Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2faf63df-c069-363d-8483-2712a3650170.roa
File:                     2faf63df-c069-363d-8483-2712a3650170.roa (raw, json)
Hash identifier:          C6n8iY5spxaM24rIFxmaie0Gr02ZKNWoo4OhC4ULQaM=
Subject key identifier:   11:CE:CB:96:6D:5F:F2:C9:9A:ED:2B:96:52:AF:72:D0:1C:75:E7:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4C9DD81B3643AD59E6C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2faf63df-c069-363d-8483-2712a3650170.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4c:9d:d8:1b:36:43:ad:59:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=0de04b70-d4b8-4c00-88a2-5bbc4d8c2d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:d0:f5:3c:0a:1a:40:55:d5:03:29:1b:d0:
                    11:67:af:23:97:09:37:b0:0e:1d:c2:c0:cd:f0:a7:
                    8f:cf:e0:28:a4:f6:da:c4:bd:85:d9:79:0f:60:b7:
                    a5:b9:ef:85:b3:be:c2:c7:df:2d:b8:06:13:1e:bf:
                    60:fc:34:37:53:be:8e:c9:2f:35:c3:9f:56:72:53:
                    0e:c5:cc:77:b0:2b:17:9e:da:f7:84:18:da:25:56:
                    0a:7e:c9:19:66:b0:31:5c:1c:9d:c3:f4:33:e8:d3:
                    9a:fd:bf:73:e6:f8:17:6f:4d:7b:8b:a0:21:f0:91:
                    8d:9c:93:f5:26:c3:bc:fe:47:d8:4d:df:d7:49:61:
                    3b:b5:61:eb:b7:60:4b:b8:05:0d:4a:cc:58:8b:d5:
                    01:b1:0a:29:4b:a0:2a:51:3c:a9:72:e8:98:5b:e3:
                    2b:d4:bb:23:f0:8f:72:ea:e1:e4:f9:26:4f:fb:4c:
                    cc:fb:36:d1:23:37:71:97:cb:c2:61:2c:6c:f8:09:
                    c9:17:f6:03:22:78:be:01:a2:0c:5a:e9:0e:58:b8:
                    7b:10:82:18:ab:6d:41:c7:29:ba:4d:f0:05:8c:2c:
                    bf:58:16:06:e8:08:93:10:9a:69:d4:4a:df:2a:39:
                    f5:40:44:8f:39:3b:60:c6:96:6f:22:8d:a3:8e:ab:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:CB:96:6D:5F:F2:C9:9A:ED:2B:96:52:AF:72:D0:1C:75:E7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2faf63df-c069-363d-8483-2712a3650170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:de:93:50:28:ef:8c:03:34:d2:31:89:69:31:0a:ff:e1:d2:
         c3:f1:82:82:37:19:4d:95:b3:d4:4a:95:43:42:35:8b:9a:6b:
         2e:7c:b1:48:3e:d7:bf:e4:a6:27:aa:7f:1d:f1:38:f8:b0:ad:
         4e:b8:32:2a:1a:ff:a6:54:8d:84:c9:ed:34:c8:d6:a8:54:c6:
         89:23:32:90:c1:e4:88:b3:d4:3f:0a:a6:ed:7c:f8:d7:b5:0f:
         d2:da:d3:79:c1:d8:e2:43:7d:a3:ea:65:9f:29:00:7e:21:ab:
         b8:c6:6e:5e:ec:d6:77:2b:65:59:c5:a4:5e:f8:1a:d7:09:01:
         ae:46:eb:0f:66:4b:d7:ab:f7:80:e8:ea:0a:a3:fd:95:2d:38:
         ee:cc:dc:b0:da:9d:fd:d5:d6:34:86:39:45:dd:72:fe:a1:5c:
         38:78:a6:02:d9:56:39:e6:18:ca:8c:67:83:b1:1e:2e:e4:fa:
         b6:c7:bc:f4:02:ca:b2:67:57:b9:82:db:92:7a:73:92:c1:82:
         22:bd:82:7a:5e:f5:ac:61:7e:76:81:7b:41:7b:fc:c3:9d:3d:
         fa:33:f7:3a:bf:3c:c1:a4:b9:e4:d2:b5:31:a2:94:d0:0e:38:
         a3:7b:de:83:0b:cb:62:f4:ba:ec:2d:4e:c6:d0:7c:d6:ab:b1:
         d2:43:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:17 2025 by rpki-client