Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/491f32aa-de29-37b0-9a18-ce73041aae22.roa
File:                     491f32aa-de29-37b0-9a18-ce73041aae22.roa (raw, json)
Hash identifier:          43griUKibBLF6ecOKZXM1HdmRo5n1aROXLByp/TfNO4=
Subject key identifier:   C3:E4:04:94:D2:83:0E:5E:8E:2E:68:C9:AF:B4:27:94:B1:97:68:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A9BCB69A1EB91C2107E630694
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/491f32aa-de29-37b0-9a18-ce73041aae22.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     30036
IP address blocks:        50.82.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:69:a1:eb:91:c2:10:7e:63:06:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=145b2b18-ee3c-44f8-829f-d36fdbef895a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:03:fb:5e:7d:30:0a:f9:d6:08:31:7a:1b:
                    96:a4:1c:3c:ed:10:47:ab:c5:87:8a:03:26:7b:75:
                    67:fb:ad:86:d6:c7:6f:93:19:61:d3:b8:57:43:51:
                    de:cd:88:fe:88:36:27:9b:7f:7e:4d:7e:7c:88:c2:
                    af:e9:f4:3f:94:53:7a:f3:d1:e0:16:8d:8c:87:a3:
                    72:df:d5:65:98:60:86:bd:84:ef:b6:a6:8c:48:10:
                    dc:4d:63:d1:02:47:48:58:cb:46:cd:a9:70:3c:90:
                    eb:84:14:27:f5:b8:2d:27:98:c5:e1:1a:cb:61:e4:
                    58:14:ec:f2:c6:fa:43:1d:2b:0e:c8:e7:4c:ad:9a:
                    25:88:18:7d:ed:78:94:b0:0f:3f:db:67:f2:b4:28:
                    06:4c:5f:66:74:2c:d8:00:50:6a:95:4d:34:5c:19:
                    d2:ba:ec:ba:33:8c:40:67:19:ef:92:4f:99:5e:f4:
                    53:d6:6a:d0:9e:b6:c1:87:f4:bb:cd:af:93:cd:e5:
                    16:8e:cc:e9:25:47:9e:e3:e3:f4:61:71:be:40:54:
                    d9:ad:10:68:28:b7:05:e9:88:e8:29:e8:b6:55:59:
                    dc:37:cf:f8:95:62:ef:63:7b:bd:e9:c5:68:30:30:
                    d1:b3:11:92:70:23:ce:35:4b:9b:96:4b:fb:ad:69:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E4:04:94:D2:83:0E:5E:8E:2E:68:C9:AF:B4:27:94:B1:97:68:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/491f32aa-de29-37b0-9a18-ce73041aae22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:23:ae:aa:4d:b9:de:c2:84:37:da:01:a6:09:16:fb:e4:
         83:23:6a:6c:35:18:b3:7e:91:53:8f:9d:b9:7e:8f:5b:54:f1:
         a3:db:e1:63:8b:f7:0f:6e:34:79:e5:e8:df:b1:fe:a5:8f:ab:
         35:e6:0b:14:cd:a8:57:90:43:26:c4:63:ee:8c:09:62:a8:b2:
         f6:37:fe:4f:10:d3:a7:d4:c9:27:cf:da:84:72:fa:64:37:44:
         25:71:6c:10:d6:eb:49:d1:8f:8c:da:80:43:32:13:b0:5f:95:
         12:a4:72:79:ee:4e:de:5a:a6:ca:ef:75:72:f5:06:e4:b9:6e:
         0a:34:2b:ec:c3:94:00:66:2a:2d:64:c8:e3:bf:2c:94:ab:28:
         1c:4b:0f:7c:28:d5:37:5c:9f:ee:d2:74:74:92:26:d4:71:b3:
         dc:a5:1e:2c:f5:dd:b5:b1:24:e6:d1:ea:29:3b:02:2b:ea:38:
         b9:a8:41:ed:7f:86:a0:95:01:f2:b6:78:f1:df:7e:4a:c6:11:
         e7:71:9d:ee:23:35:5d:bb:aa:0b:4c:ae:7a:ea:05:65:11:bd:
         e1:69:71:1f:a0:42:35:c3:5f:a2:5a:a3:d6:71:f8:68:0e:5a:
         46:15:49:43:f3:71:b7:dc:3a:28:24:56:9a:69:d4:c3:6a:1c:
         a5:88:4b:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby2mh65HCEH5jBpQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk
MTQ1YjJiMTgtZWUzYy00NGY4LTgyOWYtZDM2ZmRiZWY4OTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjMD+159MAr51ggxehuWpBw87RBHq8WHigMm
e3Vn+62G1sdvkxlh07hXQ1HezYj+iDYnm39+TX58iMKv6fQ/lFN689HgFo2Mh6Ny
39VlmGCGvYTvtqaMSBDcTWPRAkdIWMtGzalwPJDrhBQn9bgtJ5jF4RrLYeRYFOzy
xvpDHSsOyOdMrZoliBh97XiUsA8/22fytCgGTF9mdCzYAFBqlU00XBnSuuy6M4xA
Zxnvkk+ZXvRT1mrQnrbBh/S7za+TzeUWjszpJUee4+P0YXG+QFTZrRBoKLcF6Yjo
Kei2VVncN8/4lWLvY3u96cVoMDDRsxGScCPONUublkv7rWkHqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPkBJTSgw5eji5oya+0J5Sxl2hQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDkxZjMyYWEtZGUyOS0z
N2IwLTlhMTgtY2U3MzA0MWFhZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+8I66qTbnewoQ32gGmCRb75IMjamw1GLN+kVOPnbl+j1tU8aPb4WOL
9w9uNHnl6N+x/qWPqzXmCxTNqFeQQybEY+6MCWKosvY3/k8Q06fUySfP2oRy+mQ3
RCVxbBDW60nRj4zagEMyE7BflRKkcnnuTt5apsrvdXL1BuS5bgo0K+zDlABmKi1k
yOO/LJSrKBxLD3wo1Tdcn+7SdHSSJtRxs9ylHiz13bWxJObR6ik7AivqOLmoQe1/
hqCVAfK2ePHffkrGEedxne4jNV27qgtMrnrqBWURveFpcR+gQjXDX6Jao9Zx+GgO
WkYVSUPzcbfcOigkVppp1MNqHKWIS80=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:54 2025 by rpki-client