Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bdda2ac-00b3-315a-97b6-2df43e40c831.roa
File:                     7bdda2ac-00b3-315a-97b6-2df43e40c831.roa (raw, json)
Hash identifier:          lV12bNrAy2pCZYU4xIm75KJH4SI8rSbR91jJcfe/Un0=
Subject key identifier:   5D:4D:C5:A4:86:41:A4:C1:35:40:AE:A0:E2:CE:AE:AC:C4:01:8A:29
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD46C1B92427A44D95D1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bdda2ac-00b3-315a-97b6-2df43e40c831.roa
Signing time:             Thu 24 Apr 2025 11:52:35 +0000
ROA not before:           Thu 24 Apr 2025 11:52:35 +0000
ROA not after:            Wed 23 Jul 2025 11:52:35 +0000
asID:                     19905
IP address blocks:        50.80.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:46:c1:b9:24:27:a4:4d:95:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:35 2025 GMT
            Not After : Jul 23 11:52:35 2025 GMT
        Subject: CN=4d5fc87b-cdc1-4e07-9baa-bb772b83e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:af:6c:4a:86:2d:d0:0b:e8:a2:80:45:bf:
                    44:ef:62:ec:ed:a4:13:fa:67:6c:67:35:c7:05:c8:
                    22:f9:ae:41:b9:49:1b:49:18:4e:b0:16:35:c4:a8:
                    f1:fb:2a:a8:67:2b:d1:67:5c:97:de:87:db:b8:33:
                    72:a0:6c:7a:4e:a8:20:70:b1:9c:d3:c2:f5:e7:e9:
                    cf:3e:cf:d5:f7:21:a0:af:24:02:b5:04:d4:60:11:
                    f2:bc:20:6f:59:c2:46:9d:b7:e9:e0:87:fc:6d:89:
                    14:3c:ed:4f:12:a0:6b:0d:47:01:ac:55:bb:22:63:
                    38:76:70:13:56:90:c9:16:c7:f6:90:21:61:7c:89:
                    d4:a4:97:8d:47:5f:d5:da:e4:0e:9c:bb:47:99:e0:
                    c4:22:e7:af:28:22:c2:48:74:29:45:f7:c0:92:5a:
                    26:8f:56:2a:f4:a5:34:ef:79:8f:18:3d:9d:d9:0c:
                    83:34:a5:89:c3:9c:e9:79:4b:3f:3c:61:42:d9:dd:
                    50:93:94:7f:9a:0c:14:7a:fc:d9:a4:3a:15:e3:48:
                    1b:d3:ab:9a:2d:b8:4f:04:1f:6f:20:1b:fe:2d:96:
                    4c:8b:86:e7:bd:41:e3:38:34:9f:d0:fd:10:08:93:
                    3a:55:e2:f5:48:dd:d9:8d:06:e0:6a:2a:61:72:70:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4D:C5:A4:86:41:A4:C1:35:40:AE:A0:E2:CE:AE:AC:C4:01:8A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bdda2ac-00b3-315a-97b6-2df43e40c831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:bc:8c:76:94:b9:91:0b:20:ae:ca:de:53:e2:73:2b:d9:
         3c:91:88:17:00:f2:91:e7:b4:78:9c:48:77:d1:0a:8f:b8:4f:
         19:16:30:80:db:24:91:7a:07:df:7d:a7:15:2f:8b:45:42:8b:
         52:c3:be:60:1c:fc:e7:f3:5e:b5:41:25:de:9a:91:c0:c7:70:
         84:15:8b:47:77:e6:f7:1d:b3:a3:0c:fd:b6:c2:93:6e:32:d3:
         16:90:38:34:26:04:d6:b1:a3:e9:fb:bd:b4:20:3f:05:0e:c4:
         b9:35:ad:ba:56:52:a0:16:10:12:b2:9b:dd:2f:2f:31:e2:8f:
         53:ac:11:a6:70:7a:26:3a:f2:14:9b:53:90:5e:65:0e:5e:df:
         92:9e:b9:89:9a:7c:b3:fa:ea:61:b2:78:60:da:87:a4:e7:24:
         80:41:cc:36:5a:49:4b:3c:b1:b0:e2:bb:5c:f1:5c:f2:49:39:
         9c:3f:39:4b:2a:d3:00:4b:be:a6:d9:34:bb:a0:7a:64:b7:a4:
         d0:23:35:1f:ee:00:02:6e:ad:f4:40:f9:48:5b:f8:7a:da:e8:
         56:33:be:f0:99:59:2e:1b:4b:4a:17:ef:29:6c:3a:a1:4b:cb:
         83:db:08:b6:1f:0a:61:de:99:df:8d:cc:d1:0c:03:b6:ae:eb:
         9a:ee:59:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzUbBuSQnpE2V0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNDExNTIzNVoXDTI1MDcyMzExNTIzNVowLzEtMCsGA1UEAxMk
NGQ1ZmM4N2ItY2RjMS00ZTA3LTliYWEtYmI3NzJiODNlM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixqvbEqGLdAL6KKARb9E72Ls7aQT+mdsZzXH
Bcgi+a5BuUkbSRhOsBY1xKjx+yqoZyvRZ1yX3ofbuDNyoGx6TqggcLGc08L15+nP
Ps/V9yGgryQCtQTUYBHyvCBvWcJGnbfp4If8bYkUPO1PEqBrDUcBrFW7ImM4dnAT
VpDJFsf2kCFhfInUpJeNR1/V2uQOnLtHmeDEIuevKCLCSHQpRffAklomj1Yq9KU0
73mPGD2d2QyDNKWJw5zpeUs/PGFC2d1Qk5R/mgwUevzZpDoV40gb06uaLbhPBB9v
IBv+LZZMi4bnvUHjODSf0P0QCJM6VeL1SN3ZjQbgaiphcnAOCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1NxaSGQaTBNUCuoOLOrqzEAYopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2JkZGEyYWMtMDBiMy0z
MTVhLTk3YjYtMmRmNDNlNDBjODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlCKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUNvIx2lLmRCyCuyt5T4nMr2TyRiBcA8pHntHicSHfRCo+4TxkWMIDb
JJF6B999pxUvi0VCi1LDvmAc/OfzXrVBJd6akcDHcIQVi0d35vcds6MM/bbCk24y
0xaQODQmBNaxo+n7vbQgPwUOxLk1rbpWUqAWEBKym90vLzHij1OsEaZweiY68hSb
U5BeZQ5e35KeuYmafLP66mGyeGDah6TnJIBBzDZaSUs8sbDiu1zxXPJJOZw/OUsq
0wBLvqbZNLugemS3pNAjNR/uAAJurfRA+Uhb+Hra6FYzvvCZWS4bS0oX7ylsOqFL
y4PbCLYfCmHemd+NzNEMA7au65ruWcY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:50 2025 by rpki-client