Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21bc9350-6ce5-33ec-9791-1f66f408463e.roa
File:                     21bc9350-6ce5-33ec-9791-1f66f408463e.roa (raw, json)
Hash identifier:          Xj/xG1WpTl8Fu4kNaj0pkCMkQe3CNk6+uPLZrzDorTM=
Subject key identifier:   42:CC:31:8C:52:21:4F:CF:31:60:16:2F:C8:90:89:1E:F1:51:73:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849EEB4FFC6AFC38DEB82935920
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21bc9350-6ce5-33ec-9791-1f66f408463e.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     18779
IP address blocks:        50.117.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:ff:c6:af:c3:8d:eb:82:93:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=a00fd05a-735f-438c-8abd-d47b5f5694ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:98:fd:0c:fe:9e:ab:3a:9d:67:3d:c7:ed:
                    d3:a0:b0:71:9a:c6:99:44:59:b1:54:68:57:83:6e:
                    e4:12:6e:d4:65:2e:e8:6d:19:78:bc:04:ae:a1:a7:
                    a0:35:b0:dc:be:98:3f:89:e1:71:83:95:fe:ea:75:
                    41:4e:16:b3:55:2b:fc:15:0a:fd:e9:26:01:de:07:
                    04:bb:e6:de:5e:15:98:4a:94:02:51:f7:30:48:48:
                    7e:aa:74:4d:22:0c:01:ed:f1:b6:d9:04:02:7a:08:
                    ec:24:4b:43:12:d4:1b:c4:e6:1d:3a:6f:aa:a4:00:
                    93:73:c3:5d:f7:96:e2:d7:3d:58:2b:ce:4e:e9:76:
                    d9:69:d5:b2:73:2f:a7:5c:6a:20:88:f2:4f:1a:b6:
                    8b:2b:f3:bd:ae:1a:f5:68:da:e4:f1:86:af:8d:2c:
                    8b:43:be:46:40:73:f0:93:bf:f9:5b:88:e5:7f:fe:
                    0c:dd:2c:8e:55:c7:18:56:06:6d:a6:54:8f:0c:d3:
                    bf:7c:0a:8e:37:62:44:80:61:bc:aa:4c:6e:a8:37:
                    b9:9e:4d:aa:b6:4f:69:5c:58:3e:fd:f0:02:5b:64:
                    b4:5e:b0:ea:dd:1c:6c:46:90:70:78:c3:b6:df:65:
                    ba:32:38:0d:9d:93:08:90:08:d7:00:c7:92:1b:9b:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CC:31:8C:52:21:4F:CF:31:60:16:2F:C8:90:89:1E:F1:51:73:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21bc9350-6ce5-33ec-9791-1f66f408463e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:fa:37:10:da:17:3d:a5:02:9e:82:cc:73:bc:03:88:97:
         e1:cd:84:ca:e1:6e:1c:dd:58:a2:a2:b7:76:01:ac:f9:45:d7:
         39:62:d7:99:8f:db:99:9a:58:50:6d:ac:ae:82:e8:8f:68:c8:
         b3:7f:df:d6:2a:3c:62:7c:4d:39:ea:66:97:c7:5c:7b:2c:60:
         50:03:3c:8b:44:60:e7:1d:86:36:02:6a:d8:de:7b:d7:8c:7c:
         13:2b:56:6b:6a:d8:e0:32:b3:2e:95:6a:2c:23:8a:f1:84:4e:
         ff:4a:50:ae:f4:67:92:ee:8b:d6:e6:62:03:ec:53:65:ea:98:
         a6:ce:d7:22:7c:55:1c:e5:82:f6:97:0b:56:0f:f8:7a:35:3e:
         cd:70:fb:fa:29:95:74:26:20:fd:a9:ca:2f:68:1a:67:6b:91:
         98:9b:40:8f:38:5d:76:50:d6:6b:e8:f0:77:b3:5d:b0:31:30:
         d6:95:03:ea:c6:f4:f1:59:ad:5c:2d:c3:c4:1e:a1:09:78:58:
         d4:80:ce:28:39:59:ec:62:ed:39:c0:2f:92:ab:6e:56:54:35:
         4c:c6:da:41:07:60:6f:e7:74:c2:68:d0:97:71:e6:55:9b:f5:
         2c:c3:89:15:bf:74:ee:70:e1:7b:05:3b:b9:8f:d9:63:76:cb:
         a7:80:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:06:54 2025 by rpki-client