Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa
File:                     e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa (raw, json)
Hash identifier:          BwvilctmhXiEb4HgKdC+1sm5WqcGnYBR60Le5+/8It8=
Subject key identifier:   49:A8:F4:C3:37:60:4C:22:55:34:FA:C4:73:F9:72:D7:D0:12:1F:75
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285849ABB49FB85A4672B12537E800
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     6596
IP address blocks:        65.50.199.0/24 maxlen: 24
                          65.50.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9f:b8:5a:46:72:b1:25:37:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=d46bdfa1-20ce-4a95-bd7d-dfed584ce1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:96:50:71:33:cb:80:1e:3d:72:ac:bd:3b:
                    97:08:b5:58:0b:46:7b:4a:9d:e6:07:da:df:10:18:
                    63:51:52:2b:12:48:cc:74:32:d0:c4:c7:df:96:de:
                    6a:e5:69:c8:6c:c6:29:d8:ff:1c:bb:79:0d:17:f8:
                    3b:38:10:14:36:9c:2a:98:07:62:34:4d:1a:13:e5:
                    7b:28:cf:3c:af:db:c9:7a:67:41:3c:5d:cb:98:01:
                    e4:cb:21:2b:95:0f:fd:af:b5:7a:a8:76:ab:6e:87:
                    e5:8a:54:26:e2:c1:57:a8:1f:e6:f7:a8:df:f0:93:
                    fe:7e:f4:78:55:e3:28:bd:a8:a8:9b:da:08:2e:f0:
                    dc:dd:a5:18:58:97:79:7a:8d:71:a1:3b:00:26:3d:
                    6a:0b:fb:b5:bf:91:a7:d1:f8:4d:49:88:fe:3a:c2:
                    c2:d3:95:48:f3:b2:18:88:45:3a:d1:4c:d3:03:59:
                    12:8f:08:8a:41:28:49:23:b2:6f:55:74:c9:6c:ad:
                    c9:df:c6:96:9f:09:7f:42:69:50:06:4b:da:ce:09:
                    a4:8c:06:a1:ea:30:90:6c:45:75:dc:f9:71:a8:d6:
                    fd:35:4f:c6:c2:2d:f0:e8:0b:b1:37:4a:6d:2a:e4:
                    29:ed:5e:ef:84:e1:39:85:52:43:61:31:9b:1f:9d:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:F4:C3:37:60:4C:22:55:34:FA:C4:73:F9:72:D7:D0:12:1F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.199.0-65.50.200.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:ce:f2:af:79:b6:8c:21:ed:13:58:da:74:be:fd:20:47:
         c1:39:07:8a:86:af:02:c9:bf:d0:04:7d:42:ed:ff:a6:a0:a6:
         9c:bb:ba:2b:93:38:87:7a:28:28:aa:09:11:8d:94:fe:95:61:
         02:1b:14:b3:1f:a9:85:cd:c6:16:5c:d2:6e:af:52:c3:c7:fd:
         dc:0a:d7:1b:06:d5:7f:fb:91:b6:26:44:f3:d6:66:c9:7b:ac:
         dc:4e:d3:32:f4:ac:c8:c9:03:a7:bd:57:eb:0b:40:13:1b:ad:
         9a:db:d0:74:bb:f3:4f:e3:c2:f1:5a:e6:c4:d6:4e:a6:f9:a0:
         d8:ab:eb:3e:6e:88:35:0b:5c:b0:bb:78:15:aa:2e:33:01:5f:
         f8:ed:97:1c:7a:4f:ca:00:c9:7d:b6:62:d7:4d:e8:16:b1:91:
         60:91:0a:ef:53:cc:b8:53:b1:e1:8a:93:f6:e7:76:1c:01:b2:
         ef:b0:01:52:93:f7:50:18:23:6c:b9:b9:86:64:ff:ca:9d:77:
         15:32:fe:98:e0:00:9d:f1:c6:b3:8d:a1:55:93:04:0d:7f:d6:
         d0:15:56:ed:6c:b5:52:60:92:c6:9b:99:0f:7b:90:28:97:fe:
         31:b1:43:b9:2f:51:f9:41:f2:a1:0e:f1:c5:a7:ee:8b:83:79:
         31:97:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:50:48 2025 by rpki-client