Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/80089b43-24d9-3523-ae85-a05ab745224f.roa
File:                     80089b43-24d9-3523-ae85-a05ab745224f.roa (raw, json)
Hash identifier:          p4qDrtNHK85YSQUO1FffiqnK+TWtNzgw3jl/4BNtU3A=
Subject key identifier:   A7:06:AC:59:F9:BE:8A:9E:FC:FE:28:AF:4B:0C:73:A8:3E:32:B0:36
Certificate issuer:       /CN=98b361e8-8535-4cc8-a455-6f4655f24265
Certificate serial:       010D0C9F4328584968B422F6E0EC344F4B2B6E40
Authority key identifier: FD:16:2A:7C:BE:75:6C:28:1D:8A:B8:7E:9A:DD:FF:A8:8D:3F:14:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/80089b43-24d9-3523-ae85-a05ab745224f.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        50.115.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/98b361e8-8535-4cc8-a455-6f4655f24265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/98b361e8-8535-4cc8-a455-6f4655f24265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:22:f6:e0:ec:34:4f:4b:2b:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b361e8-8535-4cc8-a455-6f4655f24265
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=282c2f22-9ad1-4f1d-9296-ae5fb12c4f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:fd:2e:7a:21:a2:3a:7e:b7:8b:a2:11:cf:
                    2c:ad:ec:a9:4e:d2:d8:41:f3:56:14:a1:a4:27:d5:
                    d4:85:69:a6:23:79:61:06:0c:80:09:97:f3:da:49:
                    6d:d1:a7:91:13:3d:7a:c4:04:b1:5a:08:a6:50:32:
                    90:94:bf:6c:ad:d8:62:24:1b:40:f2:1e:17:97:40:
                    17:a7:9f:32:d2:0a:51:5d:9c:9e:c1:61:7c:a5:57:
                    15:5b:73:53:95:f8:66:a5:f6:7b:96:f4:57:c9:ac:
                    bd:9a:44:ea:c1:ac:86:1e:22:bf:32:56:fb:78:01:
                    64:0c:b9:84:49:89:e4:58:35:86:e6:b9:82:10:ed:
                    80:6a:0d:50:b8:40:04:34:ac:85:11:90:fc:82:90:
                    fd:6c:af:b1:44:19:fd:57:19:c1:92:2e:73:66:49:
                    61:d4:59:cc:70:91:fd:cd:f3:42:ea:65:7e:d3:69:
                    dc:20:a1:dd:68:58:46:b4:50:18:22:bc:0f:d7:35:
                    52:79:14:b0:3b:c2:42:76:64:04:01:23:d5:cd:24:
                    34:16:29:63:a7:06:2c:48:70:fd:62:4d:bb:e4:82:
                    08:6e:c3:45:e1:c7:e7:61:7f:1f:e7:ff:00:a7:2f:
                    8f:d5:5c:67:7a:05:c9:26:fb:e3:d5:c1:ae:af:c6:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:06:AC:59:F9:BE:8A:9E:FC:FE:28:AF:4B:0C:73:A8:3E:32:B0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/80089b43-24d9-3523-ae85-a05ab745224f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265/98b361e8-8535-4cc8-a455-6f4655f24265.crl

            X509v3 Authority Key Identifier:
                keyid:FD:16:2A:7C:BE:75:6C:28:1D:8A:B8:7E:9A:DD:FF:A8:8D:3F:14:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/98b361e8-8535-4cc8-a455-6f4655f24265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:56:5e:57:55:42:40:89:16:63:eb:41:ab:43:1a:a7:05:9f:
         c8:10:3e:c6:f4:27:94:4f:d7:2e:dd:db:ff:37:cb:d1:69:43:
         04:02:da:c7:ad:91:59:1d:60:54:85:46:af:01:bb:28:4e:19:
         24:62:fb:24:e5:36:c7:1a:9e:e6:99:c3:79:15:35:66:50:52:
         8d:e5:d8:e7:4b:8f:b7:8a:b9:a1:34:32:38:30:09:ae:7a:39:
         5f:21:45:12:37:2a:e5:12:78:65:9a:93:f1:7a:1c:bf:db:f2:
         46:11:5f:71:e1:36:da:66:a6:37:70:98:30:4a:a8:07:83:65:
         ec:9d:5d:9a:84:51:01:07:d4:4b:dc:06:fb:07:f3:6a:76:d9:
         ba:4e:5e:d5:27:a5:d8:85:ae:e6:e9:26:64:8e:5e:29:87:75:
         15:34:9e:dd:b9:27:a2:a4:8f:68:4d:41:f4:c2:18:f7:17:d8:
         50:ea:4c:48:bc:21:11:ea:19:14:6b:9e:77:22:c4:d4:64:43:
         92:24:b7:68:b0:9c:e3:84:5a:d2:15:5a:67:3c:a3:d8:e5:3a:
         42:45:72:61:71:c5:73:56:a3:21:55:83:13:c9:a6:97:31:8c:
         3d:3e:57:95:56:e6:85:23:f8:cf:e3:0f:76:2c:6d:49:9f:78:
         b6:33:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:45 2025 by rpki-client