Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/64c7ef46-1da1-3ac0-9b46-7c8b4b675a43.roa
File:                     64c7ef46-1da1-3ac0-9b46-7c8b4b675a43.roa (raw, json)
Hash identifier:          Vxe/YQYiCS84WF9LJjBSkiZHqJzrOqFuNF5irT8E7Uk=
Subject key identifier:   6C:24:A4:67:E4:CB:F7:B2:01:5B:48:2A:A1:11:88:37:2E:32:D2:2C
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285848FF5D50883DD6B30FC4F5A600
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/64c7ef46-1da1-3ac0-9b46-7c8b4b675a43.roa
Signing time:             Tue 25 Feb 2025 07:26:02 +0000
ROA not before:           Tue 25 Feb 2025 07:26:02 +0000
ROA not after:            Mon 26 May 2025 06:26:02 +0000
asID:                     14315
IP address blocks:        216.83.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:5d:50:88:3d:d6:b3:0f:c4:f5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Feb 25 07:26:02 2025 GMT
            Not After : May 26 06:26:02 2025 GMT
        Subject: CN=d1327a6a-0093-4cf9-bb65-1307429f7d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:75:75:54:b2:f5:3f:aa:87:4e:ed:8c:6d:
                    fa:e2:b3:9f:20:2e:7b:75:8a:7e:52:34:a6:33:0e:
                    f3:65:32:2b:c3:05:62:bc:7a:7b:db:9e:d7:c2:32:
                    88:6a:35:c6:90:2f:a5:dd:8b:f1:a3:2d:30:b3:c4:
                    ea:a1:0b:bf:8a:db:29:43:b9:81:8b:ff:aa:e8:a6:
                    94:38:02:fc:e3:b6:9a:e5:db:42:4d:82:66:02:ac:
                    dc:fe:11:e4:14:fd:99:c2:99:53:57:7c:14:72:9b:
                    12:9c:b4:b6:7e:cc:60:a2:11:69:f6:75:de:f1:6f:
                    2d:2f:cd:fc:a9:31:a1:0c:52:1b:aa:3f:d6:33:1e:
                    21:58:ba:9d:cc:b5:d6:13:b1:70:7a:40:d1:10:e7:
                    90:da:a0:e2:b2:6c:65:52:b4:f7:2e:b0:4c:ac:02:
                    f5:76:03:7b:0a:ee:44:4b:70:8f:e0:12:54:70:84:
                    33:52:9a:af:b6:72:e8:5e:b8:ab:ef:c4:9d:c8:8a:
                    eb:e8:f8:ad:c9:eb:ae:fb:42:4d:a9:7c:68:a2:25:
                    8d:de:ee:ab:67:32:f8:c5:82:95:e3:d0:61:5e:c7:
                    9a:df:64:b1:e6:9a:77:41:47:1d:3b:97:de:36:5a:
                    7b:74:7e:6d:b7:c2:56:2a:87:09:31:00:ca:68:96:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:A4:67:E4:CB:F7:B2:01:5B:48:2A:A1:11:88:37:2E:32:D2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/64c7ef46-1da1-3ac0-9b46-7c8b4b675a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:02:17:14:b7:6d:cb:f2:da:17:eb:08:62:60:09:88:73:55:
         44:38:5d:4c:b8:6d:9f:5f:d8:08:c6:91:80:da:8b:e8:e5:56:
         65:46:2d:7d:72:f1:56:74:3e:9a:c8:f6:62:f3:d7:02:7b:67:
         f3:a3:30:02:e9:96:9f:b9:ee:19:97:b3:b2:6f:ed:1d:9b:06:
         45:9f:a0:32:51:8b:1e:68:65:0c:6b:6f:9e:7a:13:1d:11:64:
         1c:06:d9:d0:be:10:cc:71:0a:23:c0:3c:4c:38:63:cf:52:5d:
         dc:fa:be:81:a4:ea:8e:c5:ed:67:00:d8:37:60:88:d1:f6:b3:
         14:d3:82:34:74:f4:f0:0b:a7:9d:c1:6e:04:9f:26:e9:a9:60:
         7b:b0:a3:aa:6b:b4:e3:82:a3:4c:66:6d:85:70:53:4e:a4:cf:
         67:43:8a:fe:14:17:3a:09:68:53:73:d5:84:85:70:72:c8:d9:
         45:dc:0b:64:dc:b0:09:7c:67:1b:75:e2:fb:61:67:6c:b9:13:
         42:cc:3d:c2:13:49:f0:9a:c3:42:75:cb:e5:41:1a:91:48:2b:
         96:83:ca:c4:d9:37:57:22:bd:6f:e7:34:f8:92:05:00:07:ca:
         9e:2f:36:18:67:48:97:4b:43:29:53:5d:5b:1b:56:a7:e1:4c:
         66:1a:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:17 2025 by rpki-client