Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa
File:                     11d9e6ae-0c24-3c07-adc0-46331017c63e.roa (raw, json)
Hash identifier:          //MwtIAKC2W9MTVoj1LlQLs3puFXfN2UUi7vXx5bguk=
Subject key identifier:   4B:1B:ED:F5:22:84:C2:8C:CC:A5:C8:C9:2B:2B:89:26:D4:A9:09:0A
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1F901A5E145DCE816F3A6F40
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     29802
IP address blocks:        190.102.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1a:5e:14:5d:ce:81:6f:3a:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=38a00bf9-519e-45c7-a3ba-478c7c21cbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:23:d6:46:ec:01:3c:c9:c8:f9:04:f2:08:
                    50:f4:d3:09:26:0a:6e:f0:95:61:cc:48:83:be:06:
                    b8:91:e2:77:0d:17:00:27:47:47:a9:39:da:00:cc:
                    44:38:d7:71:e2:8e:ef:31:00:12:85:ec:4e:bd:6d:
                    89:86:50:9a:2f:49:64:87:09:2b:7c:3e:f2:98:d1:
                    79:56:9c:5d:0c:54:e3:b6:9a:29:ae:47:27:5b:fb:
                    b3:86:39:f0:54:9f:0c:1b:2a:69:7e:c9:a1:9b:e4:
                    8d:d7:f5:46:25:d4:2b:58:25:e6:85:6d:64:f7:6a:
                    59:f8:57:78:cc:e0:e7:2e:db:7f:0a:a2:f7:9f:79:
                    75:76:7a:81:20:14:69:f0:eb:87:f7:ed:ff:ba:a2:
                    d6:5e:df:e5:7d:d5:dc:33:a3:f6:a4:a1:cb:ff:bb:
                    79:0d:f5:59:1a:35:e0:66:3e:56:1b:a4:f1:3f:19:
                    5f:b3:be:3b:f9:5d:e2:8c:dd:77:cb:f9:52:03:b5:
                    9c:23:c4:4c:d5:42:c5:09:71:b6:f2:55:f7:94:e2:
                    b2:77:a7:dc:93:19:12:fd:2d:58:b8:e1:18:e2:78:
                    c4:d8:54:35:b1:d0:cb:70:a6:94:c3:65:74:11:7e:
                    1a:3b:9b:25:84:01:32:78:98:92:f7:9b:9c:c5:31:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:ED:F5:22:84:C2:8C:CC:A5:C8:C9:2B:2B:89:26:D4:A9:09:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:03:2e:9a:1d:06:e9:02:52:81:03:89:c8:4d:0f:c6:ba:
         1d:24:7e:ba:84:f7:83:4a:67:a0:89:90:5b:b5:e8:42:10:91:
         16:3d:23:e8:10:a4:cb:8a:94:39:3f:c0:82:28:8f:5d:36:ff:
         c2:14:ae:d5:96:9d:dc:21:00:db:54:96:bf:29:37:6e:12:98:
         1b:2d:c8:7c:d6:95:8a:5e:50:62:27:2b:71:b6:4b:99:e3:c5:
         97:3a:cc:4e:33:cc:da:48:55:1d:30:5f:ae:d1:89:ba:89:b5:
         ea:67:a3:cd:a9:b9:be:77:7a:61:46:b8:dc:fe:1a:3c:5f:91:
         95:df:64:1e:27:47:3e:da:2f:eb:5a:20:99:9d:6f:d3:80:97:
         ab:b7:67:30:4f:b5:97:a9:b5:7e:40:91:f7:ed:f3:35:b1:f5:
         08:f8:03:93:98:20:8a:e5:e5:09:34:1a:d8:71:01:9e:e6:27:
         e0:d4:3d:c1:58:31:fc:f3:61:34:3d:ce:35:4e:47:22:8e:da:
         f6:56:f0:71:64:e9:48:a5:c3:88:91:fa:96:22:4a:7d:51:ec:
         10:a8:7c:2c:c1:ba:2b:fb:e2:ba:c5:4a:e4:d5:f9:80:ba:d9:
         64:1a:6d:ee:35:53:89:f1:94:17:21:f0:47:e7:f5:02:15:c1:
         aa:21:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:39:50 2025 by rpki-client