Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36453489-4a4f-376d-8031-97ba21888870.roa
File:                     36453489-4a4f-376d-8031-97ba21888870.roa (raw, json)
Hash identifier:          0dIrPOF3izshYuKrYvtPAv0creg2db/dJ82PjcK+SYs=
Subject key identifier:   A7:A1:CA:D6:54:2C:9A:C4:E4:7D:08:8D:31:A9:AC:36:2E:BC:E9:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD588AD44DA42FFB0C34A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36453489-4a4f-376d-8031-97ba21888870.roa
Signing time:             Thu 24 Apr 2025 11:52:43 +0000
ROA not before:           Thu 24 Apr 2025 11:52:43 +0000
ROA not after:            Wed 23 Jul 2025 11:52:43 +0000
asID:                     19905
IP address blocks:        50.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:58:8a:d4:4d:a4:2f:fb:0c:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:43 2025 GMT
            Not After : Jul 23 11:52:43 2025 GMT
        Subject: CN=cc471d1e-6bac-497d-b77b-d1134c2322a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:c5:99:df:09:3b:ea:26:d2:3f:6d:67:c9:
                    41:8f:db:62:97:3e:6e:0a:51:20:a5:6e:99:bb:e9:
                    58:cf:94:3e:18:05:e2:2d:04:2f:b3:06:4e:96:01:
                    fc:ea:e9:62:d4:c6:59:4c:46:10:47:96:d4:8c:75:
                    32:99:c0:b5:c8:64:25:ba:41:1a:bb:0c:b4:62:0c:
                    9f:5e:f1:d7:76:b1:2e:ae:d1:53:de:6a:b4:3d:7e:
                    85:ae:38:39:6a:cf:88:2e:78:26:06:da:ac:3a:e1:
                    e0:8f:de:51:ba:fe:2e:aa:e0:73:1e:40:2e:41:14:
                    1e:b4:b5:f6:ea:dc:73:b0:2a:fd:39:56:d3:7d:50:
                    73:4d:37:52:58:ed:e7:7e:a0:8a:65:06:75:74:99:
                    c1:e3:cf:50:1e:86:de:fc:1d:71:a2:d1:dc:5a:91:
                    a7:d6:ae:04:c4:bb:04:e1:16:fe:67:62:c6:f0:94:
                    20:32:6e:c0:24:26:f0:1c:0a:85:15:c5:2c:76:fe:
                    e5:56:57:a4:a0:ba:49:99:a4:d7:42:45:62:39:1b:
                    4a:7c:dc:31:5d:d1:4d:53:71:87:6a:a5:b8:82:3b:
                    db:3f:92:1e:ee:8c:1f:03:db:fc:96:cd:ee:16:0d:
                    f2:15:a8:41:61:5f:a3:d6:49:7a:6f:f6:4a:1f:cf:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:CA:D6:54:2C:9A:C4:E4:7D:08:8D:31:A9:AC:36:2E:BC:E9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36453489-4a4f-376d-8031-97ba21888870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:6d:6a:f4:cf:c8:b3:58:54:c6:a0:b3:51:1f:58:59:7f:
         82:56:5d:aa:f9:c3:11:e1:ef:82:0d:64:16:95:ed:45:00:4d:
         fa:07:64:87:1e:e5:43:31:70:72:c3:b1:2c:75:76:6a:77:0f:
         d9:44:a1:45:b3:fe:1b:78:fd:b9:d5:81:56:6c:2d:49:77:39:
         7f:d0:3f:38:c0:a0:1a:d6:fa:03:75:99:a1:1b:0e:95:18:d0:
         80:c0:9f:df:27:0f:39:6a:b9:50:73:92:61:19:2a:40:76:13:
         60:23:4d:4b:e7:1a:02:a4:4b:a4:06:5d:c1:a0:3b:69:07:a9:
         5a:4b:84:69:77:7d:7c:53:27:aa:d4:ea:a3:71:a4:d5:8e:86:
         c9:c2:14:c6:7b:01:d9:2d:c9:ba:a0:bb:ef:d6:07:a8:b3:ff:
         86:f6:6f:94:ce:1e:05:f5:5b:d3:e2:8b:f9:ee:76:16:cf:04:
         90:61:0f:eb:d6:68:0a:a9:f2:f4:af:0b:5e:c7:73:60:b2:ec:
         a6:7e:6a:19:64:db:c3:0f:79:30:44:02:9b:fb:eb:35:a2:8d:
         69:78:e4:91:43:45:a8:d8:7d:2f:a1:5c:ff:f3:fe:b8:4d:5f:
         6a:82:2a:10:d4:0c:8d:8e:34:23:df:14:f0:bd:f6:0d:d4:bf:
         0d:ba:8e:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzViK1E2kL/sMNKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNDExNTI0M1oXDTI1MDcyMzExNTI0M1owLzEtMCsGA1UEAxMk
Y2M0NzFkMWUtNmJhYy00OTdkLWI3N2ItZDExMzRjMjMyMmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBXFmd8JO+om0j9tZ8lBj9tilz5uClEgpW6Z
u+lYz5Q+GAXiLQQvswZOlgH86uli1MZZTEYQR5bUjHUymcC1yGQlukEauwy0Ygyf
XvHXdrEurtFT3mq0PX6Frjg5as+ILngmBtqsOuHgj95Ruv4uquBzHkAuQRQetLX2
6txzsCr9OVbTfVBzTTdSWO3nfqCKZQZ1dJnB489QHobe/B1xotHcWpGn1q4ExLsE
4Rb+Z2LG8JQgMm7AJCbwHAqFFcUsdv7lVlekoLpJmaTXQkViORtKfNwxXdFNU3GH
aqW4gjvbP5Ie7owfA9v8ls3uFg3yFahBYV+j1kl6b/ZKH8/wBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKehytZULJrE5H0IjTGprDYuvOn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzY0NTM0ODktNGE0Zi0z
NzZkLTgwMzEtOTdiYTIxODg4ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlH/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDGbWr0z8izWFTGoLNRH1hZf4JWXar5wxHh74INZBaV7UUATfoHZIce
5UMxcHLDsSx1dmp3D9lEoUWz/ht4/bnVgVZsLUl3OX/QPzjAoBrW+gN1maEbDpUY
0IDAn98nDzlquVBzkmEZKkB2E2AjTUvnGgKkS6QGXcGgO2kHqVpLhGl3fXxTJ6rU
6qNxpNWOhsnCFMZ7Adktybqgu+/WB6iz/4b2b5TOHgX1W9Pii/nudhbPBJBhD+vW
aAqp8vSvC17Hc2Cy7KZ+ahlk28MPeTBEApv76zWijWl45JFDRajYfS+hXP/z/rhN
X2qCKhDUDI2ONCPfFPC99g3Uvw26jg4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:56 2025 by rpki-client