Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec027d78-c5f8-3c0b-8834-6428ca6634e8.roa
File:                     ec027d78-c5f8-3c0b-8834-6428ca6634e8.roa (raw, json)
Hash identifier:          W7olHKczLyEYUarPX7v9jOAYuhNroERjW6PcOtd4CYo=
Subject key identifier:   6C:27:6B:FF:6D:C8:A0:77:20:1E:0C:AB:D1:8A:2D:99:D9:55:34:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D1460C385CEE7454A8C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec027d78-c5f8-3c0b-8834-6428ca6634e8.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     17035
IP address blocks:        50.221.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:14:60:c3:85:ce:e7:45:4a:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=30eb11ec-da37-4ce9-839a-1dd4fa8a5147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:af:cc:69:b6:a9:99:fc:66:5e:ea:b6:3f:
                    c5:82:20:58:06:ea:13:73:44:ee:8a:89:57:ec:78:
                    3e:d2:bd:cb:cd:a3:2c:8e:e4:d1:0f:c2:73:36:7e:
                    dd:3c:fc:54:54:8b:b2:9f:98:80:ec:c9:77:d3:af:
                    33:76:cf:8d:de:23:f9:2c:29:66:8e:1b:eb:67:17:
                    32:a6:a8:78:31:fa:49:1d:e5:83:48:7a:b2:0d:8d:
                    aa:17:67:22:0e:3f:0e:14:b4:9c:a6:a5:15:52:f3:
                    a3:bf:ba:a5:76:af:1c:f9:b7:ec:e6:73:80:53:43:
                    cd:f8:d7:a5:31:b0:87:ec:f1:36:36:b7:5c:a8:86:
                    42:69:8b:e2:28:fe:d0:14:43:86:60:1f:a3:53:5e:
                    be:71:33:7f:30:ab:a5:eb:da:9e:d7:bd:29:57:4d:
                    b0:90:0a:ab:a2:63:ab:11:1e:18:5f:c9:70:c0:23:
                    a9:6f:4e:11:d0:ab:0b:d7:63:c9:bf:a5:fa:fa:e6:
                    43:ed:2b:d0:05:c0:bc:68:35:b5:72:25:37:4c:98:
                    d9:47:88:e5:49:89:be:ca:45:08:f6:4a:bb:7d:fa:
                    0f:40:a9:8e:e1:85:c9:b0:6e:54:ab:72:c7:9c:cb:
                    be:b8:48:d1:f8:ef:4a:e3:4c:66:de:d0:e8:86:51:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:27:6B:FF:6D:C8:A0:77:20:1E:0C:AB:D1:8A:2D:99:D9:55:34:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec027d78-c5f8-3c0b-8834-6428ca6634e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.221.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:22:b7:81:d1:ea:bf:df:32:28:0f:b7:3c:68:d7:0f:88:
         b1:a4:c7:37:a5:b6:be:95:d1:71:69:e6:50:99:60:aa:15:88:
         dc:7a:b8:8b:ca:85:b9:f7:97:e3:36:27:1a:10:e1:0f:c2:af:
         23:4a:05:60:4d:ee:07:8f:83:1c:c2:fa:fd:03:0d:d5:05:7e:
         23:e6:06:be:00:8f:66:e2:f4:1f:0b:b2:d0:12:8a:89:d3:bf:
         ad:ff:19:30:b1:eb:b3:80:d6:21:d0:d2:6f:d4:9b:6a:e4:52:
         c8:05:a9:c6:c7:76:e2:97:0c:f4:bc:c8:29:1b:22:a3:e6:0c:
         e0:d8:29:34:cf:60:7f:dc:88:ec:3b:75:1a:af:4e:6a:50:90:
         0f:91:04:38:6a:73:ac:c0:34:21:48:b0:b8:23:42:fc:dd:62:
         31:f6:c9:4b:b0:b1:e9:e4:57:7a:6f:d5:52:2a:99:c1:c6:45:
         d1:65:0b:45:4d:32:e8:7f:39:21:4c:47:23:81:60:95:13:7d:
         2f:bd:fc:65:9f:45:04:d8:35:04:e4:2d:36:8b:27:ad:68:4d:
         46:ec:c3:5d:ba:5b:9b:a3:53:26:c9:6c:1d:1a:ad:0f:57:c5:
         55:37:5d:96:11:e1:8d:e1:a4:6f:cc:87:24:be:a4:94:e3:7a:
         4a:1c:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:50 2025 by rpki-client