Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/68acf4a0-d18c-3081-ab7a-f08712041875.roa
File:                     68acf4a0-d18c-3081-ab7a-f08712041875.roa (raw, json)
Hash identifier:          wpa55WQZwzP4Qcir4YSpbQuoaiTfgj7ShEUtT0rs02k=
Subject key identifier:   5D:BD:5E:19:43:F6:D4:91:7A:48:B6:E4:2B:71:F2:3A:CD:8B:FC:91
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584A7A4B31CE779F60B6AAB75740
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/68acf4a0-d18c-3081-ab7a-f08712041875.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     198949
IP address blocks:        50.6.34.0/23 maxlen: 24
                          50.6.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:31:ce:77:9f:60:b6:aa:b7:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=c9d7a00c-2b74-4f3e-a9bf-9710ca30cfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:c4:10:fe:2f:9d:83:e9:39:7c:de:72:4e:
                    34:b4:24:70:7c:0c:54:ec:e1:10:8c:32:9a:57:dc:
                    e1:f1:30:5e:2f:ca:68:a6:35:f9:7e:75:4e:fb:de:
                    7d:cc:40:db:48:3e:0f:13:2f:10:dd:44:53:28:0e:
                    f2:1f:4b:66:cb:62:84:bb:ca:53:97:84:f4:cb:55:
                    e6:cf:40:60:5a:30:ae:56:02:ef:4d:04:c9:1b:33:
                    cc:93:7e:e6:87:8d:56:ee:ff:21:ea:03:64:8c:d6:
                    36:00:c7:f8:f5:7a:93:c4:74:30:b3:7b:63:10:e7:
                    ec:55:73:ad:c7:d6:cd:8a:b4:37:6d:15:d0:4a:60:
                    a1:6b:e5:63:5e:26:5d:2e:09:00:dc:0d:f3:c9:47:
                    23:14:78:ff:4d:16:71:52:67:2a:2f:ad:3d:a2:cc:
                    df:19:98:a8:f4:ad:e2:9b:17:b2:56:7b:a1:89:4c:
                    67:aa:6b:7b:52:b0:dc:f6:2d:85:94:cb:73:cf:7c:
                    1d:23:42:5b:ab:27:c0:f6:98:7e:86:78:cb:df:ad:
                    59:22:23:74:cc:81:8e:4c:6d:09:f2:d4:86:a3:01:
                    bf:34:32:69:f6:bd:33:66:fa:c3:ab:4c:da:3b:5a:
                    0f:de:f1:ee:9a:7b:dd:ed:19:cb:e6:23:8c:f0:5a:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:5E:19:43:F6:D4:91:7A:48:B6:E4:2B:71:F2:3A:CD:8B:FC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/68acf4a0-d18c-3081-ab7a-f08712041875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.34.0/23
                  50.6.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:b2:0f:1e:11:6a:50:2a:5e:36:bc:08:4e:36:f1:35:24:
         b7:1e:c1:02:69:50:5f:b0:76:c9:d2:da:43:40:d4:9a:2f:bc:
         f9:99:1a:fe:78:0f:76:19:45:99:f0:c9:65:2f:a7:f8:d6:50:
         e3:fc:f8:3f:e3:54:44:5f:aa:34:0f:15:45:56:e1:d7:4b:de:
         05:da:c1:7c:88:68:dd:63:11:46:00:b4:24:bb:4f:62:8b:6e:
         40:34:1d:c4:be:56:17:8a:d2:fd:29:82:28:8f:98:a2:53:f9:
         cd:f4:aa:0a:43:7b:e8:aa:1c:c5:e4:4e:d4:48:1a:6e:0a:3d:
         eb:83:93:45:bf:fc:85:57:84:52:62:78:cf:36:78:9d:3f:7c:
         47:af:9c:7d:37:39:6c:86:22:9d:c3:39:85:80:01:45:e8:72:
         31:4a:75:8f:6b:da:7c:06:55:e4:47:65:aa:72:6b:ba:9d:49:
         c5:ed:1e:da:9a:a1:89:7d:95:69:d0:b2:09:33:bf:80:a2:c9:
         69:92:51:57:80:88:0b:f7:e4:81:ac:15:bb:4d:7c:19:3c:22:
         68:0b:d2:45:29:99:f1:c6:f0:c3:e6:81:8f:51:40:56:8f:4c:
         e4:4a:6c:73:d8:e8:18:5c:21:d5:ab:48:cb:87:ba:db:fa:ab:
         02:16:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:50:59 2025 by rpki-client