Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/08b95544-ac4c-38bd-92b0-fa8dc546cb85.roa
File:                     08b95544-ac4c-38bd-92b0-fa8dc546cb85.roa (raw, json)
Hash identifier:          gflSsa1pMg6efJDp+JlaIfoapoZ+JawXmPmTS+hgZ+0=
Subject key identifier:   E0:00:B0:B4:C1:F9:B4:9F:59:31:57:3C:E1:95:DD:B8:8F:19:46:AE
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1F90162CB6AB5B9BBFA8F7C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/08b95544-ac4c-38bd-92b0-fa8dc546cb85.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     394727
IP address blocks:        107.155.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:16:2c:b6:ab:5b:9b:bf:a8:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=c918b6ce-1a6a-4708-844f-925e7d8a7cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:24:82:24:1f:fe:26:20:cf:17:8c:1a:32:
                    52:c7:b1:df:da:19:59:08:14:14:a7:97:68:d4:20:
                    98:d6:f2:d2:47:a5:1a:79:8c:7b:20:a4:ac:82:ae:
                    78:3c:3d:85:34:9e:5c:0c:31:73:c5:0e:45:b2:a6:
                    1d:98:00:8f:eb:33:73:c5:dc:db:60:fd:94:8f:0f:
                    23:78:e6:a9:a6:9e:0c:6c:1d:86:36:01:7a:f9:ea:
                    4d:0a:74:97:d1:66:a8:79:8c:dd:8d:9b:2a:84:37:
                    05:f4:e9:e2:4e:f7:e7:e9:e3:39:24:61:70:f8:0b:
                    3d:c6:bc:df:40:ac:b3:b5:c3:8d:7a:5e:e4:b8:8f:
                    a4:c0:77:e8:07:12:87:18:60:a6:80:9b:47:5c:40:
                    97:96:45:eb:ec:04:1e:51:87:3d:e7:82:3f:a3:8e:
                    36:a0:d1:25:94:34:8c:30:a7:e6:71:04:f4:6e:b7:
                    2f:e0:6d:b4:61:96:18:6a:2a:fe:14:85:5a:b5:da:
                    98:63:ff:0f:0f:5c:59:53:61:bb:0f:57:04:c3:92:
                    b4:32:26:8f:1b:ad:cc:24:17:a8:3a:a7:69:4e:fd:
                    6a:c9:63:21:e7:55:ef:1e:ca:90:78:39:43:26:c0:
                    c3:02:f2:6b:0d:02:16:56:4f:cd:dd:1c:6b:a1:1a:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:B0:B4:C1:F9:B4:9F:59:31:57:3C:E1:95:DD:B8:8F:19:46:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/08b95544-ac4c-38bd-92b0-fa8dc546cb85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:82:8a:89:28:f4:39:3f:88:47:fe:df:5d:1f:94:dd:be:07:
         3e:ab:fa:6e:9c:27:c4:b3:7e:a2:82:e8:4a:7c:fb:6f:db:4c:
         52:15:2e:4a:99:b0:d0:c0:1a:f3:34:a6:54:84:95:1c:75:76:
         ec:ab:8b:6b:dc:d6:fe:e0:7f:38:c2:6b:d5:40:af:ac:66:23:
         6e:cd:46:8b:ab:c9:75:32:21:9c:2f:03:8a:f3:21:f5:97:cc:
         8e:89:30:d7:e3:45:ba:6a:06:22:c6:36:75:53:9c:87:73:f4:
         38:f1:73:25:0e:4b:1d:64:ed:16:e1:c4:fe:43:a7:ab:4c:ac:
         ef:e6:d1:58:f7:80:82:1e:19:f2:ec:4a:3f:8a:74:df:82:58:
         21:5d:70:08:21:b0:7b:4a:3c:93:71:39:49:02:06:c7:0f:92:
         19:e2:a6:ad:56:03:a6:d8:59:b3:ce:f1:05:23:26:49:02:dc:
         1b:e1:46:db:42:09:48:0b:fc:a5:65:91:b6:45:8c:e2:24:b9:
         ca:75:6a:57:0c:52:3f:e4:d2:f3:47:3c:91:a0:f9:05:78:27:
         78:53:eb:fa:79:40:f4:60:f3:8c:4b:cf:10:19:b0:7f:97:a2:
         a1:7b:9d:41:fc:ae:16:ba:99:e9:97:b3:12:8a:75:d1:50:76:
         53:5b:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:16 2025 by rpki-client