Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb4fe703-eb06-3e96-a4ba-f882cc1a4003.roa
File:                     fb4fe703-eb06-3e96-a4ba-f882cc1a4003.roa (raw, json)
Hash identifier:          BECIEerngLLDr1rrbB/n2UYQbZkQ4d2S8uNTywR6RJk=
Subject key identifier:   59:16:F1:2E:18:72:76:41:49:09:88:1F:FA:4C:0C:95:60:41:2A:CD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD014D625D5468CB909280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb4fe703-eb06-3e96-a4ba-f882cc1a4003.roa
Signing time:             Thu 24 Apr 2025 11:52:02 +0000
ROA not before:           Thu 24 Apr 2025 11:52:02 +0000
ROA not after:            Wed 23 Jul 2025 11:52:02 +0000
asID:                     19905
IP address blocks:        50.83.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:01:4d:62:5d:54:68:cb:90:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:02 2025 GMT
            Not After : Jul 23 11:52:02 2025 GMT
        Subject: CN=c37c660c-8b89-46e4-93e2-04c14bf4bc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:14:2f:78:55:d4:69:2f:dc:11:87:18:b3:
                    79:96:13:aa:00:20:4c:bd:92:6c:fc:5e:e3:54:3b:
                    78:54:70:3a:1e:a6:c6:bf:2f:c2:1f:36:08:ca:13:
                    55:2b:3e:dc:0d:90:58:71:4c:56:aa:33:cb:9c:e2:
                    c8:e8:d3:e3:3e:bd:87:33:6a:cc:79:84:f0:f4:9c:
                    a6:d5:ed:1e:77:5d:e4:92:27:e9:2d:9c:89:40:fa:
                    ae:16:b5:0b:10:50:e0:cd:b8:ed:6e:80:5a:cf:75:
                    99:78:0f:4d:05:f5:05:37:9f:8b:95:16:e0:6f:77:
                    c7:53:10:7e:18:fe:2d:f0:f1:3b:30:f2:b9:18:89:
                    d2:e1:e4:f3:99:fd:73:a1:c4:14:3c:1f:35:16:dd:
                    82:e5:b7:05:05:67:f2:2f:19:a7:45:77:00:64:45:
                    9a:e1:0e:8d:e9:b2:ce:5a:e6:d8:d9:f3:41:b8:b2:
                    9f:c9:8d:8e:83:e3:99:11:92:e7:97:bf:1e:df:0d:
                    c2:97:58:eb:3c:86:a5:b4:82:6a:41:36:c2:3f:85:
                    63:31:fc:2b:fe:89:9f:18:9b:63:e8:7a:c1:8c:9f:
                    cc:6b:b1:79:17:93:d1:78:cc:ed:34:fd:5b:75:b6:
                    b0:96:d9:99:71:4b:8a:0f:5a:ba:99:24:f1:2d:bf:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:F1:2E:18:72:76:41:49:09:88:1F:FA:4C:0C:95:60:41:2A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb4fe703-eb06-3e96-a4ba-f882cc1a4003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:cd:35:38:cb:90:61:99:29:1e:aa:b6:7c:88:21:f0:66:
         ca:33:5c:0a:6e:a7:a3:eb:8c:1c:a0:3b:c6:16:97:66:39:17:
         f3:36:08:f3:08:47:10:1b:1b:64:07:7e:39:5d:ab:08:68:52:
         ad:cb:3c:0b:3f:65:1f:50:04:09:cd:16:59:e7:9a:b2:e8:bc:
         69:bd:ab:69:4d:c7:ae:91:7d:ad:66:5f:40:53:19:69:9e:90:
         96:9a:83:74:95:da:f4:58:e0:05:82:96:69:04:f1:06:01:67:
         03:a9:c2:dd:66:ae:47:f0:bc:cf:b2:98:78:1b:08:57:f7:90:
         07:b7:bd:c0:6e:ae:ac:b7:c5:c7:47:3e:ed:53:3b:a4:bd:b3:
         ef:e0:27:ee:7f:4a:ca:bf:9d:b0:a6:28:9a:6c:bc:e5:a6:b4:
         c6:86:90:8f:fa:fb:89:c9:96:66:7f:28:44:12:74:04:98:d5:
         84:5e:cb:cb:cc:1d:28:b3:58:17:a6:d8:5f:e6:ff:b7:01:b5:
         11:c7:ee:36:d5:96:85:61:69:dc:a8:bd:79:76:b9:02:e3:c0:
         a8:e6:e5:2e:dc:56:24:ef:f9:5d:d7:22:b1:07:81:35:d5:e7:
         ff:84:9d:ba:bf:df:12:22:bc:35:38:e4:19:28:06:a2:95:db:
         82:b1:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:08:00 2025 by rpki-client