Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59e36616-b8cb-3a2a-8437-1b0c30ebae40.roa
File:                     59e36616-b8cb-3a2a-8437-1b0c30ebae40.roa (raw, json)
Hash identifier:          Ng1zrlzTaYizAe2sGdyPlb1IMjCP7GA0bqLZco4NczA=
Subject key identifier:   D4:0E:C4:09:85:4D:72:55:30:80:AC:41:C1:9E:70:4F:84:99:8F:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F300E10D74F392B1CC640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59e36616-b8cb-3a2a-8437-1b0c30ebae40.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        50.81.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:30:0e:10:d7:4f:39:2b:1c:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=78a9b7ae-2b06-402b-8ee4-bd1573a1e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:70:71:51:34:39:2d:49:09:fb:76:8e:4a:
                    54:15:bb:b7:6c:3b:49:2f:22:ca:e1:9a:2c:fa:ab:
                    64:bc:63:e1:5d:5e:ff:16:d9:29:06:44:56:00:13:
                    58:12:96:ef:d1:2d:49:b7:74:a8:fc:56:5f:fd:b9:
                    5e:4c:59:5d:7d:85:5a:de:d5:7c:c7:6d:97:f6:33:
                    38:b8:8c:cc:5d:1a:22:cb:37:30:03:75:45:a9:3c:
                    e0:6d:eb:43:3b:74:13:ba:0d:a6:20:3a:1e:db:f9:
                    34:fb:21:70:31:81:e7:1a:1c:b6:25:f1:5a:9a:ff:
                    6e:b6:83:7b:d2:66:76:fa:fa:5a:f8:8c:2c:9f:d5:
                    ea:4d:12:e0:10:9c:40:b8:9d:5a:b1:43:32:ea:89:
                    3b:b0:19:22:ad:16:bd:d1:4c:83:b5:bc:b4:ba:24:
                    e2:90:08:48:f7:d0:85:b2:6a:d3:51:87:dc:ca:55:
                    72:3f:d2:7c:bc:c1:41:45:37:7e:3c:d3:89:e6:b0:
                    9c:58:a4:2e:37:1b:eb:41:38:8b:35:e3:51:7d:62:
                    3f:b5:8e:8c:28:b2:55:34:2a:0a:8d:5d:9f:73:51:
                    86:37:9d:c0:1f:c4:e7:f3:6c:06:b4:25:d3:01:d2:
                    24:c9:08:e0:e5:a2:ba:49:0b:c1:a9:47:30:b1:4a:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:C4:09:85:4D:72:55:30:80:AC:41:C1:9E:70:4F:84:99:8F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59e36616-b8cb-3a2a-8437-1b0c30ebae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:e4:54:2a:56:b8:70:fc:9c:37:fa:72:7b:c3:90:a9:fe:
         87:8c:73:82:84:38:3e:f3:a0:d6:2e:55:30:86:dd:94:da:cf:
         5d:23:64:ec:24:5e:8f:70:47:b5:9f:ab:02:9a:7b:08:63:86:
         a4:52:eb:c4:07:d5:3f:71:86:32:a6:e7:98:95:42:39:5d:66:
         f5:71:78:80:6a:4f:28:56:58:e0:7a:b5:df:64:99:ad:b6:74:
         2b:0d:f8:d7:82:d5:84:45:1e:55:8f:0a:56:aa:d1:57:17:f9:
         48:33:30:63:90:dd:34:eb:1c:4d:0a:7b:6f:84:c8:32:10:a0:
         b0:a9:8c:f6:68:45:ad:77:84:d0:69:da:4f:fe:18:67:f4:a5:
         0e:4b:51:ed:43:c4:c9:d3:66:65:49:b0:33:ed:c4:0c:e8:13:
         fe:fd:f3:d0:8c:fb:11:d6:dc:30:6e:3d:81:06:b9:ae:72:c2:
         89:a6:27:07:9c:db:51:73:96:94:62:f2:d1:e0:a3:a8:d7:3e:
         08:7b:c9:96:c8:97:cf:21:52:93:99:69:a5:54:e6:da:b1:7c:
         cc:5f:0b:ec:1c:2f:dd:5f:96:ae:67:47:13:bb:cb:69:3f:0f:
         01:00:f9:76:39:02:65:83:2c:40:a0:81:1f:cd:5c:93:47:23:
         9f:8d:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:10:37 2025 by rpki-client