Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa
File:                     67448b30-8bea-3578-b96c-3a5ea4df1a10.roa (raw, json)
Hash identifier:          FbeSTvxVYsUUQt1CcWsfRGx/Dn7xHDnOP9o3iaQAeWg=
Subject key identifier:   33:EA:8B:A3:FA:12:3E:85:F9:52:2F:F2:77:D3:9D:8A:C7:65:9D:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784A4042AB9DF1F7F8C7D2E
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        50.82.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:a4:04:2a:b9:df:1f:7f:8c:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=8129643a-b381-4262-8639-5431d1e2d64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:97:2f:0b:2f:8c:e1:fa:95:6c:34:3f:ed:
                    ed:71:62:0f:b5:22:59:3a:03:b4:02:5e:0e:35:df:
                    6e:81:8a:9d:3c:b7:ff:1c:86:ec:6f:95:39:45:9c:
                    f7:07:96:1b:51:ed:fe:48:b6:a1:de:23:83:ab:9d:
                    28:57:47:84:4b:1c:18:f9:a8:bb:6a:80:b6:2a:3b:
                    e8:d7:7a:1e:86:6b:13:34:54:b9:4b:84:3b:a6:ce:
                    d3:d3:9a:09:eb:82:52:ee:fe:20:7a:a0:3f:34:58:
                    96:0e:4c:59:8a:00:01:07:70:eb:fb:8e:20:ae:13:
                    c8:52:e5:d1:0b:b7:28:37:d8:5b:b9:df:fd:8b:c5:
                    3e:e1:f5:ba:f2:e8:00:cc:c0:fb:eb:70:3f:d1:aa:
                    83:52:b0:f3:e9:7a:fe:fb:d6:b4:c5:2e:8e:99:a7:
                    67:f7:d0:bf:c3:08:3d:f0:cf:58:09:3d:bf:9c:57:
                    84:a2:7e:2a:e9:4a:a0:95:83:d5:36:26:ad:db:68:
                    5c:9d:65:61:d3:4d:cb:fe:57:b0:48:73:b3:f6:8d:
                    9c:a7:fb:ce:76:f6:56:2b:1f:dc:3d:c2:ae:5c:75:
                    99:67:3b:e4:b2:aa:30:3c:19:69:df:19:f9:82:3c:
                    db:af:c4:04:e5:ea:56:61:a3:01:0c:13:65:92:ce:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:8B:A3:FA:12:3E:85:F9:52:2F:F2:77:D3:9D:8A:C7:65:9D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:23:13:a8:1c:d3:33:b5:18:3e:1e:82:da:d4:e7:c1:ec:ef:
         e8:2f:41:56:b3:28:4c:e2:ed:69:9d:1e:c7:75:84:b2:cc:a4:
         b7:99:c8:5c:56:34:56:30:2b:51:26:a1:74:1a:5d:04:cf:0d:
         59:6c:c8:70:f0:67:7c:ae:d8:c6:e7:9c:40:18:eb:9d:b7:1e:
         4a:a5:ba:d7:54:68:0b:4a:43:05:3b:86:81:b3:3a:a0:18:46:
         71:e1:a5:8a:ca:03:c2:3c:46:72:76:3f:f1:f4:66:cb:68:0f:
         12:7f:c9:8d:47:ef:bb:33:f4:88:27:ee:64:9c:3d:36:c0:dc:
         aa:b4:0a:b2:a9:6d:5f:31:e7:4a:4f:c7:fb:0b:8e:56:90:2c:
         8b:ca:30:97:94:37:f5:fb:18:a1:1b:77:0f:91:9e:3c:d5:a3:
         52:5b:40:d2:58:26:d2:32:a5:e0:b5:9c:53:e9:a2:9e:de:00:
         32:1a:e4:5e:05:5f:e2:1c:2f:98:7b:c0:24:c2:68:12:e9:c3:
         7e:91:04:3f:67:46:47:d2:3b:d1:5e:73:7c:cb:5e:13:2b:7c:
         c8:5a:5f:d0:2a:d1:69:a9:9f:fa:f9:33:d6:21:9c:01:c5:65:
         92:79:49:72:22:9c:17:10:8a:25:6b:97:98:d0:76:ef:e4:7a:
         92:2e:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:38 2025 by rpki-client