Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/488c177a-0c4e-37ea-a67d-d8e9d11318e6.roa
File:                     488c177a-0c4e-37ea-a67d-d8e9d11318e6.roa (raw, json)
Hash identifier:          g5hZk0qODWSL+EoKoHeqwr0nNLU1j5FiyKJvme+Tcwk=
Subject key identifier:   CB:F6:AC:51:09:86:9B:15:06:E9:D6:38:A1:F2:3A:42:6B:C8:65:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AB4A664AC9CC20AF8740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/488c177a-0c4e-37ea-a67d-d8e9d11318e6.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        50.81.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ab:4a:66:4a:c9:cc:20:af:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=c24c3976-7fd0-4dba-bea8-a1a00bd29539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:2d:33:ff:45:18:ee:b7:b0:1d:e7:64:5f:
                    ef:2a:dd:d1:8d:b2:af:6e:6f:aa:8e:15:2c:6a:66:
                    7b:55:a8:a3:04:f8:ee:df:0b:fc:38:3d:14:58:13:
                    f4:20:12:aa:f9:03:31:43:c5:9f:87:03:38:fd:61:
                    82:49:76:1b:96:0b:a0:d4:ca:11:86:9f:6a:b6:77:
                    d0:9f:fc:f0:65:f8:3b:55:dd:ec:0a:6c:f0:27:31:
                    54:88:a9:75:e5:53:0b:e3:9f:0f:24:da:20:bd:96:
                    81:e0:b3:1c:ff:8e:58:d8:d9:81:be:3f:a3:d0:ab:
                    2a:79:97:cf:36:36:2b:39:1d:d9:78:73:b1:36:c6:
                    6b:a8:44:54:69:48:bf:81:e6:28:0e:49:7c:12:18:
                    0b:43:34:61:ce:ee:37:ca:a2:de:b4:c5:eb:ba:28:
                    86:8b:0b:3b:3f:46:4b:f1:9a:1d:2e:fc:a9:f3:be:
                    d3:59:01:08:a9:50:3e:05:52:fb:98:c0:1e:af:a1:
                    29:49:7b:36:4a:ca:bd:19:b4:40:73:0e:ae:be:c6:
                    2b:86:90:91:c5:03:7a:d2:32:1d:e8:8a:f7:4d:15:
                    53:ba:29:7c:25:ac:f6:3c:42:1f:7d:7c:9c:20:98:
                    36:80:ba:9c:a6:e9:40:e0:b8:72:4a:75:2e:90:61:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F6:AC:51:09:86:9B:15:06:E9:D6:38:A1:F2:3A:42:6B:C8:65:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/488c177a-0c4e-37ea-a67d-d8e9d11318e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:18:d2:ac:46:e8:cf:d5:89:ed:00:32:2a:29:20:fb:f1:
         c5:a3:82:6f:e1:ed:bb:c8:12:86:1b:a2:17:f5:f5:c4:50:74:
         20:bf:e9:04:bc:0f:56:32:51:84:e9:61:e2:d3:6b:42:c1:8a:
         e1:dc:7f:c4:7b:1f:33:ef:44:66:75:f6:49:79:ca:cd:da:3a:
         74:5c:62:0f:70:48:5e:a6:d6:a5:8d:d7:db:05:10:2d:29:28:
         76:07:63:39:97:68:b6:19:dc:ff:3c:33:8c:07:5e:f1:0d:ee:
         07:45:56:63:d3:1e:15:56:60:23:06:95:05:2a:39:73:6a:04:
         7c:2d:dc:4a:dd:0e:91:d5:17:22:fa:04:cd:37:77:d7:e8:44:
         7f:17:55:ea:87:c2:4b:7d:ef:56:a0:d5:4c:5a:a7:98:df:3f:
         1b:9c:6a:3b:0d:d1:4a:a1:6a:d2:87:b7:50:c6:6e:ab:a9:d1:
         72:a1:27:41:21:ee:07:d3:b6:f0:dc:5f:33:61:fd:e7:19:aa:
         d7:e6:13:4c:0c:7d:7e:d5:ac:3d:db:58:9d:69:1e:a4:54:2a:
         15:09:69:19:39:b9:43:2a:df:59:33:31:a1:9f:c0:a7:a0:78:
         ab:1a:4d:0d:fd:82:79:02:f7:6e:b6:89:63:c3:3d:96:16:33:
         d6:4b:c4:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sKtKZkrJzCCvh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
YzI0YzM5NzYtN2ZkMC00ZGJhLWJlYTgtYTFhMDBiZDI5NTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrItM/9FGO63sB3nZF/vKt3RjbKvbm+qjhUs
amZ7VaijBPju3wv8OD0UWBP0IBKq+QMxQ8WfhwM4/WGCSXYblgug1MoRhp9qtnfQ
n/zwZfg7Vd3sCmzwJzFUiKl15VML458PJNogvZaB4LMc/45Y2NmBvj+j0KsqeZfP
NjYrOR3ZeHOxNsZrqERUaUi/geYoDkl8EhgLQzRhzu43yqLetMXruiiGiws7P0ZL
8ZodLvyp877TWQEIqVA+BVL7mMAer6EpSXs2Ssq9GbRAcw6uvsYrhpCRxQN60jId
6Ir3TRVTuil8Jaz2PEIffXycIJg2gLqcpulA4LhySnUukGHkAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMv2rFEJhpsVBunWOKHyOkJryGW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDg4YzE3N2EtMGM0ZS0z
N2VhLWE2N2QtZDhlOWQxMTMxOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCjGNKsRujP1YntADIqKSD78cWjgm/h7bvIEoYbohf19cRQdCC/6QS8
D1YyUYTpYeLTa0LBiuHcf8R7HzPvRGZ19kl5ys3aOnRcYg9wSF6m1qWN19sFEC0p
KHYHYzmXaLYZ3P88M4wHXvEN7gdFVmPTHhVWYCMGlQUqOXNqBHwt3ErdDpHVFyL6
BM03d9foRH8XVeqHwkt971ag1Uxap5jfPxucajsN0UqhatKHt1DGbqup0XKhJ0Eh
7gfTtvDcXzNh/ecZqtfmE0wMfX7VrD3bWJ1pHqRUKhUJaRk5uUMq31kzMaGfwKeg
eKsaTQ39gnkC9262iWPDPZYWM9ZLxBQ=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:59 2025 by rpki-client