Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc9788c-a70e-3b2f-b01a-9dbd8f47cf69.roa
File:                     6fc9788c-a70e-3b2f-b01a-9dbd8f47cf69.roa (raw, json)
Hash identifier:          ScpI1zJqdL8PIzKPjE8Jy+31Xyz0v12IXq8UoQKusJ0=
Subject key identifier:   FF:12:79:1D:46:11:43:63:57:DC:50:91:63:26:40:AA:1C:B1:50:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AA42B73382F046709B4F81880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc9788c-a70e-3b2f-b01a-9dbd8f47cf69.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        50.80.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:73:38:2f:04:67:09:b4:f8:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=df047a73-4e8e-4eb5-b8e6-6d5bea5c3050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:4f:44:53:07:f9:37:b9:f7:3b:6d:66:b7:
                    a5:ba:de:cc:e4:31:65:36:4d:1d:62:1b:7b:79:7a:
                    8f:4b:2e:59:63:cc:c4:2a:e9:be:88:cf:c0:d7:df:
                    c0:6c:19:f4:61:d6:0f:30:dc:1f:ff:65:6f:ba:9d:
                    97:9c:04:77:bf:99:c7:e5:7f:8b:a7:a5:b7:31:ce:
                    5d:09:6c:85:d5:05:0b:54:a3:40:c7:ca:05:37:79:
                    ef:5f:fc:d5:58:ae:3c:78:5f:d7:94:e3:cd:0a:76:
                    4f:6c:e6:c0:75:3e:61:e4:6a:5c:e3:72:e2:8c:98:
                    ad:99:df:23:38:fd:24:d4:32:7c:7d:9f:1d:76:b2:
                    4b:db:49:aa:59:dd:6f:ba:88:98:a6:d1:5f:fe:e4:
                    12:f6:0b:60:1a:e9:f7:6b:26:38:36:02:31:b5:1d:
                    c5:6a:1b:8a:18:0f:de:8f:24:49:14:5b:08:61:1e:
                    7d:f7:30:a9:59:3d:5a:47:3b:05:35:2b:cb:ae:d6:
                    af:af:cf:15:a5:8a:05:9a:b3:4d:4f:27:a4:1c:dc:
                    1a:9e:73:d8:02:17:d0:3c:1b:55:7f:67:90:a7:b0:
                    0c:56:59:14:b1:de:43:59:36:a6:75:79:58:e4:10:
                    6e:73:63:df:80:d5:b5:13:5c:22:66:69:86:c5:3b:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:12:79:1D:46:11:43:63:57:DC:50:91:63:26:40:AA:1C:B1:50:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc9788c-a70e-3b2f-b01a-9dbd8f47cf69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:65:c1:2f:f1:2d:9f:ad:72:b0:2b:e0:7c:2c:84:8c:02:
         f3:c5:fe:ae:b4:5b:84:29:40:22:9f:3d:9d:af:95:ea:8f:99:
         45:e1:16:93:a8:09:f9:cc:3e:e1:b3:8c:41:75:77:be:20:75:
         e7:44:72:c5:3a:41:f8:15:62:fb:3a:0d:c1:2a:c7:a4:54:26:
         96:60:0c:6f:47:fc:54:71:84:27:ae:f3:13:4d:98:8c:c7:14:
         9f:90:46:0b:0f:5e:a9:b3:a0:62:a5:8a:55:7c:67:c4:ec:99:
         17:07:83:c3:41:00:87:5e:f1:3b:c9:fc:c6:26:f0:de:3b:82:
         8b:61:64:ef:30:06:d0:95:f9:b3:5d:04:fc:b9:90:fd:df:bf:
         9f:51:33:56:39:15:4c:aa:14:06:e4:45:49:09:ee:d0:d6:22:
         71:7d:39:65:1a:8a:0e:df:c7:c0:c0:16:f5:65:1c:08:bb:2a:
         02:5a:f2:00:7c:59:38:5b:e6:be:71:d8:76:92:90:e8:67:64:
         df:e1:e9:12:75:12:dd:b7:ec:7e:d4:a7:2c:ec:e6:f3:cb:a9:
         19:f3:b1:c3:cc:51:f2:17:e5:c9:b4:5d:7d:21:f9:51:91:5c:
         3f:80:94:97:8a:19:70:0f:e3:57:3f:5f:b5:4f:83:da:18:c9:
         45:57:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:59:04 2025 by rpki-client