Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa
File:                     71c8e71a-7509-31ec-b569-855f4ff858e3.roa (raw, json)
Hash identifier:          l2FdQhHqQS0W4Opu9jD6vI2AXbp4iOuEViCcC6ew894=
Subject key identifier:   81:75:71:E2:6D:EA:0A:8D:E3:46:D4:31:85:8C:E7:2C:79:30:A6:33
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AB5DEA9FE46A147371C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        50.82.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ab:5d:ea:9f:e4:6a:14:73:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=435dc128-efba-4f06-b156-c5d5f9a6d192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:dd:32:dd:e7:be:6d:c2:76:98:ee:35:ec:
                    91:88:8b:3d:cf:b7:1f:b9:24:b1:7a:a0:be:05:6b:
                    14:6a:81:9f:8d:ff:71:0a:66:50:8e:17:b1:65:20:
                    54:37:7a:c5:69:78:8f:d2:73:d9:e0:d5:01:68:6a:
                    fb:0d:95:fa:93:b7:ec:21:9f:04:1b:68:7d:d6:06:
                    5d:2b:4b:79:ab:be:1d:34:c3:6b:e8:94:73:37:ac:
                    9d:66:42:a8:52:4e:42:8a:be:e2:48:88:47:1e:96:
                    79:09:7e:d0:2f:e7:54:8a:9d:d4:b6:fd:ea:74:18:
                    61:9c:95:e6:67:e9:0e:19:8d:c3:08:58:7b:ea:88:
                    fd:8d:8f:65:6a:7a:09:44:b7:f3:36:16:a2:1c:30:
                    61:9c:5c:43:17:f5:b3:d7:04:13:4b:b4:30:ab:3d:
                    fe:e7:12:11:c0:cc:bb:0e:6f:25:60:47:55:a4:ba:
                    a6:0c:44:82:cb:7f:47:33:63:25:ea:98:bb:df:70:
                    be:20:7c:86:fd:39:1c:2c:64:07:4b:7c:b0:28:7a:
                    09:23:20:6e:9e:76:5f:8a:5d:fa:f2:7a:39:c0:54:
                    d0:56:f8:94:3c:11:ec:2a:8c:1c:d2:25:76:40:d8:
                    41:96:72:a4:19:4a:a8:8c:cf:71:a3:6a:95:ca:59:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:71:E2:6D:EA:0A:8D:E3:46:D4:31:85:8C:E7:2C:79:30:A6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71c8e71a-7509-31ec-b569-855f4ff858e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:ea:f5:61:30:6e:75:f2:17:b8:80:da:63:24:e6:25:e6:
         7f:f2:e8:73:06:8c:39:f0:06:1a:d5:3a:1b:28:38:17:c5:b6:
         9d:25:12:1c:6a:dd:bb:b8:e2:bf:67:6a:fb:07:08:97:9b:e2:
         cb:bd:1f:a0:f1:fc:0f:44:8c:e1:4b:5d:a4:e7:fd:c1:b5:65:
         43:b4:7c:e0:24:30:2d:1d:2a:8c:20:4b:9e:98:e8:f3:bc:71:
         e7:96:23:be:3f:c9:92:10:97:7b:69:db:b9:fc:75:c0:7a:02:
         eb:c4:70:5f:71:22:aa:91:49:02:b7:3d:dd:ea:4f:c8:e8:24:
         52:9a:09:bb:d8:3a:55:45:22:a9:02:c0:da:e6:7d:2f:42:eb:
         f9:9e:75:70:d4:56:41:d6:da:d6:9d:bd:84:02:18:cc:83:df:
         e8:72:f5:12:e8:27:98:6f:8d:24:e3:08:ca:07:ea:0e:81:64:
         d9:ce:d4:90:a7:ef:8b:fd:26:fb:98:d8:af:47:ab:d8:c7:f6:
         51:fa:95:b6:cd:15:f1:db:d3:be:90:14:05:b5:f9:ff:69:84:
         d6:f9:f5:e0:1c:55:0b:52:af:bb:09:a7:fa:2c:94:d8:ee:62:
         c7:4e:df:a0:11:5b:c9:97:2a:47:54:18:64:c4:f9:00:cb:82:
         22:ee:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:27 2025 by rpki-client