Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa
File:                     50a98511-3c5a-3722-9533-7e6dc0d97e76.roa (raw, json)
Hash identifier:          cwixn7JQABCVzjKNvmyH6w6upHzWlcJU368sAHC+02Y=
Subject key identifier:   C3:A2:D5:5C:2E:F5:01:08:24:1D:64:53:D1:B1:40:DD:F7:07:BE:F2
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F43285848A99629F71CEEC1609D22E200
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     26512
IP address blocks:        199.119.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:29:f7:1c:ee:c1:60:9d:22:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=8229ef32-489d-49e3-828c-c84f2b966367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:74:cb:d1:33:a2:17:f9:9b:2a:b2:87:10:
                    b3:67:d1:1b:fa:58:ee:fa:cf:50:d7:c3:29:f6:b5:
                    b5:b9:dc:f4:13:a3:03:34:d6:66:60:43:bb:41:bf:
                    2a:90:0e:41:1d:ff:cc:21:f8:ef:6f:3c:d0:a5:4a:
                    98:27:a2:59:04:de:de:cb:47:72:a7:f8:cb:e1:79:
                    44:e8:00:c2:cb:5c:9b:10:d5:6f:9a:b5:e2:0d:37:
                    0a:52:ae:8b:69:a6:87:70:7a:a9:69:a7:c9:81:49:
                    77:42:39:7e:34:77:3d:5e:a5:17:2b:7b:37:12:92:
                    59:c9:d0:12:bb:13:73:9b:17:6a:64:75:72:29:4b:
                    be:cf:48:33:13:fe:7a:46:55:da:cf:6e:33:fc:c8:
                    57:6f:2f:56:45:0f:86:e9:78:45:b9:cf:1b:f7:ee:
                    14:57:c0:66:63:7b:28:5c:15:e8:4f:36:a3:cb:ec:
                    7b:79:48:ca:8e:1f:ca:44:46:a1:38:4f:89:7e:12:
                    e1:b1:02:1d:8e:30:e4:ed:d7:5d:31:4d:1c:c7:0e:
                    9e:67:9f:18:ad:35:7f:f0:f7:b5:02:6f:29:97:e0:
                    7d:9d:18:df:9e:bd:59:4a:99:c8:91:bc:0d:c6:10:
                    e8:6a:78:f3:9c:3e:95:60:83:31:fd:b1:5a:01:4b:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:D5:5C:2E:F5:01:08:24:1D:64:53:D1:B1:40:DD:F7:07:BE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:84:00:40:e5:4b:8b:5e:72:e7:f3:5a:43:2b:5b:4c:94:
         2b:47:e9:08:c8:7c:d2:cd:91:e9:31:e0:30:36:8b:fa:49:48:
         3c:d6:0b:4a:a9:63:3c:50:6c:7c:dc:10:49:de:2e:ee:0a:1a:
         86:77:2b:2c:5f:f5:33:56:75:fa:09:0a:68:65:eb:6d:a4:00:
         99:25:58:9a:e8:1a:eb:06:e1:3e:85:c9:c7:74:07:95:6f:bc:
         41:cc:4b:7e:4f:3d:13:fc:71:4b:59:15:2a:e7:10:ac:56:f0:
         a8:b1:51:a2:e6:ab:bf:d5:f9:4a:66:92:ed:51:31:d0:87:8f:
         1a:2f:6d:67:2a:bf:07:cd:02:e5:21:d2:b8:51:14:6c:e0:07:
         3e:8c:43:09:07:38:a3:b9:b2:a4:be:c0:0b:3f:0f:9a:1f:a3:
         1f:db:4a:8a:fd:25:c2:56:5b:54:f8:56:4e:d3:66:5b:90:5a:
         7f:cf:84:b6:92:b4:0a:bc:e8:f6:74:98:ac:c8:e1:5c:e9:44:
         a1:04:86:49:5a:5a:c2:76:0f:41:b3:7f:09:29:5f:fb:cc:97:
         b4:31:56:a9:ff:0c:bc:3f:73:43:e8:c9:14:31:21:6a:02:01:
         ff:67:65:04:95:7e:0c:37:ae:d7:c0:89:54:4d:e8:cd:7d:2c:
         a1:d9:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:55 2025 by rpki-client