Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4644913d-f002-308b-ac47-15168fb00908.roa
File:                     4644913d-f002-308b-ac47-15168fb00908.roa (raw, json)
Hash identifier:          n7f1WbwLZAUCWAdwnxfDDMar2yTaay6+qpE2nxx+vIM=
Subject key identifier:   A9:EE:F3:F4:8C:93:67:BD:C4:F5:83:FE:5C:6E:DA:76:8D:EE:80:4D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921342679D7A247D646415B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4644913d-f002-308b-ac47-15168fb00908.roa
Signing time:             Sun 09 Mar 2025 10:20:35 +0000
ROA not before:           Sun 09 Mar 2025 10:20:35 +0000
ROA not after:            Sat 07 Jun 2025 10:20:35 +0000
asID:                     577
IP address blocks:        50.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:26:79:d7:a2:47:d6:46:41:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:35 2025 GMT
            Not After : Jun  7 10:20:35 2025 GMT
        Subject: CN=687c3d45-784a-4ebc-a636-c50bf8394aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:4e:dd:bd:b3:44:60:15:1f:6d:23:61:07:
                    2c:99:7f:ea:d9:44:ff:6f:cb:18:00:fa:b2:6c:ae:
                    a5:ca:ed:3e:e8:d6:d3:ac:bb:16:90:7f:ef:7c:a3:
                    01:8a:bd:50:ed:b3:66:de:ec:6d:3c:94:8b:35:2c:
                    0e:c9:4a:cc:db:af:6e:a4:c4:0b:7d:54:f9:b1:4b:
                    56:78:ef:0f:37:84:9d:64:67:97:57:9b:19:4f:cb:
                    30:52:41:00:e9:72:8d:4e:3a:e5:83:67:d4:76:ad:
                    c2:c4:76:8a:76:64:93:14:04:17:48:54:de:61:64:
                    86:d8:5f:bb:b8:46:b0:7b:ce:86:3e:b5:1d:89:bc:
                    69:89:3f:84:2f:9b:dd:50:49:85:61:e3:94:be:60:
                    3b:32:76:2c:f5:b4:63:55:2b:ae:55:5f:f8:89:8b:
                    0b:34:ef:e2:01:36:a5:56:43:40:ef:88:62:d4:fb:
                    e2:73:00:90:57:5d:1f:40:a2:d9:34:e2:cf:0f:5b:
                    9a:cb:08:ca:81:b4:2f:d3:f6:b2:6f:e8:b3:a0:8f:
                    d8:c9:fa:46:03:71:e1:fa:1a:5b:93:f9:fd:8a:57:
                    e9:2e:24:68:64:aa:6c:b6:f6:02:69:cd:63:43:ba:
                    b6:50:4e:a3:ef:f8:80:bf:e6:45:5d:47:6f:e0:10:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:F3:F4:8C:93:67:BD:C4:F5:83:FE:5C:6E:DA:76:8D:EE:80:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4644913d-f002-308b-ac47-15168fb00908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:15:1d:db:6d:dd:4a:a9:3f:13:93:d4:73:f2:ec:52:4a:2e:
         f4:2b:32:ba:fc:07:1a:a5:e1:4e:91:02:63:6a:4b:ad:34:70:
         5c:ce:77:47:96:f9:97:0e:59:be:d0:80:55:eb:f1:e7:aa:ab:
         aa:0e:14:6d:b0:d0:88:1e:50:4b:de:19:57:7f:3f:9b:59:11:
         b1:75:29:a8:e3:da:7c:aa:30:02:97:e5:0a:79:3f:df:e2:35:
         b7:02:c6:2d:ac:22:c8:83:22:4a:dc:ee:1a:46:a9:4f:36:e7:
         e7:0f:13:9c:39:29:d3:8f:f0:bb:2b:dd:c2:1e:e9:27:6e:c2:
         25:63:19:eb:c3:d4:4f:ff:58:1b:47:94:ee:4d:c8:43:6c:6c:
         c0:98:0d:a1:fc:fe:6c:35:12:d3:d0:1f:6b:0c:68:74:63:a7:
         e0:c2:54:cd:a0:51:90:ef:2d:20:b8:ee:50:cc:71:48:23:ef:
         52:4a:8b:17:62:49:89:5a:a1:82:3e:dc:4a:53:ce:a8:84:50:
         3c:a1:ea:00:5c:71:1b:4c:24:a2:e0:e9:15:26:53:ca:20:65:
         c6:3a:ac:60:56:e6:b1:52:d4:8d:10:11:70:87:47:67:a9:e9:
         0a:f9:e8:c9:50:e0:49:c0:d1:1d:ff:1b:e6:d9:c7:40:5e:f9:
         86:58:0d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:42 2025 by rpki-client