Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a8552aa-d72d-3be7-8370-337e8b029469.roa
File:                     7a8552aa-d72d-3be7-8370-337e8b029469.roa (raw, json)
Hash identifier:          LQ6k0bOytM3VLXAtrjr6Kg0jw5KIFZ0bBVGBt79GQH8=
Subject key identifier:   46:97:75:11:FC:0F:90:0B:3C:CB:74:B7:56:53:91:3B:B1:11:DE:D0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849E4EFAE69481D543120568000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a8552aa-d72d-3be7-8370-337e8b029469.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.82.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ae:69:48:1d:54:31:20:56:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=e32e73be-27cf-46ff-aef7-cd8f798db089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:72:e2:bf:4f:a3:0d:e9:16:37:9c:3e:aa:
                    d7:6c:2b:ac:db:34:c7:d2:08:b1:19:64:03:b8:3e:
                    7c:67:37:0e:36:c0:79:68:6c:9b:6b:ee:36:db:6c:
                    2e:2f:40:9c:57:dd:8b:b3:ce:99:07:f5:65:8b:81:
                    13:11:6c:3c:1e:f2:3f:2c:8c:06:46:f1:b1:89:b1:
                    ea:27:bd:63:a6:a7:23:dc:0f:26:42:a5:29:00:fa:
                    07:cc:c4:62:ce:40:06:0e:7c:34:0d:cf:ee:61:6a:
                    ab:05:43:a1:00:79:89:bd:3c:0f:0a:f6:76:f6:66:
                    d1:60:f2:37:4b:16:2c:bc:51:eb:f3:11:a5:92:26:
                    43:31:2f:4c:6c:8a:20:9f:e0:5f:94:3b:b3:69:d2:
                    b2:d9:d1:26:53:be:dd:83:bb:76:4e:30:ae:46:27:
                    8d:eb:64:3d:a9:ef:16:e3:25:cf:39:ab:c8:e4:d1:
                    d8:18:94:17:0e:8c:80:e0:c6:ac:24:55:88:43:88:
                    23:56:3d:9b:5c:73:af:8d:63:a1:06:15:f4:9f:4e:
                    23:e1:27:57:55:d6:57:bd:34:1e:ec:16:d8:f4:22:
                    14:89:4a:1d:86:1c:d2:4a:fd:c7:3e:cc:f1:c3:2d:
                    21:15:17:11:00:76:fe:dd:3e:d2:13:9b:00:6f:a7:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:75:11:FC:0F:90:0B:3C:CB:74:B7:56:53:91:3B:B1:11:DE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a8552aa-d72d-3be7-8370-337e8b029469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:95:c0:59:24:53:a5:22:ef:63:89:8c:66:01:d2:73:b0:e5:
         1d:23:d8:b7:b2:54:a5:a3:cd:d2:88:91:57:7f:49:3f:92:73:
         25:89:35:54:2c:16:a9:0a:90:2e:7e:32:02:b1:b9:27:4f:e2:
         3a:1b:d7:0d:3a:34:9d:4b:5b:d7:30:d5:91:fb:80:22:4a:63:
         a2:0d:b6:5f:45:49:f3:ba:c2:8c:9e:f6:86:db:0c:36:21:31:
         d4:c2:3f:8c:91:8c:e5:ba:67:50:42:03:31:0b:75:44:d2:c6:
         d9:22:ba:d6:57:12:c6:20:93:78:ba:82:fb:16:e0:64:8f:60:
         cb:3b:30:20:85:f2:86:62:48:51:41:c5:f7:17:e7:c5:fe:15:
         25:40:b4:af:82:f3:b9:25:b6:5d:38:ad:13:39:31:15:d4:3f:
         1d:0d:b7:03:17:a1:23:e7:08:2f:8e:6c:3a:8e:db:c7:c7:e8:
         ca:35:23:6c:32:cb:42:bd:00:da:e9:17:7c:f1:38:17:4c:41:
         4c:b3:17:31:c6:d8:40:3c:68:01:1b:cc:23:50:1d:00:61:c0:
         4f:2d:87:55:2b:09:e9:89:c1:48:db:a0:fb:fd:29:ec:a2:23:
         ee:66:db:09:0d:a7:23:1c:7c:ae:5d:d0:f0:43:c4:20:c4:4f:
         6f:b3:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:49 2025 by rpki-client