Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/922c353d-21a0-318a-a042-dece2ce9556c.roa
File:                     922c353d-21a0-318a-a042-dece2ce9556c.roa (raw, json)
Hash identifier:          o1Km+o/GNFHWKkZmi4tZIpUJBzzE+hGDMsjRxPuRC5w=
Subject key identifier:   5D:AD:79:E4:92:E7:5C:F7:E7:ED:B5:5B:21:D5:04:9A:4E:D9:59:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D7527DCBF17F27DF0ED00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/922c353d-21a0-318a-a042-dece2ce9556c.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33652
IP address blocks:        50.221.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:75:27:dc:bf:17:f2:7d:f0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=65286ee8-88d7-43d5-8a65-a5a8174b21e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:a1:27:88:e9:b8:30:c5:40:4f:e4:08:24:
                    65:f7:6b:d0:df:3e:5e:93:f1:55:ec:d1:e5:8a:f8:
                    69:28:15:5a:83:11:33:76:a4:f7:4e:40:98:55:82:
                    04:46:aa:21:7c:7d:60:d1:fc:6f:49:52:2f:62:1b:
                    55:47:35:90:96:17:65:ba:89:68:cf:4c:ed:e9:98:
                    f0:30:32:98:80:82:74:3a:5f:5d:f9:50:ee:9b:5a:
                    55:db:97:b0:9f:91:1d:bd:fc:0a:e1:57:ef:80:41:
                    11:f1:87:39:6e:e6:20:51:ca:bf:d3:2e:83:fe:02:
                    dd:24:5c:22:c9:3b:7e:57:5f:de:82:b2:13:bf:50:
                    e8:d8:34:f5:fd:27:1b:26:e2:8c:33:15:c2:9d:27:
                    b7:14:27:fe:03:d6:52:03:f4:df:ee:30:b2:b2:0b:
                    ee:06:5c:3e:c3:2b:28:50:28:d6:42:2b:10:9c:82:
                    5d:c1:06:d1:ea:87:9e:e7:82:5a:1c:35:c1:e9:4a:
                    32:a3:62:1b:2e:25:db:71:dc:ef:c7:7b:a8:37:e2:
                    18:f4:5f:9a:24:8a:89:f1:56:83:63:7c:1b:4e:69:
                    b5:80:ac:1a:fc:d0:cb:26:2f:0e:da:00:f7:3d:c4:
                    e5:4d:d9:30:3c:a3:70:99:59:0e:c3:d6:83:c1:a8:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:79:E4:92:E7:5C:F7:E7:ED:B5:5B:21:D5:04:9A:4E:D9:59:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/922c353d-21a0-318a-a042-dece2ce9556c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.221.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:0a:bd:72:df:4b:83:d6:13:b8:9e:1d:ca:c8:da:cb:80:
         da:8e:d1:df:72:bd:54:ef:58:7f:e0:92:74:44:87:64:11:7c:
         c4:90:7e:9d:47:0b:1a:77:b6:73:55:18:70:b7:60:d3:ce:6e:
         71:56:7b:f9:3b:40:a0:ce:e1:ac:04:e6:84:1a:22:ae:b3:2d:
         12:ac:db:9b:22:ed:02:da:d2:d4:9f:cb:e3:b6:9d:eb:7c:1e:
         6f:8a:ca:90:ab:ce:5e:5f:0b:d5:6c:05:38:91:63:23:59:8f:
         88:17:e8:77:02:cb:56:bc:f3:43:c0:14:5d:f6:ba:27:03:c4:
         6c:62:a4:2b:1d:50:a8:a1:65:41:89:68:97:4b:da:fc:71:34:
         be:95:2f:be:68:88:39:4b:50:a0:34:e5:17:7d:82:90:ac:ab:
         e4:4b:2c:2c:d4:6d:9f:9e:d6:a8:41:80:2a:66:25:f9:2a:89:
         c1:e7:d3:f0:5a:94:0b:c5:25:c5:3e:3c:7c:6e:c3:b3:36:f1:
         18:42:f9:0e:95:fc:87:02:f1:b0:d0:31:28:ae:24:c5:b5:3f:
         f3:b2:0c:0a:f3:01:ad:23:98:06:b5:10:a7:a5:f0:5b:87:81:
         d8:59:ee:79:e9:40:88:30:e0:db:eb:32:57:95:38:1c:be:ad:
         b5:a8:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:23 2025 by rpki-client