Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80fde442-505a-3357-9eee-2619e82c9729.roa
File:                     80fde442-505a-3357-9eee-2619e82c9729.roa (raw, json)
Hash identifier:          InFlGh0AxzESfvkp6Dip/KqvReNgXF2a888i7khd8S0=
Subject key identifier:   B1:F5:A0:25:67:8D:0A:ED:DE:66:29:E2:46:4D:FA:14:BB:90:3E:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E2120657C22C3ED497B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80fde442-505a-3357-9eee-2619e82c9729.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        50.174.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:21:20:65:7c:22:c3:ed:49:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=fa24a3ce-1f63-4d88-a3bf-8c83f1fd7bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:15:0a:18:e9:a4:24:9b:c8:c1:32:2a:07:
                    68:55:34:28:c8:5e:63:2c:0f:6a:16:b6:f5:1b:8b:
                    9b:b4:73:47:32:7c:cb:e1:ac:38:99:1a:c8:a4:fd:
                    90:1c:fb:83:5c:a0:57:f6:ad:85:f5:40:c9:38:98:
                    f6:d1:63:6b:60:9f:10:6e:6e:4e:b7:f7:c3:cc:e0:
                    de:0c:1d:85:73:32:f8:9f:a9:eb:50:b7:39:de:d9:
                    74:bd:17:88:c4:f0:a5:d1:32:2a:f5:8f:1e:5b:82:
                    e5:82:a1:a5:d6:74:56:b7:64:96:a3:40:7a:9e:e4:
                    41:dd:92:dd:b7:b0:d1:de:34:a9:33:14:64:92:7c:
                    1c:ef:d2:07:4c:49:37:cc:14:fe:6c:81:cf:bb:8c:
                    19:82:65:d8:ff:68:f8:38:3b:d0:03:4c:34:90:7b:
                    cc:9e:72:51:57:3d:55:ba:6f:5d:53:e6:02:00:dd:
                    2a:db:b2:2d:db:bf:f5:08:aa:fe:e8:3c:bf:9a:65:
                    c1:55:15:b7:66:be:9c:e7:1c:8b:6e:6d:d0:a0:eb:
                    9e:71:63:f2:fa:aa:46:f6:65:06:f5:64:78:75:ca:
                    92:2a:70:cb:a5:ca:da:8c:9d:ca:c6:ff:08:9d:33:
                    1b:7f:6b:0a:db:8c:0b:d9:4b:f8:07:ac:03:10:fd:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:A0:25:67:8D:0A:ED:DE:66:29:E2:46:4D:FA:14:BB:90:3E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80fde442-505a-3357-9eee-2619e82c9729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.174.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:4f:56:ec:59:e1:95:e1:0c:f6:b5:1d:3b:b4:1a:43:d4:f7:
         0e:b9:72:e7:fd:b0:c6:86:0c:82:a1:ab:d9:71:7d:bb:92:82:
         37:d2:7b:19:8c:78:d2:a8:64:07:43:a7:42:94:cf:b1:b7:bb:
         00:ef:d5:3a:79:13:82:b4:8d:da:43:6c:25:b8:72:37:4e:4e:
         95:41:bc:f2:bc:cd:ea:bd:46:b7:f6:7f:ad:d8:3a:28:8e:20:
         12:d8:cf:a9:66:36:67:81:05:ed:34:dd:4b:05:91:0d:d0:a7:
         04:a1:83:32:b1:46:40:b7:09:1f:af:c2:72:6b:0d:fa:1f:35:
         9d:10:1b:82:39:55:3c:91:7c:b6:68:27:37:d1:ce:82:a9:c1:
         df:15:65:30:d3:de:d9:3f:9f:ef:50:26:e9:ea:97:7e:a1:9f:
         bf:a3:90:df:e2:d1:90:7e:3f:73:44:e6:04:7d:9a:aa:8a:f4:
         3e:ff:3c:10:b3:bd:67:46:bc:d7:1d:11:19:ec:0f:c5:66:d3:
         8f:7b:cd:a2:4f:75:e1:91:91:d4:b6:57:1b:46:46:cc:67:68:
         16:7d:f9:c6:e1:e9:e1:d0:76:1a:60:85:61:9c:6c:9e:2e:88:
         73:da:7e:ad:0e:6a:61:cd:db:c0:41:d0:bd:a8:68:5f:fe:7f:
         c0:5d:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:34 2025 by rpki-client