Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa
File:                     3caef40c-94db-3a01-a8d1-796edb9e264d.roa (raw, json)
Hash identifier:          aI2ag3YASV54qVIgzXLHoovQ4gPobE/2lZvzZwioq+Q=
Subject key identifier:   D0:7A:86:43:F7:D7:CF:41:98:26:1D:6A:46:03:2E:49:7F:9B:75:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410DF71FD65395FCB64DE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.80.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:df:71:fd:65:39:5f:cb:64:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3ea6321a-5e03-4225-91c9-bd7ffbbc210a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:61:92:11:57:a0:02:12:0a:b8:a4:ea:29:
                    6f:cd:2e:35:8f:54:e1:ea:81:76:a4:80:fc:e8:8f:
                    98:5e:17:4e:d6:f9:cf:21:ef:b9:27:27:bc:10:eb:
                    68:eb:ef:ba:18:aa:6f:22:db:7f:72:db:dd:dd:97:
                    81:9c:e5:36:36:a2:5c:73:c6:b9:fe:bb:36:c2:33:
                    ff:7c:64:b4:b0:36:b0:a8:2c:ef:f9:1c:6a:1d:9b:
                    25:0e:f9:d3:f9:fd:40:46:9e:b7:ff:b3:2e:20:51:
                    5e:41:ca:c1:6f:4d:8c:f7:f6:6a:5c:6d:6a:67:46:
                    53:36:33:51:b1:3d:74:cd:d7:0f:76:28:a3:13:d8:
                    4e:73:70:e5:09:8a:17:32:e7:68:bf:a0:5b:1e:58:
                    50:22:eb:f4:d2:e2:b4:ab:bd:52:b5:87:05:47:79:
                    81:77:ee:c8:c4:45:ab:98:0e:34:fa:51:6c:f1:6a:
                    42:b3:15:27:c7:8a:44:63:3f:e0:36:96:7b:6c:00:
                    b2:42:d5:97:25:10:f2:09:86:48:00:fc:49:80:ef:
                    2b:d6:86:78:fc:11:8a:1d:9a:3a:12:63:0c:5a:09:
                    e2:47:15:88:1f:2d:73:46:38:6b:fd:9a:51:56:d5:
                    ac:64:6e:4e:c0:3e:cb:c7:c4:43:82:34:67:fb:92:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:86:43:F7:D7:CF:41:98:26:1D:6A:46:03:2E:49:7F:9B:75:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:94:00:f5:02:84:b5:2d:c2:68:7e:0e:51:3b:9d:35:34:
         4e:9b:ed:ba:9b:4e:56:8a:49:d8:67:d5:99:a5:12:ab:2a:84:
         42:52:a9:8b:2a:f7:25:e2:bc:35:d5:e1:49:e8:e3:a5:1d:82:
         f2:b1:14:96:0c:34:80:aa:b9:74:fe:9f:2b:c1:8f:65:5e:4c:
         c9:ee:f0:9f:98:17:07:a7:40:8b:19:34:c6:a2:09:5a:db:19:
         06:ae:f1:cd:85:7f:bc:01:43:40:c5:17:84:ad:ff:07:ae:f6:
         ca:b8:af:09:56:30:17:da:41:d9:1a:2d:e5:e3:2c:b8:19:eb:
         f7:b2:e7:ac:5d:5d:b5:ad:41:4b:f7:ba:28:62:74:3a:cd:42:
         bf:79:87:e1:59:f7:34:a6:3c:9e:b8:d1:de:37:dd:65:ed:f0:
         31:3e:00:63:b5:d7:e2:90:56:d6:ee:46:00:00:83:82:2a:a6:
         dc:e0:61:8f:2b:72:57:d2:62:e6:6c:55:bd:d1:35:c9:72:e2:
         0e:38:15:f2:00:dd:02:32:ec:5d:86:0e:73:4c:f8:c1:1e:16:
         9d:34:b5:44:a7:51:ae:78:00:1c:bf:30:17:c0:14:65:7a:fd:
         c8:4b:0a:a4:f9:f8:85:57:0b:9c:a6:50:91:7b:b1:47:8c:ad:
         64:8f:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:54:31 2025 by rpki-client