Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa358ae-0985-3dcd-8815-43104594ec13.roa
File:                     3fa358ae-0985-3dcd-8815-43104594ec13.roa (raw, json)
Hash identifier:          0Hiv6P/QWQGop/W5rG9sZFpHvnelnqflwHpmH3LLen4=
Subject key identifier:   84:95:68:95:16:F9:49:1D:AB:68:5F:DF:C6:10:EF:EF:00:76:E5:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5FA8961BE5C63E5DE5B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa358ae-0985-3dcd-8815-43104594ec13.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        50.222.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:fa:89:61:be:5c:63:e5:de:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=6f33efb6-cb59-458d-8cde-1dfbe8cc24ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:55:7d:10:9a:3f:34:4f:b2:e2:f7:61:a0:
                    42:c5:e5:49:ff:f8:fa:82:0e:9e:27:85:ac:42:de:
                    91:2a:8e:25:48:3d:36:35:a1:91:b3:38:bb:85:16:
                    ca:77:bc:5e:f5:5f:c5:a0:d0:6e:70:7a:b2:09:a4:
                    24:4c:eb:4a:79:1f:da:1f:0c:f0:4a:11:6b:55:c7:
                    38:a5:9b:f9:26:00:fe:5c:6c:5d:ca:33:49:3a:b9:
                    8f:00:88:d5:4c:ef:b3:ec:cb:e3:f6:c1:41:d6:54:
                    22:f4:38:14:22:75:76:d2:78:35:a1:45:e5:2d:c3:
                    95:51:04:37:c3:4f:dd:e2:91:dc:0d:ab:ac:26:74:
                    13:72:38:10:5c:71:83:18:19:f1:22:94:49:6c:88:
                    e8:55:bd:4d:74:0e:41:fb:2a:ff:6c:22:97:1e:c1:
                    70:c0:4f:58:ba:26:cd:9e:51:da:9a:66:bf:32:cb:
                    55:3e:2b:34:ac:9c:6e:12:a3:12:b2:3b:45:89:14:
                    e4:b1:db:4a:83:62:22:b7:2b:82:57:63:b8:d8:19:
                    a7:32:b0:ae:2b:8b:42:9f:01:75:f3:f0:8f:6e:0d:
                    5e:36:cc:82:51:69:b3:cf:7f:19:08:c0:91:68:14:
                    d6:df:90:e6:e3:1f:7b:06:3e:30:f3:de:a7:6e:a8:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:95:68:95:16:F9:49:1D:AB:68:5F:DF:C6:10:EF:EF:00:76:E5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa358ae-0985-3dcd-8815-43104594ec13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.222.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:04:97:0d:b3:ef:a0:cf:ec:1d:b6:d1:b2:64:84:00:d7:
         a4:d7:0d:8d:eb:9b:7b:46:b7:b6:cc:23:43:df:2c:50:a3:69:
         3f:ec:1a:f6:09:e2:c1:01:f4:d3:7d:b7:28:78:47:ed:1f:21:
         0d:45:ad:34:7f:ad:8d:77:d1:3e:3c:b7:2c:89:e4:13:4a:49:
         7b:b3:95:b4:3c:f0:ec:b9:51:a7:85:77:04:f7:26:b6:33:a7:
         a6:45:07:79:a5:d3:ca:56:9e:c9:a5:f4:05:54:d4:8b:52:82:
         eb:9a:30:8d:04:08:25:ff:d0:40:b2:d3:6b:cd:f3:a6:6d:98:
         63:4a:67:b2:4e:85:05:90:89:2f:2b:4c:f6:71:77:68:05:e2:
         34:b7:b8:01:8d:42:7b:1e:4a:b4:63:eb:be:9d:2e:a9:3d:10:
         13:2f:79:fd:c2:d3:36:1d:14:fd:9e:94:b6:86:5c:aa:5a:d7:
         ac:c4:fe:4b:d8:74:c9:9d:fa:a3:73:ce:d4:42:17:c0:45:d6:
         a5:2f:3e:cf:4e:ed:fa:9f:71:16:19:8d:d0:c2:13:5c:6e:54:
         bb:b4:25:ce:76:ab:7d:c5:55:cc:63:a1:5b:ba:a7:ba:0d:7b:
         22:cc:6c:8c:72:a4:25:12:4f:af:cc:df:ca:57:cd:b4:dc:2a:
         92:ab:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:11:47 2025 by rpki-client