:47 2025 by rpki-client