Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa
File:                     cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa (raw, json)
Hash identifier:          Qn73Cg00GQMejaWa6szaCcD2IU56HJfZC/fsOlt6qUc=
Subject key identifier:   F0:E2:D1:57:97:AE:3A:67:89:03:AF:4E:B4:66:A3:D7:7A:68:31:0D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858498CFF0C230F0F3226B448B680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     14908
IP address blocks:        216.226.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:0c:23:0f:0f:32:26:b4:48:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=77f399ed-9573-4d61-8f5c-f4e5e88996b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:2c:0c:e5:2b:40:2c:d0:bc:20:6f:7b:84:
                    e1:6d:80:77:47:11:84:11:97:3e:c2:85:ec:8a:5d:
                    7e:0d:d6:8f:4c:07:7f:fd:81:60:5c:ea:8f:04:2a:
                    0a:ca:35:61:22:0b:8c:54:36:da:e0:9b:f5:8f:f6:
                    7a:99:25:e0:1d:31:d8:1a:52:f0:ff:53:53:7c:86:
                    e7:b3:08:44:e8:c2:51:ad:3a:49:ff:e4:0e:db:e1:
                    75:77:43:35:cc:60:53:51:50:5c:de:74:20:94:c0:
                    2e:f8:63:f3:a6:f3:9e:0f:62:25:d8:61:df:47:b6:
                    69:53:21:ff:54:ba:e2:01:0a:7c:a6:bd:5e:b2:6e:
                    6f:bc:4c:08:34:65:2a:b4:0c:40:3c:24:7a:57:64:
                    30:56:2a:bf:7e:c5:c1:e0:2b:3e:ff:3e:c7:c7:40:
                    6e:d5:58:70:a5:d7:15:ce:65:33:43:6e:07:d7:e0:
                    e8:e3:93:e0:85:14:d6:6c:4a:7b:05:c2:db:90:a9:
                    e1:88:dd:dd:93:6c:2b:6d:e5:0e:ea:a4:fa:da:35:
                    6d:02:4c:b7:d7:a8:25:0c:bc:60:7e:c4:57:17:3a:
                    40:0b:61:31:06:1e:d8:2f:7a:09:f7:dc:cf:7f:9a:
                    23:0d:2f:25:9c:c3:33:8a:da:ec:94:7f:d1:5b:89:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E2:D1:57:97:AE:3A:67:89:03:AF:4E:B4:66:A3:D7:7A:68:31:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:70:f7:6e:ae:bb:b0:ce:ba:23:c4:e5:f3:0b:7f:0d:d5:4e:
         c0:69:17:b3:5c:90:1e:de:96:1d:d1:50:0e:2b:75:8d:08:b9:
         8a:80:84:1b:11:11:16:f2:63:60:1a:06:ab:9c:f2:0b:3c:44:
         13:61:24:a9:92:bb:c7:f2:d4:91:dc:7c:c9:7a:c8:2f:92:cb:
         9f:71:e7:cc:df:78:13:aa:5f:7c:c3:35:e5:11:7e:9e:ca:14:
         73:13:51:62:70:e5:3a:32:76:d6:ab:43:fb:91:c6:da:f7:48:
         8a:71:19:b0:cd:ce:b6:ab:59:17:fc:83:d9:4e:f5:92:62:81:
         57:02:cf:43:09:2e:ee:1d:66:3e:68:47:4c:f7:98:18:0a:10:
         65:35:8d:20:3c:28:04:51:85:1e:6a:95:13:0d:34:4f:55:93:
         0a:c5:99:71:fe:7d:16:be:f1:8b:60:b3:a7:9a:3d:e9:52:12:
         f1:ee:59:23:ab:58:1a:b9:37:9a:b6:4b:32:79:88:95:ee:73:
         1b:03:25:36:b4:14:b8:9c:93:43:42:ea:88:27:a0:b9:e7:2d:
         af:dc:fa:5f:c0:7c:46:f4:56:9d:7b:4e:62:4d:59:1b:dc:de:
         1f:c6:e0:cb:9c:4a:00:6a:78:f6:e6:16:0a:fe:d7:01:24:ae:
         4d:9c:31:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wwjDw8yJrRItoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
NzdmMzk5ZWQtOTU3My00ZDYxLThmNWMtZjRlNWU4ODk5NmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivksDOUrQCzQvCBve4ThbYB3RxGEEZc+woXs
il1+DdaPTAd//YFgXOqPBCoKyjVhIguMVDba4Jv1j/Z6mSXgHTHYGlLw/1NTfIbn
swhE6MJRrTpJ/+QO2+F1d0M1zGBTUVBc3nQglMAu+GPzpvOeD2Il2GHfR7ZpUyH/
VLriAQp8pr1esm5vvEwINGUqtAxAPCR6V2QwViq/fsXB4Cs+/z7Hx0Bu1VhwpdcV
zmUzQ24H1+Do45PghRTWbEp7BcLbkKnhiN3dk2wrbeUO6qT62jVtAky316glDLxg
fsRXFzpAC2ExBh7YL3oJ99zPf5ojDS8lnMMzitrslH/RW4mqBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDi0VeXrjpniQOvTrRmo9d6aDENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YzJiMWYtN2MzOS0z
OWU3LTg3MjEtZjk5YWU0MTlhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OIyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlw926uu7DOuiPE5fMLfw3VTsBpF7NckB7elh3RUA4rdY0IuYqAhBsR
ERbyY2AaBquc8gs8RBNhJKmSu8fy1JHcfMl6yC+Sy59x58zfeBOqX3zDNeURfp7K
FHMTUWJw5ToydtarQ/uRxtr3SIpxGbDNzrarWRf8g9lO9ZJigVcCz0MJLu4dZj5o
R0z3mBgKEGU1jSA8KARRhR5qlRMNNE9VkwrFmXH+fRa+8Ytgs6eaPelSEvHuWSOr
WBq5N5q2SzJ5iJXucxsDJTa0FLick0NC6ognoLnnLa/c+l/AfEb0Vp17TmJNWRvc
3h/G4MucSgBqePbmFgr+1wEkrk2cMTY=
-----END CERTIFICATE-----
Generated at Mon May 12 20:45:44 2025 by rpki-client