Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
File:                     99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (raw, json)
Hash identifier:          tZ1DYvfcYPI3H9Jo2j/b8lA7yKRBAOSQjR4RcFSR9RE=
Subject key identifier:   7F:70:B1:3C:EB:CA:0C:A3:72:9E:DE:15:E5:4E:58:51:A0:C0:89:92
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F43285849BDDA3C0EFF20CF0CBDEB2CE0
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     47870
IP address blocks:        198.17.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3c:0e:ff:20:cf:0c:bd:eb:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=675affda-1014-4903-80e8-12e49a9d14b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:87:a7:1c:d5:09:c8:78:ae:19:19:03:d6:
                    44:2e:2f:f6:03:6d:b5:8f:43:0c:ee:b0:9c:cf:42:
                    2f:6f:f7:ca:47:e4:c1:7a:27:f4:81:56:b1:47:05:
                    d5:97:4a:99:05:0f:cb:52:7f:6d:2b:73:25:f9:89:
                    a0:8e:5b:e8:f5:36:28:ca:90:01:18:e4:47:c5:54:
                    2d:40:06:81:02:17:ed:bc:e5:d4:5b:67:68:30:37:
                    67:aa:ee:8d:ba:74:83:bf:4d:c7:52:e5:f4:cf:0f:
                    4c:6e:83:7e:8a:b2:6b:51:47:59:3a:6f:f5:83:6a:
                    6a:df:13:46:a5:39:a1:c9:4b:22:97:e6:c1:f2:7b:
                    a3:5f:43:40:69:9d:2e:a1:2d:1a:dd:94:2e:11:6c:
                    9a:b2:eb:11:4f:65:0d:6a:67:b7:67:fa:66:88:5a:
                    b0:c0:ec:19:22:b5:38:40:42:55:b6:6f:2c:30:8c:
                    28:f3:47:35:0a:21:65:9d:52:25:e2:f0:24:a3:2b:
                    f3:f7:5b:d9:fa:31:a9:54:f5:85:e0:c4:be:78:43:
                    28:60:00:bf:46:fe:09:e7:85:c1:fd:10:1d:2b:fd:
                    4f:2c:ad:db:fb:73:1e:6e:8b:26:f0:57:3a:42:0a:
                    fb:4f:24:2d:10:a2:26:13:ce:7d:3b:75:b6:9c:1f:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:B1:3C:EB:CA:0C:A3:72:9E:DE:15:E5:4E:58:51:A0:C0:89:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:23:f3:fb:35:d0:d1:1e:42:e9:09:55:36:79:39:25:1b:c7:
         5e:30:fd:a5:98:af:dc:d2:9d:e1:d1:ff:ef:28:73:05:3a:3e:
         cc:16:55:c3:75:dd:b7:33:2c:86:8f:a6:81:f8:d9:75:b8:2e:
         22:ec:8d:a1:d2:78:4e:85:16:68:15:31:83:04:6a:40:d2:b8:
         fa:2d:8b:ab:52:25:a9:30:a9:18:3f:2e:0d:ea:d1:2b:0d:fa:
         15:b2:61:bf:36:84:af:b6:98:77:7f:c6:72:00:b4:f7:92:ad:
         fc:49:98:b4:7d:a8:6b:c1:57:02:12:ee:35:27:98:6c:04:b3:
         3f:90:2c:7a:a2:95:0f:4f:aa:b7:f6:f5:f1:d5:7e:e2:46:2a:
         7b:f8:d9:1c:17:59:51:e8:92:7f:1e:5e:4c:a2:72:73:07:c6:
         66:c9:35:f3:f5:06:2b:c5:42:a2:c0:08:d2:a4:99:3f:8a:9c:
         20:bc:b5:50:ff:44:8e:41:36:54:d0:a0:65:b7:4f:d5:9d:60:
         82:51:54:7d:b9:6b:72:c2:bf:90:f6:4a:44:c8:b3:e7:4f:e4:
         12:52:70:2f:82:7c:18:cf:c5:5d:7b:fc:1b:91:b5:8d:c6:f8:
         d2:4b:19:f0:3c:7d:c6:e1:6f:39:53:bf:d4:bc:49:9e:35:1f:
         f0:86:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:35:08 2025 by rpki-client