Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fe389db-62c2-32cb-a8b7-812a2cca4192.roa
File:                     2fe389db-62c2-32cb-a8b7-812a2cca4192.roa (raw, json)
Hash identifier:          hz9XmVDDnJK2dK2/8SpocIPz5VMM4eRR4b58wGJ2i/E=
Subject key identifier:   A1:14:A4:BF:C3:EE:20:07:EC:0B:EC:82:5E:95:EE:F4:7D:5F:A1:B5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7E41BFBCE254B136AE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fe389db-62c2-32cb-a8b7-812a2cca4192.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        50.91.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7e:41:bf:bc:e2:54:b1:36:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=174928c8-5925-45b8-b288-9e498fcfed24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:27:74:74:98:3b:53:ab:4a:12:7d:4d:90:
                    08:b3:4f:51:45:02:e3:0c:ef:ff:da:08:e9:0c:26:
                    a2:d5:48:08:fb:5b:cc:35:65:a6:f8:53:38:6d:4e:
                    6e:7a:cc:ba:ea:e6:ee:2d:9e:05:c5:a4:78:ce:28:
                    39:6a:d7:84:da:44:10:53:cb:a1:7c:67:ca:e3:32:
                    7f:b0:3c:8c:22:ab:6a:ea:c8:6e:71:d4:95:98:e6:
                    8c:e8:fc:e9:1c:2d:0d:aa:42:8c:a4:17:70:97:c8:
                    33:de:ce:61:cb:1d:91:83:e0:b2:00:c6:df:82:d8:
                    67:47:f7:49:ce:34:35:87:87:f3:98:31:95:5b:b8:
                    db:48:d4:25:f2:dc:16:53:6c:eb:20:23:19:32:fe:
                    e2:3b:69:1e:17:43:b9:d2:19:ee:6e:b4:e6:3f:ec:
                    df:85:86:6a:b8:98:9a:12:2c:6b:b3:79:e3:13:5c:
                    e7:26:d9:83:7a:16:6c:f1:49:fe:11:c8:5b:3c:93:
                    00:17:da:4c:f8:0b:ac:e4:20:a9:bf:f2:c8:88:c6:
                    16:3e:bb:f4:62:6c:ab:f1:16:55:7d:07:9f:8c:9d:
                    06:0d:49:67:19:d2:1d:44:2e:74:1f:fc:64:84:ed:
                    91:33:89:40:3a:e9:59:56:7f:3f:c3:29:b2:2f:d1:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:A4:BF:C3:EE:20:07:EC:0B:EC:82:5E:95:EE:F4:7D:5F:A1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2fe389db-62c2-32cb-a8b7-812a2cca4192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.91.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:95:57:e8:9a:7c:1e:dc:c9:ce:0c:34:48:cc:ea:56:4a:00:
         2f:99:6d:b1:74:4e:c4:32:c3:70:c4:5a:d1:3e:b1:94:be:1b:
         bd:d9:9f:96:b5:b2:df:b7:c3:06:ae:e2:e8:ae:a8:a8:95:2a:
         22:15:19:ca:2d:38:e1:ef:b9:f6:54:fd:d9:8e:1f:4b:10:41:
         bb:7e:91:41:80:52:09:c3:e4:3c:8a:b5:f2:f1:4a:c0:98:3d:
         0c:53:a3:3b:71:c0:f4:88:68:7c:41:ad:5c:7c:0d:16:ea:48:
         c3:a2:56:2f:43:56:03:73:dc:b1:1d:42:d1:2b:5c:ff:ba:fb:
         47:e5:b8:c4:6b:0d:c1:7f:9a:4b:7d:f6:e3:dd:5d:c8:2b:ff:
         90:9d:84:36:0b:ab:a0:a3:4c:7b:5e:b3:b9:28:e6:0b:1c:79:
         6d:3e:89:11:04:30:1c:ef:aa:6f:bd:53:32:4e:c4:7c:d9:14:
         f3:7d:bf:75:d5:c7:66:93:3e:a7:73:0a:dd:48:6f:08:6e:89:
         c4:21:88:5d:7c:be:84:7f:6e:3b:a9:72:5b:04:c7:e1:b9:e3:
         40:ea:10:92:71:71:3c:09:7a:d5:1c:76:8b:22:bb:f0:ce:7a:
         45:1d:47:9d:c6:56:3e:e1:3c:ce:f2:cc:82:e4:fc:b5:c9:bc:
         06:83:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:57:22 2025 by rpki-client