Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa
File:                     1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa (raw, json)
Hash identifier:          CUHDcsdOak9VgXmMmZGzr9GjbMf8Bg5R8CLZWBeNc7M=
Subject key identifier:   02:15:B1:30:3F:79:5E:81:ED:79:C6:1B:00:63:37:44:44:95:0D:75
Certificate issuer:       /CN=ff5006d4-d71a-4b01-bf1d-de487fff7073
Certificate serial:       010D0C9F4328584965E972379FE7B06AC7F95C00
Authority key identifier: D2:06:20:32:B0:69:60:9A:06:F4:1D:2A:65:35:6E:EB:CE:80:8A:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     19740
IP address blocks:        64.110.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:72:37:9f:e7:b0:6a:c7:f9:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff5006d4-d71a-4b01-bf1d-de487fff7073
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=2505f85b-23de-4553-a954-c08c33b4ae31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:cf:dd:62:0b:1e:f6:65:35:77:db:ec:c2:
                    20:cc:e3:d5:76:d7:21:2e:d2:66:69:27:e9:64:02:
                    94:ae:3a:f2:e6:61:65:6f:9b:54:5d:9e:cc:1f:df:
                    8e:99:8c:67:11:99:49:01:01:bc:3b:0c:4b:09:f5:
                    e0:c3:48:22:7e:3f:c7:b7:40:83:8c:85:c2:62:90:
                    64:02:66:89:2e:1a:1d:fe:32:3b:e5:2d:86:50:ad:
                    a6:d3:87:41:ec:0c:ce:8d:a4:45:ea:4d:ea:5c:97:
                    7d:56:0c:f2:69:04:95:4b:83:a3:70:05:14:9c:48:
                    d5:49:d8:c0:1e:14:69:09:5b:90:8a:30:59:e9:db:
                    77:ca:6e:77:04:8b:4f:5e:03:7a:f9:70:cb:45:20:
                    0f:7a:8d:91:88:ae:18:c9:11:a9:bf:e3:43:0f:f4:
                    a1:1c:9a:21:a0:8e:42:30:3e:3a:e1:70:1e:de:0b:
                    2a:d8:da:97:9b:57:77:52:74:05:74:16:d8:cf:cd:
                    67:ce:38:8d:03:f6:3d:74:03:2f:af:bc:9d:e9:3e:
                    15:52:20:71:d8:50:cf:6c:9e:fe:66:cb:00:89:9a:
                    2b:7f:a5:0a:d7:6d:4a:47:a3:80:ab:e6:e8:67:dc:
                    37:8f:1a:b1:03:94:1b:e9:d7:1c:fe:81:5c:6e:76:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:B1:30:3F:79:5E:81:ED:79:C6:1B:00:63:37:44:44:95:0D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.crl

            X509v3 Authority Key Identifier:
                keyid:D2:06:20:32:B0:69:60:9A:06:F4:1D:2A:65:35:6E:EB:CE:80:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:c0:2d:98:61:e8:4d:b5:01:10:a0:7a:bf:65:05:82:f9:
         29:2a:5d:fd:14:19:2f:8e:48:47:72:d2:09:78:82:49:49:fa:
         c3:2f:36:8f:4e:a7:a5:80:fa:b8:11:6a:a8:d7:d3:aa:f0:58:
         91:f0:d3:4e:05:bc:fa:13:c8:ff:89:f7:dd:bf:72:72:6b:39:
         fa:e4:c1:3f:bb:06:27:d5:aa:62:ab:fe:a6:ad:f2:8c:c0:b0:
         ad:33:e7:8d:4a:5d:38:b2:0a:bf:87:47:92:be:00:76:1d:d5:
         ad:d6:64:71:c4:5a:82:52:b5:fb:ec:ad:0c:f8:2c:eb:4f:ac:
         97:ae:92:fc:2b:77:46:9f:21:cc:39:97:81:c5:60:50:62:c8:
         02:ec:c8:c2:ea:ba:2a:b6:70:08:e0:b4:07:ad:ed:cd:04:56:
         7c:b0:02:35:1e:ab:64:30:56:2d:d5:cd:9b:01:d0:97:de:f7:
         65:d4:ac:ba:26:11:93:a2:c2:70:eb:19:16:35:2d:af:92:d6:
         a5:76:23:48:13:b0:79:c3:a5:cf:34:9a:27:e5:81:7b:9c:d2:
         c4:f3:64:09:67:f6:2a:70:d1:8f:1c:a9:e2:b6:0f:75:5c:de:
         a5:cc:8c:11:31:61:32:67:81:1f:fa:0d:e8:d1:7e:47:12:79:
         31:16:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:35:37 2025 by rpki-client