Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/5e2ca5c9-aafe-39f2-8063-13c4cb8cf339.roa
File:                     5e2ca5c9-aafe-39f2-8063-13c4cb8cf339.roa (raw, json)
Hash identifier:          76vbGgrmhrLd85XqvVE14jMCVjF3pCLYB6LG6Oj4vOs=
Subject key identifier:   09:68:CC:90:4D:2A:96:8B:A2:33:82:2E:FD:70:5F:51:17:1D:69:E0
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F4328584849456464FCBD6CAB0F6CB540
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/5e2ca5c9-aafe-39f2-8063-13c4cb8cf339.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     47869
IP address blocks:        199.16.50.0/23 maxlen: 24
                          199.16.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:64:64:fc:bd:6c:ab:0f:6c:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=23a51cad-3639-4f60-bed9-6d5a6fcdfa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:d6:36:25:10:2f:fe:ee:6a:31:03:f0:2e:
                    a4:5e:a3:d2:6b:32:82:b7:db:d5:55:77:63:68:07:
                    37:f8:3f:03:6d:c5:87:fb:c7:93:11:15:8e:84:17:
                    b3:e4:34:75:74:13:db:9f:85:b1:81:f4:4e:70:e4:
                    c0:ab:67:10:d5:c0:66:f1:64:50:82:11:6b:dd:1d:
                    a5:d8:82:9f:7d:7c:35:ea:74:5b:7a:1e:7d:f4:06:
                    dc:81:a9:4b:e9:e5:2f:ea:16:78:40:50:5a:d8:a2:
                    bf:c4:5d:ed:02:c6:69:b3:f4:51:b6:9a:03:99:86:
                    0c:05:1a:22:24:08:2a:d6:27:a9:58:8c:4d:36:a3:
                    1d:a5:4c:94:51:b5:f0:78:68:3b:c2:b5:d4:d9:34:
                    5d:ef:19:ee:38:19:7b:dc:fd:f1:f8:27:4c:86:90:
                    f9:1b:6d:12:b7:43:19:40:79:e7:85:81:fe:b6:57:
                    fb:82:66:52:e1:9f:5d:ea:31:26:87:e3:00:bb:16:
                    87:6a:58:cf:33:55:1b:a8:d6:45:5d:2a:b5:aa:f9:
                    42:2c:ed:18:4d:d9:54:82:63:77:88:e8:2a:23:59:
                    03:74:c5:5c:91:b0:cf:3c:09:09:4f:b0:77:eb:92:
                    f9:b4:48:27:f1:2b:d7:17:37:68:91:53:3c:e2:2b:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:CC:90:4D:2A:96:8B:A2:33:82:2E:FD:70:5F:51:17:1D:69:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/5e2ca5c9-aafe-39f2-8063-13c4cb8cf339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.50.0-199.16.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0e:c7:03:64:31:99:1b:7b:68:64:4a:fb:cd:cd:ce:4d:94:
         92:88:d4:ab:e7:aa:31:bd:9d:b5:7c:27:52:99:a3:f9:1a:f4:
         3c:dd:8e:09:ed:26:7d:87:2e:5e:97:bf:e6:fb:4b:1b:f4:31:
         95:9e:1d:eb:b2:a3:be:d6:fa:f7:58:13:c9:7d:2f:dc:bd:77:
         89:5b:b6:c9:b5:a7:8e:0c:49:bb:43:10:68:52:31:f4:1e:fa:
         f9:50:d4:2a:b5:36:51:0a:31:1f:9c:c2:15:a8:d7:18:88:05:
         9f:13:49:14:14:a5:9c:7c:d6:91:3e:28:79:04:87:15:96:19:
         ef:a7:3c:ed:16:9b:2f:5f:b2:e5:96:59:6e:09:7c:39:1e:80:
         c4:32:15:6b:ca:1c:2e:5a:db:ec:83:3b:50:ce:08:93:52:c1:
         f4:7a:7a:1e:83:6e:dd:e1:7b:3b:c6:b8:d5:74:b1:6b:41:82:
         cf:b7:c5:b5:c5:4e:09:01:a1:71:fb:29:71:9e:42:6b:d9:9b:
         85:24:11:3b:c5:42:81:4d:a4:a0:85:45:7e:88:0c:9a:81:ce:
         72:a8:57:cb:ee:de:39:e3:70:72:06:5f:b8:56:95:4b:bf:37:
         5c:0e:8b:4e:05:b3:98:ed:f3:ce:e8:5a:4b:3c:df:0a:8c:09:
         29:81:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:17 2025 by rpki-client