Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
File:                     50e38687-6764-3cf4-b44b-0f3741733f81.roa (raw, json)
Hash identifier:          C6XLH98k07cH5Z8cGMWL08hnTGZwPtl8o/EsyPIb4Kk=
Subject key identifier:   3D:BB:D9:77:38:AC:DE:D3:B9:F2:21:F6:1A:B5:2E:DE:91:FE:67:05
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858493AA3DEB142954168BC04A320
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     200288
IP address blocks:        69.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:de:b1:42:95:41:68:bc:04:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=3e9afd3a-edd4-4c06-9f30-cf3aea99f411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:9e:99:1e:91:8d:64:b3:0d:e2:7b:82:dd:
                    f1:e5:c8:96:ac:aa:7e:52:4e:99:fb:65:9c:e0:ec:
                    e9:d6:8b:b5:63:c1:2e:64:be:4d:0b:5c:b7:c0:17:
                    4b:d0:66:26:d4:7d:3e:ed:33:63:16:03:bb:45:3f:
                    c7:c4:2e:07:ec:c8:53:3c:38:42:5f:83:12:fd:01:
                    e3:ef:50:60:6b:33:63:c8:73:66:be:92:ea:d5:51:
                    3e:88:96:77:8e:54:d6:a9:14:0f:7f:c0:85:2c:fa:
                    e7:7d:28:a9:55:12:dc:7f:03:d1:f4:a5:8f:5f:95:
                    07:f5:a3:86:69:0b:79:9c:b2:91:d3:22:5b:04:5f:
                    21:4d:64:e6:cd:bb:c7:de:8c:cc:40:9d:05:5c:b4:
                    45:7e:c2:f3:11:bf:a9:1c:30:6f:88:c9:5f:a1:cd:
                    80:44:b0:73:47:fe:3f:b9:a2:65:ed:f1:36:81:09:
                    4b:03:b3:31:35:24:9b:f1:d8:dc:7b:6c:77:bf:dc:
                    73:8e:f8:24:98:f7:e1:ef:55:d8:5d:ec:2c:7f:9e:
                    a2:7d:06:1b:fc:4e:30:c7:80:f8:f4:f7:29:b5:4e:
                    63:a2:06:25:24:35:a4:cc:4e:ad:8e:eb:5e:d7:53:
                    a1:af:20:c5:09:23:e9:81:eb:62:5a:c0:57:70:95:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:D9:77:38:AC:DE:D3:B9:F2:21:F6:1A:B5:2E:DE:91:FE:67:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:94:51:07:10:c8:36:60:d1:25:1f:e3:70:b2:fe:54:10:
         8a:1c:67:7f:38:d4:73:94:83:28:b6:dd:ed:08:71:a8:01:30:
         0c:3c:2d:f9:45:c7:a1:4c:aa:68:bf:9f:4e:21:f8:c0:a2:88:
         a2:a3:d3:00:6a:8f:3d:8a:6e:f0:1d:1c:f8:24:45:95:20:d3:
         10:ca:02:76:f2:58:12:6e:c8:08:c8:be:7f:94:06:d1:d8:85:
         21:1e:9b:81:7a:29:a1:42:7d:13:d0:60:81:f9:21:15:f8:7c:
         7f:68:ca:46:41:49:e2:77:1d:ba:8b:e2:8d:e9:ec:48:55:82:
         5f:1d:22:5c:10:a0:f5:ab:bf:7b:71:4a:d5:7a:89:3e:82:85:
         30:a8:32:ba:16:9c:86:cf:8d:ee:73:92:bd:10:87:4d:4d:d7:
         92:4a:6a:1d:6b:50:4a:c5:aa:80:d2:e6:91:45:18:80:98:c9:
         f8:ad:c7:47:a7:cf:e6:88:49:c7:fa:ac:8f:06:aa:34:a1:cb:
         d1:a2:98:06:75:72:85:02:d5:3f:ab:5d:46:fd:6e:a5:63:4d:
         b5:cd:55:ec:2d:79:81:68:cf:88:09:60:52:1e:19:85:41:e0:
         54:21:80:14:09:9a:5e:47:be:78:8c:6b:4d:9b:7a:85:af:09:
         94:22:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:32 2025 by rpki-client