Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
File:                     3f299cab-9486-3373-857f-a888d71f4f3e.roa (raw, json)
Hash identifier:          jlc79b3uBg7tt94IDNW66r7Zbs2pA5kuUVF1GnYJzIs=
Subject key identifier:   12:4F:BE:90:FD:A1:80:79:E4:44:C3:8A:7C:04:9E:FB:B9:0A:3C:8F
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F43285849B6DF454D49EB58ADD8839E80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     26337
IP address blocks:        50.6.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:45:4d:49:eb:58:ad:d8:83:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=82f5e307-9022-4024-a8d0-6f908912455d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:62:91:c7:71:3f:fd:42:33:4f:58:79:a6:
                    90:e9:bb:33:03:05:bc:24:ab:dd:6f:f2:d0:08:a4:
                    92:ba:cc:08:0d:e2:cf:72:a4:e2:eb:10:62:91:e9:
                    0a:5c:be:8c:19:1b:40:de:81:97:60:3e:c2:8b:fe:
                    be:c8:a5:c1:fc:d6:8f:09:92:a4:dc:e8:6f:ca:40:
                    3a:5d:83:9d:9f:46:76:08:03:2b:b4:61:ce:21:f4:
                    5c:c0:84:27:2f:36:29:82:ee:6c:68:4c:c8:9f:57:
                    de:03:84:1d:d3:81:17:ae:84:bf:8e:ba:96:2c:88:
                    c9:08:96:5c:7d:44:fa:5f:86:bb:d2:1b:9f:b3:22:
                    a6:c9:92:5f:d9:a6:97:7b:1b:9c:0a:e2:9c:a5:a1:
                    b8:52:03:b1:d5:cc:fc:ca:99:e1:78:04:6c:53:45:
                    56:0b:00:d0:4d:2d:23:e9:6e:0e:34:50:b3:88:ae:
                    ed:63:52:25:2a:62:07:2b:70:df:06:e6:f6:4f:96:
                    1b:b5:cc:ca:41:02:61:66:06:b3:b0:a5:9b:33:3f:
                    e4:f7:53:10:ce:8e:f8:cc:5c:6b:d5:b8:df:ff:89:
                    3c:eb:82:49:16:bf:42:c0:45:41:6d:d3:11:11:e4:
                    65:f2:98:1f:80:7a:03:31:7a:9b:84:2c:9a:6b:3e:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:BE:90:FD:A1:80:79:E4:44:C3:8A:7C:04:9E:FB:B9:0A:3C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:c9:83:87:a2:93:f7:06:52:08:bd:b3:c4:a7:08:9a:d6:
         df:8f:1c:89:83:f2:41:a2:50:90:61:85:cf:1c:da:0e:44:45:
         f6:76:8c:7f:59:80:d2:94:ab:2f:dd:b6:69:e5:f5:ff:ea:2a:
         c6:2a:9f:30:bb:4a:68:35:76:6b:c4:62:92:07:30:2e:6b:16:
         f2:42:56:6b:61:2c:e2:60:d8:7b:a3:84:fd:f3:46:c2:a7:f0:
         5e:03:1e:c3:88:06:28:09:07:4f:24:aa:70:61:a2:ab:27:93:
         cd:ea:09:0a:86:0a:d4:c5:e0:5f:57:67:4e:37:62:fe:71:6b:
         cb:47:c9:c1:7c:69:cb:7a:29:cc:bc:34:10:7e:b0:de:56:7f:
         88:ec:0f:6b:7c:d6:6b:07:fe:39:83:f1:5d:cf:1e:51:3e:67:
         53:80:c5:cf:6c:7b:ce:d9:2c:74:ca:07:44:b1:58:99:60:c7:
         b4:d2:63:88:5f:2b:55:07:31:bd:e2:7c:71:3d:38:84:88:e2:
         20:bf:ad:7f:ce:cb:35:7b:cd:f1:ec:dd:50:c9:32:95:4b:ee:
         c3:7a:4e:64:3a:e6:a5:11:48:ef:c9:05:75:57:e9:89:8b:87:
         d7:87:d3:fe:77:1c:99:0e:a9:7b:20:49:34:9e:22:9f:7b:22:
         df:06:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:31:47 2025 by rpki-client