Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa
File:                     02d05e37-ce30-363c-a68f-19a9d0b29186.roa (raw, json)
Hash identifier:          b+gOcoh0sur1Ii6vbNXx9cFCkM7J+fjKj5e1ZV1i3bQ=
Subject key identifier:   00:38:F7:78:01:F6:E3:C0:F3:DA:F8:4F:77:22:67:8C:2C:3E:92:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412405E29ED1A001BF95E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:40:5e:29:ed:1a:00:1b:f9:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fce91111-1773-4369-abda-39b6c6320373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:5f:59:5e:5b:b9:7a:8e:a6:80:02:45:73:
                    2a:91:48:a2:f2:9e:5f:e5:2c:d0:a8:b5:fa:1a:c6:
                    d3:70:b6:ce:11:42:e1:18:bd:ca:96:e2:29:d8:0f:
                    ee:74:1a:e5:d9:23:57:be:27:02:b5:9d:c8:77:1e:
                    65:e0:a2:3a:00:e1:5f:76:99:a4:36:63:6f:b1:08:
                    76:c0:6d:33:59:09:ff:28:04:ae:55:3c:d1:96:ca:
                    f9:71:f2:ab:68:6e:d3:9a:bd:36:e5:07:d9:1f:20:
                    96:e0:e8:ef:f3:d2:60:b3:3e:77:ab:fe:cd:64:af:
                    ef:8d:ae:78:7e:ba:da:e8:7f:a5:65:f0:78:15:26:
                    ca:88:8f:e3:96:a5:00:34:52:79:83:7f:19:8c:96:
                    88:3e:03:10:5e:67:5d:17:b6:3d:4a:84:b7:e8:ca:
                    f9:85:8c:6a:87:36:31:88:ff:8e:4b:80:59:38:10:
                    68:90:6d:52:20:b2:70:3f:b9:bd:b3:0c:5c:cd:a1:
                    f1:cf:15:29:8d:2c:cc:1d:57:89:41:bc:ea:3a:1d:
                    52:d2:62:5f:b9:c3:8b:f4:85:d3:2d:12:40:31:cb:
                    21:1b:cc:0c:6d:be:85:7f:6d:65:67:a7:fb:95:73:
                    f4:ec:5c:f9:11:3e:53:d1:90:e5:a1:a6:ea:1b:1e:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:F7:78:01:F6:E3:C0:F3:DA:F8:4F:77:22:67:8C:2C:3E:92:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:b9:2c:7d:4b:92:8d:ef:fe:4b:7b:24:d7:56:68:b8:94:
         b2:e9:1b:3b:c2:da:0d:9b:d1:cd:da:77:37:c8:fa:d4:8d:cf:
         ab:fe:a9:b6:28:ba:9b:d1:dd:0b:3d:f5:ed:3b:ff:88:1e:1a:
         2a:b4:30:9a:8c:03:29:20:c3:bb:3f:c2:8b:35:89:22:83:d1:
         d5:64:ca:d9:ed:8a:cf:77:f9:d4:4e:83:01:d9:dc:49:ba:e6:
         42:42:50:74:1a:61:84:19:16:ef:4d:e1:90:59:ee:07:98:80:
         8a:c2:69:73:b4:cc:18:b2:bf:90:92:16:12:d5:a8:45:dd:0a:
         98:70:25:c1:ac:cd:9f:bb:f0:5a:39:55:3a:8f:69:c9:84:4a:
         ac:12:8b:57:bd:f0:d0:d5:53:b1:60:b1:e3:0e:f2:4f:fc:65:
         1f:8d:0e:9a:5a:19:9c:9b:83:e3:1e:71:26:4f:6f:6b:af:f6:
         66:d8:6d:d5:05:b0:f3:e7:29:d7:d9:3a:62:f5:e2:76:39:3a:
         9f:f2:69:65:5e:04:ea:7b:af:d8:27:3a:bf:19:36:a5:ac:1d:
         89:9c:1b:ac:25:6d:99:05:04:22:e2:1d:76:9f:f6:e7:d5:5d:
         20:78:52:b5:5c:79:57:a8:a6:ed:e0:c7:45:5b:1c:96:a6:1d:
         66:83:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:59:06 2025 by rpki-client