Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/199080fc-f9fc-31a6-b688-de4db8dcb9d7.roa
File:                     199080fc-f9fc-31a6-b688-de4db8dcb9d7.roa (raw, json)
Hash identifier:          8FhLh9SSE0TLfAYqYiF2b8CZvwJXbotaqjVsggMfKqw=
Subject key identifier:   85:3B:F2:51:38:17:EC:84:7E:31:F5:6B:2F:F0:8E:DC:09:B4:D3:B7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1ECD6D731FAE31FB3800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/199080fc-f9fc-31a6-b688-de4db8dcb9d7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.82.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1e:cd:6d:73:1f:ae:31:fb:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=46ea301c-dc46-4e89-96ec-eb42f3e64e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:66:32:51:52:0d:5b:d0:30:e3:07:d5:99:
                    26:1f:94:9c:87:9c:57:71:8f:a1:80:40:d1:fe:e5:
                    2b:d8:f6:4f:bc:2f:a8:1d:b0:c0:f5:3b:b8:ed:de:
                    7f:3f:24:33:e7:fb:08:65:0a:62:20:48:47:99:27:
                    c3:d0:f8:8a:ce:9d:79:df:07:24:53:4a:61:d0:09:
                    86:de:42:f8:a6:98:fa:c1:e0:cf:55:4a:c0:e0:65:
                    dd:06:06:65:96:5b:d7:23:df:ef:a6:c1:77:76:56:
                    61:33:c9:fb:82:85:4e:66:b1:b0:be:67:5c:94:30:
                    7f:97:30:41:2d:c6:6a:cf:a2:d0:39:01:af:0f:49:
                    6b:c7:28:ed:8e:31:7f:b8:1c:08:0d:0d:58:88:02:
                    8c:d4:3e:04:d1:bc:d5:8c:03:ad:ba:c8:ee:13:95:
                    98:11:cf:af:fc:b0:29:70:30:aa:ce:ba:2a:a6:aa:
                    ed:c3:78:09:64:36:2b:1f:11:71:dd:a0:76:2f:f8:
                    d5:17:ce:2e:f2:17:89:d0:e4:4d:72:4f:dc:f5:ee:
                    38:70:2c:d4:60:00:c6:7c:b0:38:95:91:13:02:ee:
                    56:03:ee:85:30:ac:68:f5:2d:75:8e:c3:6a:47:90:
                    11:f5:99:0c:a1:90:fe:d8:20:f2:56:78:be:3c:16:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:F2:51:38:17:EC:84:7E:31:F5:6B:2F:F0:8E:DC:09:B4:D3:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/199080fc-f9fc-31a6-b688-de4db8dcb9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:49:b9:de:4c:cc:a9:8f:af:11:12:3b:2f:e8:33:32:02:
         1b:be:a8:96:13:ca:c9:67:4a:66:25:ad:b7:00:8e:bd:9f:dd:
         5a:8e:fe:d6:a0:a6:f2:54:65:ad:15:75:ba:b4:31:8c:4d:d3:
         ff:df:7c:cd:34:f3:e2:40:88:a2:67:b2:9b:58:b0:d4:f2:89:
         e1:84:db:9f:6b:b3:e0:e0:c0:f2:6c:0f:45:8c:ba:1d:bd:e1:
         f1:53:51:e0:33:a7:77:49:51:ad:22:82:f9:fc:71:33:33:b1:
         2e:5a:80:b4:0e:71:7a:67:17:65:a7:cb:ae:e6:e0:f4:60:f0:
         f7:43:2c:af:45:77:ab:fe:67:64:38:4b:9a:08:28:7a:7c:34:
         42:ce:53:d8:c0:fa:56:3e:e7:ef:38:39:4e:59:66:b3:7d:a3:
         67:62:db:43:ce:36:68:92:26:a4:5e:0c:57:16:7f:fa:46:04:
         03:8d:e2:d1:74:21:4a:76:be:97:12:9c:b0:91:4d:e5:66:55:
         b8:0c:96:16:36:1f:7c:5e:c9:5a:35:44:9b:23:b2:5c:85:9b:
         12:86:b3:f8:d2:05:61:ce:bb:93:f3:2b:db:6a:84:01:7b:f3:
         df:05:cc:00:09:71:f1:5d:bb:dc:85:c0:ac:0b:6a:6f:42:62:
         9b:fa:c1:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh7NbXMfrjH7OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NDZlYTMwMWMtZGM0Ni00ZTg5LTk2ZWMtZWI0MmYzZTY0ZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPVmMlFSDVvQMOMH1ZkmH5Sch5xXcY+hgEDR
/uUr2PZPvC+oHbDA9Tu47d5/PyQz5/sIZQpiIEhHmSfD0PiKzp153wckU0ph0AmG
3kL4ppj6weDPVUrA4GXdBgZlllvXI9/vpsF3dlZhM8n7goVOZrGwvmdclDB/lzBB
LcZqz6LQOQGvD0lrxyjtjjF/uBwIDQ1YiAKM1D4E0bzVjAOtusjuE5WYEc+v/LAp
cDCqzroqpqrtw3gJZDYrHxFx3aB2L/jVF84u8heJ0ORNck/c9e44cCzUYADGfLA4
lZETAu5WA+6FMKxo9S11jsNqR5AR9ZkMoZD+2CDyVni+PBbpGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIU78lE4F+yEfjH1ay/wjtwJtNO3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTk5MDgwZmMtZjlmYy0z
MWE2LWI2ODgtZGU0ZGI4ZGNiOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlIFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyaSbneTMypj68REjsv6DMyAhu+qJYTyslnSmYlrbcAjr2f3VqO/tag
pvJUZa0Vdbq0MYxN0//ffM008+JAiKJnsptYsNTyieGE259rs+DgwPJsD0WMuh29
4fFTUeAzp3dJUa0igvn8cTMzsS5agLQOcXpnF2Wny67m4PRg8PdDLK9Fd6v+Z2Q4
S5oIKHp8NELOU9jA+lY+5+84OU5ZZrN9o2di20PONmiSJqReDFcWf/pGBAON4tF0
IUp2vpcSnLCRTeVmVbgMlhY2H3xeyVo1RJsjslyFmxKGs/jSBWHOu5PzK9tqhAF7
898FzAAJcfFdu9yFwKwLam9CYpv6weE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:55 2025 by rpki-client