Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b5c77ae-7ddc-3cdd-873e-e999e6a4dc66.roa
File:                     3b5c77ae-7ddc-3cdd-873e-e999e6a4dc66.roa (raw, json)
Hash identifier:          HfdqE0GcVptqlL48/WFRenXrKClNWKiL9YAxFT7K30E=
Subject key identifier:   C8:D0:1A:5D:42:9C:2D:DA:41:DE:76:7C:83:5E:C6:A0:CA:29:1C:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA3E50FD4E634EFC015F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b5c77ae-7ddc-3cdd-873e-e999e6a4dc66.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:3e:50:fd:4e:63:4e:fc:01:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c998b709-0ab2-4900-920d-03d037888361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:95:5d:15:0e:3e:09:06:7e:a3:92:58:6a:
                    19:56:db:3d:4b:bb:50:bf:7b:53:84:27:f3:94:b5:
                    b7:c8:75:e1:d2:ef:c7:16:48:94:b0:02:91:19:8d:
                    98:e9:3b:20:8c:b4:c4:e2:8b:b5:77:b1:2b:47:f3:
                    8d:06:12:21:cc:55:a3:9c:8e:bd:b4:93:ba:4f:5c:
                    c7:31:ad:80:00:9c:d4:9e:a9:04:d6:3a:d3:7b:b4:
                    7b:73:6e:21:cd:9e:9f:04:fb:8c:6f:1f:58:6d:cf:
                    76:12:f1:ae:bc:44:0f:55:03:a7:e3:5e:ed:d8:ee:
                    56:30:af:3f:6a:4b:04:6d:21:80:25:02:1c:e5:87:
                    11:e6:59:83:c3:b7:f3:0a:cb:1e:0a:ea:2f:e1:1e:
                    aa:90:28:38:34:8f:8e:de:a9:56:ec:aa:bd:ec:23:
                    6e:a4:2f:8e:7d:d8:4f:8a:a8:c9:5b:2b:fb:93:fd:
                    4b:86:b2:78:56:04:99:3d:06:f7:8a:96:32:d6:1c:
                    05:b3:e2:fb:99:46:36:3f:15:52:8a:14:0c:8e:d4:
                    b7:cb:42:95:7a:b0:36:e1:87:52:2e:22:dc:a0:8f:
                    8c:e8:0e:9f:b3:84:6d:56:8b:61:f4:ec:89:31:80:
                    58:ed:87:d2:4d:05:20:78:d0:e4:5d:d0:f5:2d:45:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:1A:5D:42:9C:2D:DA:41:DE:76:7C:83:5E:C6:A0:CA:29:1C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b5c77ae-7ddc-3cdd-873e-e999e6a4dc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:8a:de:4b:57:dd:27:57:22:23:c0:84:d3:db:d8:c4:38:
         d0:e4:58:0f:63:9c:47:b0:f8:15:ec:80:85:d0:9d:c8:40:ef:
         91:a2:71:d8:39:be:0f:57:d4:1d:11:04:91:29:18:75:fb:84:
         f8:53:da:31:64:9c:e8:56:30:43:bc:8d:1f:4d:77:2c:34:3e:
         0f:6f:10:99:87:82:14:78:a8:fb:e7:33:87:08:ae:89:2e:86:
         1c:8e:ee:1f:7c:32:db:2f:ad:bb:80:a2:2e:fd:70:8d:58:f5:
         6d:3a:f5:d6:a5:59:ca:c5:75:85:94:b0:78:cb:d0:d6:af:1f:
         5a:f4:a6:12:71:33:2a:fa:0b:36:e9:21:46:30:6c:13:26:df:
         95:05:67:89:86:8c:7f:bd:de:ad:4d:73:f6:3c:cc:0b:48:15:
         f4:9e:3f:c2:91:de:cd:a4:17:5e:29:55:2e:3b:44:06:6b:d4:
         78:f2:46:45:eb:e1:e4:95:ce:63:b4:1f:d3:79:b7:6b:b9:cf:
         4d:26:63:f8:a4:e7:6c:9a:b5:ec:f2:a6:b6:bf:0d:54:30:6e:
         ee:79:75:52:90:f0:0c:92:73:90:80:03:ee:ef:b7:34:ba:63:
         de:2c:8d:34:ad:22:00:0f:d9:96:ae:b5:98:72:88:15:49:44:
         85:83:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:52:16 2025 by rpki-client