Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bf4acebe-42bb-3856-b7e3-7f26c9ad1f4f.roa
File:                     bf4acebe-42bb-3856-b7e3-7f26c9ad1f4f.roa (raw, json)
Hash identifier:          Jqll+/gnQE6i1Eo9xId0HpOTAl7CJGVR0pf66a5XQGQ=
Subject key identifier:   D2:03:29:68:1D:3E:C8:A5:AA:AE:3C:5C:B7:CF:C4:E0:D9:EF:FC:16
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F43285849B589A3D7F05F4B40F0FF6100
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bf4acebe-42bb-3856-b7e3-7f26c9ad1f4f.roa
Signing time:             Thu 01 May 2025 13:32:28 +0000
ROA not before:           Thu 01 May 2025 13:32:28 +0000
ROA not after:            Wed 30 Jul 2025 13:32:28 +0000
asID:                     38719
IP address blocks:        50.6.34.0/23 maxlen: 24
                          50.6.36.0/23 maxlen: 24
                          50.6.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:89:a3:d7:f0:5f:4b:40:f0:ff:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: May  1 13:32:28 2025 GMT
            Not After : Jul 30 13:32:28 2025 GMT
        Subject: CN=af8f94ff-cc84-4b24-ada7-546a29adf89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:80:8b:2b:fb:01:0e:9c:05:6f:6e:b3:ae:
                    fd:cf:a7:e0:8e:60:3a:e5:10:25:2d:bf:94:b8:44:
                    e8:84:b0:0f:ef:f9:35:8c:b9:1a:fa:b0:b2:30:4d:
                    99:f4:95:98:fa:12:bc:38:ed:7d:fa:5d:a8:dd:4b:
                    72:c3:48:7c:85:a7:35:db:9e:d8:05:18:f7:3e:56:
                    b3:44:13:09:44:11:de:bd:8f:53:a0:dd:36:d2:29:
                    cf:4b:63:88:80:dc:ea:5e:a1:d3:0e:e9:de:21:9f:
                    f0:59:88:29:3b:ad:4c:3c:a5:03:ba:b3:b4:8f:dd:
                    0e:03:c1:f3:4e:72:15:5a:09:a3:1d:5b:89:48:49:
                    75:fe:40:26:5d:cf:a7:a9:c8:b2:dc:b7:f8:6c:c5:
                    79:dc:27:af:39:20:09:87:77:f7:a0:85:48:4b:e9:
                    c3:d1:91:bf:f8:76:c8:07:ba:aa:bd:10:ff:47:23:
                    e1:fb:4f:11:16:be:6c:06:90:6f:b8:7d:ed:89:8f:
                    11:e1:69:c3:e8:61:84:00:35:55:90:b3:d2:23:c4:
                    87:59:b7:72:54:93:2c:81:4a:31:4a:56:cf:53:0f:
                    88:b9:b7:0b:dc:2a:9c:a4:ce:a7:38:23:f0:11:02:
                    dd:d9:73:be:0f:08:83:83:5a:93:6b:cf:d3:16:ba:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:29:68:1D:3E:C8:A5:AA:AE:3C:5C:B7:CF:C4:E0:D9:EF:FC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bf4acebe-42bb-3856-b7e3-7f26c9ad1f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.34.0-50.6.37.255
                  50.6.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:43:7d:58:fd:34:c4:3b:ac:68:16:88:eb:a7:0a:c2:e5:
         d9:75:6e:b1:25:16:fe:e0:e3:54:df:8d:5b:e3:b5:74:e8:11:
         70:8c:8f:e2:5c:29:91:31:70:cb:1d:f9:25:08:d9:3b:c0:60:
         95:0d:9c:42:5c:13:35:cc:88:b4:fb:ce:30:6a:3b:fa:a5:61:
         41:6d:e8:71:bc:29:d8:eb:9b:1e:f7:48:d8:27:e9:fb:6f:8b:
         a6:44:16:2f:07:f3:f7:e4:31:bc:10:36:aa:07:3c:f2:52:67:
         6b:35:b7:5e:34:95:df:ae:9b:d3:87:e4:ea:1f:7b:3a:96:0e:
         15:36:d7:d7:de:ae:9a:49:ab:61:1d:cd:b5:0b:3f:99:8c:5f:
         e9:42:50:da:3f:61:1b:cd:b4:48:40:55:24:ab:4b:7a:e2:1d:
         34:4c:2b:e8:18:3c:55:b5:94:e1:e1:13:f0:a8:bd:32:d5:86:
         f2:4b:ce:4c:9a:f3:c8:35:3c:9f:fe:67:af:93:f1:8b:63:81:
         71:44:4f:4f:59:92:85:d2:47:4e:3a:98:13:75:75:53:6c:a7:
         40:dd:91:e4:1b:55:33:3a:87:06:52:2c:5e:39:0f:ba:0f:dc:
         9a:86:a5:ab:9e:37:64:32:3f:6a:9c:96:3d:cc:94:3b:79:a1:
         42:2f:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:30:59 2025 by rpki-client