Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa
File:                     71c8e71a-7509-31ec-b569-855f4ff858e3.roa (raw, json)
Hash identifier:          drk899pKcJmb+UAM2vB1JtgaKgpJdnYU2SHw5QkibNc=
Subject key identifier:   4D:43:97:1C:DA:43:F8:D8:BC:26:DB:09:31:0D:8E:92:BC:C1:7B:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF49E173292341A6F3AA300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa
Signing time:             Tue 22 Apr 2025 09:37:00 +0000
ROA not before:           Tue 22 Apr 2025 09:37:00 +0000
ROA not after:            Mon 21 Jul 2025 09:37:00 +0000
asID:                     19905
IP address blocks:        50.82.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f4:9e:17:32:92:34:1a:6f:3a:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:37:00 2025 GMT
            Not After : Jul 21 09:37:00 2025 GMT
        Subject: CN=f463b331-4438-4d97-b747-20a07f677f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:89:f8:2d:b4:d8:13:d3:f4:5a:cb:9a:dc:
                    f8:ca:9d:af:dc:f2:5f:81:92:0b:0f:af:67:5e:04:
                    8b:d3:c9:91:b0:79:f0:1d:66:2a:c3:8c:b8:7f:c1:
                    79:2f:04:d9:da:05:d0:e6:fd:a2:e8:18:13:d3:1b:
                    dc:13:35:82:e2:aa:21:b5:68:2f:9a:b3:9b:9e:b9:
                    56:20:4c:80:64:9a:4e:2d:aa:21:5e:ff:e5:0f:15:
                    09:2a:a2:7b:72:99:86:d2:2e:9c:98:3e:62:78:01:
                    a7:ea:33:42:c7:25:d2:4f:27:a9:bb:87:a7:d2:2e:
                    80:dd:f8:06:48:fd:89:d8:24:77:2d:a4:e0:20:67:
                    af:e7:79:46:0a:41:56:75:55:1e:a7:5c:0d:2f:f9:
                    fa:51:c4:e8:b2:20:2d:03:cd:eb:7c:2f:2b:0f:69:
                    2e:c0:8a:ed:06:84:10:35:77:b7:cc:0c:9f:bf:c6:
                    8e:fa:2a:a6:70:c5:3e:e5:1a:56:71:0d:03:a8:59:
                    47:18:9b:ab:78:df:cf:39:95:e7:7e:97:f4:dd:59:
                    a1:22:e9:ab:22:c5:95:dc:d1:ec:42:76:9f:d9:9c:
                    77:db:a6:6f:d9:9b:5e:1c:3a:f4:d8:fa:e5:74:b2:
                    9a:ea:93:bf:84:cf:80:d3:1a:02:7e:ac:b3:a4:88:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:43:97:1C:DA:43:F8:D8:BC:26:DB:09:31:0D:8E:92:BC:C1:7B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:7e:ed:da:37:45:42:fb:83:c1:7d:ce:23:6a:31:75:52:
         18:ab:37:c6:b6:16:07:06:d7:2b:c4:20:5c:3d:8f:b9:2d:2d:
         91:11:2e:7c:b7:8b:2f:d9:f7:07:bf:29:f4:87:64:14:8e:92:
         35:36:b3:5c:ff:47:a6:80:ab:58:08:cb:2a:86:6b:7d:21:c5:
         00:1a:ad:bb:c4:8e:76:f8:b8:5a:f6:4b:57:9f:6f:8f:84:5b:
         d0:c9:1c:87:4d:e1:5b:3e:62:d2:7f:6d:67:23:0c:bb:1f:a4:
         c4:3d:43:c9:46:65:44:ae:17:82:d1:a0:3d:3e:20:f9:5d:24:
         ef:77:28:c9:aa:68:d7:2f:7f:17:df:cc:d8:ca:54:d8:a5:03:
         23:7a:52:fd:61:ec:eb:d1:25:9d:ab:52:c7:bc:bf:53:66:1a:
         58:14:50:88:f3:44:37:15:c0:01:c3:77:c5:7e:43:d6:45:38:
         28:27:31:c8:20:17:8a:84:f2:10:54:f5:25:a6:f7:64:4a:b2:
         40:f7:77:80:64:ee:1a:af:af:8e:31:2e:eb:ef:c8:69:a6:ac:
         a3:ee:06:8e:25:a6:4f:36:10:49:79:bf:12:6c:15:b6:ac:30:
         19:9a:44:b1:9e:bf:e9:98:78:52:bd:7e:d4:05:83:5e:2a:31:
         8e:e1:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:09 2025 by rpki-client