Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb20a8cb-2064-3cd9-a689-9b0c9862c026.roa
File:                     eb20a8cb-2064-3cd9-a689-9b0c9862c026.roa (raw, json)
Hash identifier:          1aIasZmm9wCfpUJPQlnuuWwRQ7Jk2nTpTYZcrMJThVc=
Subject key identifier:   67:4A:0C:62:C1:C4:2B:6B:00:C5:3E:65:F7:5E:EE:A5:30:31:84:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5F9EEE511A05FD8498080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb20a8cb-2064-3cd9-a689-9b0c9862c026.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        50.197.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:f9:ee:e5:11:a0:5f:d8:49:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f2ffd493-4f0c-4689-9b9e-a7498ecf21f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:c2:c5:18:60:3e:14:35:c2:19:bb:fd:ce:
                    46:55:46:28:3d:6e:76:a3:93:27:fd:d1:be:a0:68:
                    96:c4:89:bc:0d:7a:33:bf:e8:6c:76:3e:fa:40:0e:
                    a0:57:90:3c:de:93:51:8a:63:06:1f:f5:d0:4a:ff:
                    d5:fc:16:7d:25:e4:c6:3c:54:5b:63:14:97:3f:82:
                    3b:a2:2a:d8:0a:de:6b:93:2c:9b:63:e3:1e:3b:92:
                    7a:3e:3e:1e:1a:16:ca:e1:6f:33:9a:ee:89:39:f0:
                    8b:1c:6e:71:1c:b3:79:4c:b0:e6:4f:21:4e:2f:fe:
                    c9:76:3c:01:8a:c0:69:1b:f9:eb:80:d2:27:90:b5:
                    e3:0c:dd:79:ad:88:85:78:6a:24:07:26:fc:03:be:
                    cd:80:89:16:da:00:f2:27:46:3c:a1:eb:00:b4:23:
                    bf:6a:41:66:90:5a:a6:5d:fa:d6:4f:fc:3a:3d:04:
                    58:4d:f1:28:11:3d:93:3c:e8:19:aa:ab:9c:8a:5d:
                    ba:9e:36:da:bf:fa:1f:97:97:24:5f:d3:ec:d6:07:
                    9d:ed:83:81:3a:13:0e:29:d8:80:6e:c4:60:eb:ed:
                    b9:80:fe:eb:30:25:bf:21:38:21:43:d8:1b:15:91:
                    de:de:db:64:09:6e:7b:c2:e9:42:b3:94:76:98:65:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:0C:62:C1:C4:2B:6B:00:C5:3E:65:F7:5E:EE:A5:30:31:84:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb20a8cb-2064-3cd9-a689-9b0c9862c026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.197.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:3d:04:82:98:74:89:e7:2c:d4:c9:00:48:3d:d0:65:c8:
         5c:fb:a6:a7:7b:fb:0f:7b:8e:a4:c7:4b:e4:84:3d:a5:0c:fc:
         df:ea:bd:d9:2b:6a:9c:37:ac:b2:e5:c5:5a:a0:54:a8:8a:4f:
         3d:f0:76:80:0d:a1:b4:03:24:77:22:39:3b:c8:0b:92:83:47:
         25:aa:97:a9:1c:0b:14:7d:86:50:85:c1:74:a2:e5:c7:24:e0:
         06:18:9f:b6:44:70:db:b0:0c:b2:48:ff:39:ea:9e:af:a3:af:
         d0:33:39:d9:40:f9:ad:20:18:af:c5:4b:0c:aa:aa:d7:9f:69:
         0f:d1:6a:bf:c1:6b:5d:3d:51:53:d4:7a:34:f4:ac:b2:0d:31:
         ec:59:cd:de:66:33:93:f5:0a:04:06:54:83:ff:41:20:02:27:
         70:ab:0b:70:88:0b:8d:0e:7e:16:04:e3:4d:6d:66:ef:8f:08:
         7a:a3:aa:70:48:28:bc:c9:b3:14:42:b4:cf:2b:fe:f5:bf:8c:
         ed:96:0e:85:59:10:ed:d5:cd:85:e2:db:4f:28:05:19:bf:0a:
         41:61:84:93:e8:05:44:22:6b:86:41:f7:83:98:dd:8d:a9:24:
         2c:f9:c8:72:a9:25:71:e7:63:65:30:a7:b2:08:c7:ce:8a:0d:
         1f:3a:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:45 2025 by rpki-client