Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee4218f9-2b10-3103-897d-c81b286bb736.roa
File:                     ee4218f9-2b10-3103-897d-c81b286bb736.roa (raw, json)
Hash identifier:          4sdItFAYxBcaSAfQtMJAsvu/eoab1+Kp+BspbeyTz0w=
Subject key identifier:   98:2D:E9:31:02:6D:CA:22:ED:21:75:4E:1E:80:C4:B7:66:14:14:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA646DF0F5D42FACFF72600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee4218f9-2b10-3103-897d-c81b286bb736.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        50.78.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:46:df:0f:5d:42:fa:cf:f7:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=8c559928-e5e1-4a5f-a1ed-ce8f92a9828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:bd:18:1a:fe:da:61:03:2a:21:08:2e:84:
                    cc:0f:8c:90:05:ac:33:3c:47:4a:07:d7:50:a7:79:
                    1c:0a:81:b4:64:05:4c:b6:68:db:be:a7:55:d2:db:
                    2b:9f:40:da:40:8c:57:af:6c:fc:a3:34:32:42:70:
                    b2:e1:52:df:87:bc:aa:5e:1b:2b:f5:53:7d:fd:70:
                    03:e0:dc:e7:08:87:8d:9f:90:0b:8c:2f:93:99:15:
                    7e:28:92:7e:6e:75:9c:c2:7d:ab:cf:f1:a0:f7:1b:
                    73:53:6b:98:74:f6:49:5f:c2:6a:90:b6:a9:41:c9:
                    13:af:5d:3d:9a:78:ba:ac:30:32:2f:2b:ff:dc:e3:
                    8d:6d:2e:66:b4:ac:a3:5f:df:ca:fd:89:37:4c:71:
                    08:80:0e:5e:11:1a:62:2c:3c:ef:59:7a:1d:45:cd:
                    55:f1:46:b0:30:4d:f2:6f:6e:4b:a1:24:25:b1:db:
                    fe:de:0b:55:bd:88:66:c6:e4:90:35:ba:d1:b5:b7:
                    b3:b8:21:a0:bf:f8:40:1a:e4:ef:e6:4f:d6:f2:ab:
                    a0:89:1a:7a:a0:94:df:25:91:02:02:cf:05:ad:ef:
                    cc:7c:ae:15:28:7b:51:a0:f9:02:df:5b:c5:f9:98:
                    ec:54:ee:f0:79:13:32:10:f8:87:b7:cb:bd:5e:07:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:E9:31:02:6D:CA:22:ED:21:75:4E:1E:80:C4:B7:66:14:14:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee4218f9-2b10-3103-897d-c81b286bb736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.78.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:1a:26:e4:f5:95:a7:86:92:a9:fe:94:92:43:65:f0:6b:
         f1:83:8a:b3:20:17:78:62:fa:85:3d:14:c0:01:3a:92:87:04:
         3b:ec:72:17:39:65:73:1c:ae:bb:c5:6b:7d:54:66:74:25:f7:
         61:b7:8f:00:f2:b4:94:5d:ac:d9:1b:92:99:6d:d9:16:f1:f9:
         f6:5a:80:a2:95:8b:07:f8:78:25:f6:82:79:8e:cf:50:51:1e:
         96:63:cf:59:c0:12:45:96:74:7f:d3:27:a4:57:8f:96:f3:dd:
         fe:af:d2:88:3b:d6:9d:01:06:2b:86:83:e3:5e:b8:83:0d:ca:
         15:56:bc:8b:da:fd:3c:50:d7:7b:16:4f:fd:82:fa:95:00:2f:
         fe:26:dc:d8:70:d7:46:54:ac:9c:97:93:70:2e:5c:36:b1:39:
         c4:fb:d8:2c:26:6d:78:1b:fe:8f:ac:87:cd:65:5a:ae:ec:13:
         f6:6e:a3:36:a5:c7:43:6a:71:aa:5d:c4:7c:d4:e6:3e:9e:43:
         fb:dc:0a:28:10:97:5c:22:62:44:5a:07:50:33:4c:61:ee:aa:
         f3:51:ef:b6:61:39:9a:f4:88:98:5d:8d:1b:7a:f9:2a:e6:71:
         af:78:cf:e0:13:a1:6f:d1:b6:9d:db:78:9d:3e:9c:c0:35:87:
         fe:53:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:09 2025 by rpki-client