Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa
File:                     256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa (raw, json)
Hash identifier:          hZJjEy28tX7SVARykIz6q/DbDbm64FU5cb9VygGedc0=
Subject key identifier:   CC:35:35:07:5B:7A:B6:82:0D:2C:9B:99:68:6F:DE:5E:D7:9C:9D:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF465C8B9CF82DB6F278C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa
Signing time:             Tue 22 Apr 2025 09:36:33 +0000
ROA not before:           Tue 22 Apr 2025 09:36:33 +0000
ROA not after:            Mon 21 Jul 2025 09:36:33 +0000
asID:                     19905
IP address blocks:        50.80.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f4:65:c8:b9:cf:82:db:6f:27:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:36:33 2025 GMT
            Not After : Jul 21 09:36:33 2025 GMT
        Subject: CN=25b15da4-066c-43eb-8fdc-4a5f370bdaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:5f:8a:8e:ce:65:48:ec:fd:9c:c0:7a:19:
                    d2:a3:ca:f1:98:e8:c8:92:b5:b5:a6:1f:91:9d:3b:
                    9e:b0:05:eb:3b:d2:11:80:52:ae:4b:aa:af:4f:4b:
                    79:79:a5:b7:02:93:00:71:42:99:fd:ef:94:5f:3a:
                    c3:2d:56:e2:87:cf:05:e1:78:cd:ca:b2:7f:09:b4:
                    ce:75:2b:3b:32:83:5e:7f:4c:4e:27:73:cc:54:f7:
                    f0:ea:74:53:e4:06:49:28:05:ce:f4:52:7d:41:a6:
                    9d:ad:fa:e7:00:72:15:26:ba:02:9d:0e:9c:60:72:
                    8a:0c:e4:1a:a6:64:38:ae:af:ce:10:49:6d:35:bf:
                    bb:c4:11:0c:92:75:c7:4b:58:63:fd:ee:4f:4c:9a:
                    86:57:fd:31:7c:38:80:0f:2a:96:1e:ef:cd:22:00:
                    31:cf:67:27:92:1b:14:48:6f:87:8c:66:d4:f8:9c:
                    45:08:c9:f5:18:24:07:ed:05:92:65:20:2a:22:fa:
                    1f:1f:51:cd:c1:95:19:93:e0:92:0a:8e:32:37:23:
                    5c:3b:e3:4f:ba:5e:9a:ee:5b:98:73:d7:4f:9b:d9:
                    6d:83:2a:e9:14:74:a4:5c:96:36:2b:3a:fe:7b:bc:
                    c5:19:c8:8f:d5:50:7a:7e:1e:cd:19:82:67:97:e9:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:35:07:5B:7A:B6:82:0D:2C:9B:99:68:6F:DE:5E:D7:9C:9D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:94:ad:39:6d:89:3a:52:73:b1:78:5f:75:5b:e5:78:47:
         ee:7c:47:a0:72:06:e7:94:38:f7:0e:8e:23:4a:c1:27:e1:8a:
         7f:7a:a0:83:f7:84:83:5c:b9:86:63:6e:86:83:5b:2e:5c:0d:
         25:5a:52:87:46:31:5e:39:79:6e:34:41:48:6c:8a:cf:73:04:
         fc:5d:3e:67:63:37:45:29:79:a9:92:e5:4c:50:e9:79:51:24:
         5e:22:50:77:3a:c7:c7:3c:7d:9b:de:8e:a6:b4:19:6b:c8:45:
         a5:05:6a:80:7d:75:a7:1d:0f:21:3f:56:12:a6:2a:d9:c0:66:
         f5:04:ca:e3:a8:78:9b:07:c8:41:fe:ea:06:e7:50:4d:75:21:
         06:da:c5:b3:92:1c:80:13:1f:ba:ad:93:3e:40:d5:9c:6b:dd:
         a5:1c:d7:ba:33:28:9d:2f:cc:b3:d8:96:25:95:27:ff:84:f6:
         c1:53:36:e3:ae:86:66:08:40:63:7f:7f:a4:bb:1c:fb:c1:a6:
         ba:5f:71:c8:45:81:32:48:8f:3a:35:dd:26:10:c3:64:09:77:
         e4:72:e2:06:51:f4:c5:bc:e6:61:e1:69:97:0e:25:9a:9f:52:
         13:2c:b3:49:c6:3a:96:2b:65:e5:65:d2:52:c3:4c:af:84:5a:
         82:85:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:52:47 2025 by rpki-client