Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa
File:                     975b438c-433c-35cf-b0c2-2a245df4002d.roa (raw, json)
Hash identifier:          +6NYBjj6oQKGhpVuMwYTx0lsWJw3lWrFwyXSOnurMJU=
Subject key identifier:   ED:F9:8D:2E:52:CA:6B:90:5B:B0:F4:AE:C9:44:D4:DE:4D:C2:3F:2A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849AFC1A8318D463FA816D66F60
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa
Signing time:             Tue 29 Apr 2025 11:50:29 +0000
ROA not before:           Tue 29 Apr 2025 11:50:29 +0000
ROA not after:            Mon 28 Jul 2025 11:50:29 +0000
asID:                     174
IP address blocks:        50.3.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:c1:a8:31:8d:46:3f:a8:16:d6:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 29 11:50:29 2025 GMT
            Not After : Jul 28 11:50:29 2025 GMT
        Subject: CN=c3f95c21-c733-4038-b86a-a2aff7f3ffe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:a4:9f:b5:05:d2:c0:ab:b1:89:d7:55:9a:
                    ad:45:7d:2a:89:86:f9:88:c1:ac:66:e2:46:80:01:
                    cd:80:9f:51:aa:cc:7f:a2:7a:57:28:8f:a6:56:69:
                    6b:1a:1e:81:a3:66:90:33:84:63:1b:57:34:be:c8:
                    9e:87:2c:39:cd:ac:b1:07:e5:45:51:4f:ba:0f:12:
                    21:ce:6d:da:ba:36:d6:aa:8f:b9:a8:d1:46:d2:61:
                    11:6f:9c:56:94:38:6c:fd:f1:b0:51:93:4f:6f:e6:
                    4b:22:69:26:2b:3c:e7:89:bd:ce:d2:96:50:81:4e:
                    98:6f:79:6e:ea:64:54:d0:ce:cd:0f:04:e0:df:a2:
                    b2:1b:3f:27:4d:58:a8:cf:84:55:17:ff:b9:c1:0c:
                    66:ff:f1:6c:81:b3:6a:ae:60:77:75:85:02:37:15:
                    6d:eb:46:66:a3:c5:ff:a7:6a:80:14:bd:a7:82:53:
                    77:03:54:29:65:c8:74:0d:5d:9b:04:a0:1f:d2:67:
                    e5:7e:79:3b:84:d0:46:4a:d9:89:6c:99:c1:46:63:
                    1c:47:8a:fb:77:f2:4a:c7:80:dc:a5:54:9a:e6:08:
                    3f:e1:e7:7e:6b:e9:bf:0b:a8:54:2a:7e:30:2e:6b:
                    bc:a5:46:94:0e:8f:da:b9:55:c3:55:8f:34:56:e3:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:8D:2E:52:CA:6B:90:5B:B0:F4:AE:C9:44:D4:DE:4D:C2:3F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:19:83:87:9f:e3:de:19:42:45:b4:1b:43:83:36:db:dc:
         9b:ed:28:56:ff:1e:67:c5:51:fa:f7:1b:18:35:bf:6e:d6:b0:
         81:d3:6f:e5:c0:65:f4:bf:a8:a7:fa:f7:6b:74:bc:55:57:4b:
         4c:99:bb:21:6e:a6:10:8c:5d:cf:f2:92:b5:32:a1:8a:2f:2e:
         e7:b4:c9:64:bf:bb:65:8e:35:a8:20:c1:6b:d0:e9:9e:11:9b:
         59:1a:e3:61:94:6d:dd:6e:e9:ac:22:8d:6e:1d:75:46:7d:bc:
         b5:7c:89:97:6c:42:d7:44:93:3b:b1:0a:2d:b0:98:2c:f7:c3:
         aa:74:77:6d:00:c1:52:89:2c:97:53:9b:31:80:0e:11:0d:29:
         35:20:96:15:83:fa:4c:b5:d2:d2:dd:df:7d:5e:11:ae:ba:6e:
         5f:11:e9:4a:f1:7a:a5:41:f8:ea:4f:e9:06:9b:17:cd:1d:24:
         3b:7e:c7:74:c8:c2:ee:d1:15:07:0f:23:40:1f:3d:47:67:7c:
         7a:99:50:7b:fc:8c:86:98:2d:d5:ec:7c:1b:7e:83:83:5d:b1:
         ad:13:7a:e9:08:19:db:ef:af:74:84:06:36:b6:4a:a4:c5:31:
         36:9b:01:d6:82:44:d3:d3:39:9d:0b:01:33:d7:cd:e2:7f:ed:
         ac:c3:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:11:11 2025 by rpki-client