Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
File:                     e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa (raw, json)
Hash identifier:          oj/6L5ZGd+slm8p9uVxdGVa1AvE8yLGRLIAaxOBiQfg=
Subject key identifier:   08:EE:E5:A3:44:CD:CA:3C:90:8F:AC:50:9E:FC:C5:F3:B8:52:FD:0D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A10354532793A3009F0D8DB00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     212238
IP address blocks:        172.94.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:45:32:79:3a:30:09:f0:d8:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f8ec5f92-9d7d-4b3f-9da6-b51a669b23da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:dc:51:d8:ec:ef:bf:a1:b3:55:18:1d:5f:
                    bd:46:5c:2b:eb:67:ce:ac:f7:3f:25:3d:8e:88:3a:
                    46:21:64:84:f3:23:e3:68:a8:67:eb:e8:a8:33:b5:
                    c4:8d:c8:00:32:c8:76:5f:ec:53:fd:85:f8:e1:cd:
                    25:75:52:72:25:d3:85:db:a1:df:16:49:cd:db:69:
                    77:68:ed:1f:56:9d:66:fc:a4:72:54:da:9f:ce:a8:
                    fc:0e:73:90:fb:8c:bf:da:24:71:74:b4:33:fb:b2:
                    7e:1e:6d:d7:40:86:c4:15:7d:00:d9:58:f7:66:ce:
                    71:1c:6a:42:4f:45:d4:1a:28:e5:6c:b1:06:92:5b:
                    0b:88:b5:79:da:0d:1a:03:5d:96:46:a9:67:30:92:
                    f2:1c:5e:04:ad:e5:c2:0e:95:71:33:1d:3d:9c:84:
                    60:85:30:b2:12:fb:e3:c7:da:49:c1:fe:7b:ec:d4:
                    66:f0:00:a6:1e:22:db:b7:a7:de:0b:b3:2b:b2:bf:
                    87:e8:97:6c:73:3f:47:75:6a:00:b8:71:5a:ca:64:
                    c4:9c:0b:ef:f8:9f:25:28:32:ab:8c:78:20:d5:f0:
                    d1:02:91:97:19:bc:20:f9:dd:60:78:80:73:cb:7c:
                    50:0a:32:4d:e6:64:ae:81:1f:f8:8a:d7:71:61:c1:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:E5:A3:44:CD:CA:3C:90:8F:AC:50:9E:FC:C5:F3:B8:52:FD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:d8:f3:5a:e3:9c:47:78:25:47:9f:8c:6b:31:a3:e0:21:
         8f:a8:21:c9:ff:85:92:f9:ad:3a:a2:69:73:6e:66:3b:9d:52:
         7e:da:7e:1f:b0:25:ef:b1:8e:a9:a2:fd:a8:f4:bc:53:e9:40:
         58:ee:75:7e:8c:09:c9:86:cf:7e:3c:68:50:cf:33:78:0c:f7:
         3a:4a:90:6a:c1:cb:39:eb:ce:f2:d3:c7:2b:db:1c:3f:6e:3f:
         de:60:73:f9:85:f2:cc:3b:b4:26:c1:b9:47:de:18:11:1f:7e:
         ee:53:2f:3a:2c:c3:60:94:44:b6:50:c9:19:77:72:fa:97:f9:
         74:4b:da:01:a5:8f:e6:d3:f1:11:09:33:33:3d:3b:96:3c:25:
         80:d5:11:cd:3b:21:71:d5:4b:6a:ca:71:a7:d8:4c:2c:2a:25:
         3c:f5:04:3e:ed:57:18:93:c6:72:77:c9:88:6b:4e:3f:e7:33:
         76:07:18:18:77:71:ec:1a:b9:59:b7:42:ef:22:69:10:1c:3e:
         b2:63:c3:71:01:35:bf:b2:7c:49:59:2e:a0:42:7b:2a:21:50:
         7d:cf:e5:95:85:77:e1:f8:df:6f:7e:14:42:97:6d:58:9c:d2:
         66:24:63:c4:1e:f5:a4:5f:6b:db:34:cc:7c:c2:e0:45:03:82:
         bb:57:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:00 2025 by rpki-client