Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d02ed23-4ae7-300a-961c-23b26fed1ebd.roa
File:                     0d02ed23-4ae7-300a-961c-23b26fed1ebd.roa (raw, json)
Hash identifier:          1oRHK0Pqst2P6dNhi+oS4O8pSXVVzQ/nJYuSWZzM/JA=
Subject key identifier:   67:19:EB:DB:C5:42:1C:6E:BF:6C:A0:82:01:B4:00:1B:87:57:1D:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C4877B0F4B113DE0F0A7E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d02ed23-4ae7-300a-961c-23b26fed1ebd.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        50.83.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:87:7b:0f:4b:11:3d:e0:f0:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=fa543aef-e958-498d-b833-1f8674b751ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:2f:23:91:00:2d:3f:86:e0:a8:b3:8f:15:
                    57:73:9c:90:4d:a0:b2:60:20:49:6d:4d:56:81:98:
                    af:e3:ff:cc:1d:68:5b:ca:0e:a5:c0:b4:d9:ee:7a:
                    49:f9:04:9e:6b:4e:48:bb:80:79:1c:a2:26:e0:7b:
                    1e:1f:c2:05:6f:a5:6b:e1:d0:60:c4:43:9b:d3:9a:
                    5a:fd:69:0d:05:79:02:1d:9a:08:e8:59:11:e9:5f:
                    26:6d:45:6b:8e:9d:2b:f3:f2:45:83:49:45:17:02:
                    65:b7:06:a2:d0:53:97:26:cb:ab:45:fc:11:74:be:
                    52:76:be:c7:18:b5:08:77:ed:17:26:96:e1:86:a3:
                    33:3c:d3:22:36:02:f4:0f:e1:8b:38:a8:36:73:30:
                    96:2e:6a:28:bd:6f:5e:0f:2a:ae:11:17:c0:10:ec:
                    b7:1f:8a:f3:23:e0:01:d6:e6:70:38:15:12:41:67:
                    3d:d1:dd:a0:7f:e1:95:75:fc:3a:d4:37:45:0f:de:
                    7c:1d:3d:59:cd:9b:d5:6d:3b:44:5a:55:de:68:cf:
                    60:49:1b:02:6c:0f:23:09:dc:ac:2b:f5:40:65:50:
                    7d:c2:6b:37:02:34:06:05:46:12:60:70:09:3c:d3:
                    92:12:b2:ab:23:04:f2:9b:89:f0:d2:d5:e3:b4:4b:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:EB:DB:C5:42:1C:6E:BF:6C:A0:82:01:B4:00:1B:87:57:1D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d02ed23-4ae7-300a-961c-23b26fed1ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:eb:bd:27:9e:f5:da:80:6e:fa:bf:b6:15:ff:01:94:56:
         d1:45:ef:3d:cd:7a:81:10:fd:dc:8e:63:37:36:58:5a:12:02:
         e0:24:4a:b7:59:67:7e:ae:15:a4:0b:67:72:76:16:79:17:2a:
         0a:1a:6e:ae:63:eb:58:57:4b:15:b4:7a:c6:cc:be:9b:69:59:
         11:5a:4d:d2:68:4c:b0:08:08:24:4f:cf:fd:2d:85:b5:05:7f:
         72:5d:cf:dd:ae:80:72:b1:49:bb:5b:85:34:3a:4c:55:1a:ab:
         4b:9c:a6:ea:38:48:e6:7e:42:97:6c:44:7b:8a:46:a0:4a:f3:
         45:7e:86:99:91:c2:59:f9:56:02:c9:05:0a:2a:a5:fb:8b:88:
         ed:fa:23:6e:ea:29:af:33:be:7c:35:d3:6f:dc:6e:9d:3a:98:
         73:55:6e:23:71:cc:ca:19:93:fe:1f:8f:9e:87:63:1e:8d:7f:
         1c:ae:e9:67:90:8e:2d:9a:66:45:31:c6:21:48:1f:28:c7:89:
         0e:6a:35:24:4c:26:33:7d:95:13:bf:ca:2f:11:3a:cf:5e:17:
         46:c4:9d:ce:55:7c:c5:3a:aa:82:c0:df:a5:66:33:f2:62:b9:
         d1:22:e4:36:45:75:46:4c:48:7d:c4:3b:1c:ca:8b:d0:e4:ad:
         10:9b:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:08:08 2025 by rpki-client