Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa
File:                     4f854a41-341c-3751-a8f4-828af737083f.roa (raw, json)
Hash identifier:          J36cfi7Gd86TSdiov9POUQo9UnUAz06YI7NvEt5aN2M=
Subject key identifier:   06:25:F5:4E:87:AC:F3:7A:74:D7:EA:3F:D1:E8:52:71:ED:16:41:10
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1B5FFA12F4B60C51B75991C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     29802
IP address blocks:        91.191.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fa:12:f4:b6:0c:51:b7:59:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=dc1d7805-9a61-451b-be33-58624f07689d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:08:c7:07:dd:82:8e:68:8a:de:14:f4:6b:
                    e9:0c:3f:5c:10:7f:9b:d4:1d:03:11:ce:0a:9a:ff:
                    67:eb:9e:41:5b:8c:0f:bc:5c:ac:ae:d0:dc:12:12:
                    92:50:77:cd:a7:32:64:2a:d3:1b:3f:00:0e:c4:79:
                    81:6b:41:d3:32:93:bf:63:6a:c4:f5:03:bd:65:c9:
                    06:0a:07:4e:da:b2:57:92:d3:85:a8:fb:c5:41:e8:
                    cb:8b:9c:49:ae:78:c4:91:b5:c4:96:6a:83:9e:a3:
                    eb:fe:a5:4a:4f:a1:5c:58:19:94:be:83:39:06:55:
                    2f:7a:80:bc:ca:0a:a8:b9:c9:54:80:d8:80:91:c3:
                    ef:93:7c:f5:f7:06:ff:6f:4c:2b:f0:55:29:2d:3c:
                    b1:ec:56:ba:71:c4:c7:85:f4:31:a0:a6:48:b3:c5:
                    a3:1d:2e:53:f6:48:74:56:6f:b6:72:53:db:b5:50:
                    62:bc:a1:b2:c2:a1:c3:d9:7d:17:a4:ba:3f:30:b6:
                    f9:be:c2:d9:1c:5b:75:22:1f:5a:81:4d:7b:91:fa:
                    05:11:3e:0f:7f:91:8e:d9:13:93:24:60:10:04:72:
                    44:8b:ac:0a:a9:47:f0:09:ff:ef:16:1e:92:ce:4c:
                    0d:71:37:e3:7b:63:f4:d8:a2:d5:09:43:72:38:52:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:F5:4E:87:AC:F3:7A:74:D7:EA:3F:D1:E8:52:71:ED:16:41:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:2a:1e:82:dd:fd:db:df:91:38:a2:d1:18:59:31:09:90:
         c3:d0:60:ea:52:a8:04:c0:d8:de:c5:0f:a6:91:07:37:c4:b3:
         3a:4d:30:8e:21:05:5a:a8:72:4f:fa:98:b3:ee:33:0a:dc:01:
         fd:7a:e5:8d:d1:04:f9:f9:06:8d:77:c0:90:01:6a:fa:66:91:
         44:46:9b:1e:2f:d8:c4:a7:9c:21:d5:54:a5:b7:65:db:1f:bb:
         5e:f8:dc:3b:56:5c:32:31:b8:e4:f7:39:e9:7c:ee:24:00:68:
         df:c4:e6:9a:27:4a:e2:dd:5f:d1:f8:55:fc:e4:37:8d:5a:b9:
         c3:3c:b7:b0:0a:fb:74:e9:4c:b6:a5:76:bf:f2:bd:6c:fb:99:
         a5:10:15:85:ab:44:5d:cd:e1:c5:a1:e2:3e:7c:63:63:6a:88:
         4f:69:f8:72:1d:57:21:f0:3c:c0:0b:36:69:1f:ab:bb:50:c2:
         2e:6b:e9:b9:7d:b0:6a:bd:d0:eb:af:d9:7b:43:e2:9c:93:e3:
         aa:b7:cb:db:dd:56:d0:ec:18:24:ca:6b:6e:3a:47:d8:94:f4:
         c1:41:e9:21:ab:54:7d:0f:fc:e8:cd:28:eb:16:27:76:2c:48:
         5c:0a:2b:84:04:51:35:c5:89:18:d3:b0:4e:d4:40:68:7a:3b:
         27:52:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:28:15 2025 by rpki-client