Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
File:                     50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa (raw, json)
Hash identifier:          QmT725wpKO7gcedayyd94Erwa2pBCqUcSCbylS6vtIY=
Subject key identifier:   4A:59:12:2F:94:11:A0:42:21:7B:E4:56:1D:33:4F:1F:1C:82:BA:74
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F43285849C20A16CDE73E2BAED8B50FC0
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        72.13.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:16:cd:e7:3e:2b:ae:d8:b5:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8455a1b1-520b-4983-8cd9-2a4c9b644e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:6b:d1:d8:13:bb:01:05:65:b4:be:ef:ba:
                    5c:4c:ad:33:47:49:a1:1f:10:37:43:10:ce:d1:1e:
                    0d:97:f0:fa:bf:f6:d4:6e:9e:87:3f:e3:12:86:3c:
                    f2:7a:fc:8a:dd:a0:be:c6:27:35:93:48:63:a1:81:
                    fd:1d:09:f9:a3:3e:f1:6c:fd:db:13:b5:fb:7e:3d:
                    1d:8e:b4:c9:5c:d1:19:69:a4:8c:df:9d:ee:44:fa:
                    38:c1:51:39:33:ba:45:fd:34:db:12:07:1f:32:0f:
                    a5:8a:7f:b0:86:a8:11:e7:9e:c6:b2:8e:2a:19:dd:
                    77:62:c1:e2:89:bc:05:24:77:8f:c1:cc:90:21:98:
                    7b:52:de:5f:84:d7:c9:92:13:dd:b8:cf:39:6c:9e:
                    11:16:05:cf:34:7b:61:3f:26:cf:fe:08:7c:5a:3d:
                    99:81:b0:db:75:91:46:0c:bb:1d:54:2b:e7:53:be:
                    77:8f:39:02:7e:70:0e:02:d7:ee:5c:27:93:75:7f:
                    2e:fd:b6:40:bf:7f:98:0b:fe:d7:07:bc:9b:49:57:
                    ac:85:e7:c1:45:37:d4:3e:6b:0a:77:4e:63:35:c1:
                    27:e5:17:05:67:bf:27:fd:ba:72:7c:e4:72:cf:55:
                    54:94:98:67:30:12:d7:4d:1b:3b:5e:1b:c1:1a:77:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:12:2F:94:11:A0:42:21:7B:E4:56:1D:33:4F:1F:1C:82:BA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:49:9a:71:94:9a:8f:d6:c4:a7:a8:61:bc:22:df:79:9e:
         4a:ae:9b:af:bd:b7:ba:63:3c:a3:52:2f:f1:61:4b:f0:9e:09:
         1a:3e:8d:0f:08:05:bb:fb:a2:b1:21:18:23:40:0a:bc:2b:ae:
         f5:a1:8f:8f:ad:15:e8:ff:db:b9:96:fe:db:5a:cb:e9:2f:9f:
         61:3f:02:48:f3:53:95:6a:f8:b0:34:c8:cf:fc:30:62:bf:c2:
         93:47:22:73:47:9a:9a:c3:5e:c4:8c:f1:28:48:14:82:4c:c4:
         36:88:b9:27:88:c0:41:25:f8:d6:68:b5:93:da:59:88:84:43:
         3e:59:5f:90:06:5f:10:ae:10:f7:87:7b:8f:57:98:c2:c7:5d:
         ac:7a:f8:23:78:c6:3c:e7:f7:5f:74:48:da:09:23:18:ec:ef:
         ef:78:99:73:68:20:a1:92:f0:be:59:bf:3c:ac:82:96:49:3b:
         ea:99:fe:92:29:05:82:87:3b:5b:f8:43:15:06:65:61:e9:e4:
         c0:b5:b9:90:19:ca:ea:04:3a:4a:25:98:de:70:ba:ba:32:5e:
         15:ab:58:25:80:99:89:f6:e5:db:1b:d9:aa:68:3d:73:79:aa:
         b4:4c:5f:f1:12:35:89:78:b6:26:06:7c:23:ce:d7:82:89:57:
         d9:a6:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:14:02 2025 by rpki-client