Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c32fb9c-b86c-3fcb-aee4-46b75d63d3b4.roa
File:                     7c32fb9c-b86c-3fcb-aee4-46b75d63d3b4.roa (raw, json)
Hash identifier:          s6SHUy5v+PiCIZjj2e0bQK2psyq3sXdfoE8fvdRb8ZE=
Subject key identifier:   64:C6:A3:4F:71:AF:6A:01:5E:C3:0C:3C:D0:FA:86:9F:EC:2D:50:D9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF546F481EC8000313A800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c32fb9c-b86c-3fcb-aee4-46b75d63d3b4.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:54:6f:48:1e:c8:00:03:13:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=4a02d838-1711-4a20-b543-6bee66c34b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:08:d5:b4:d2:33:19:62:33:3a:41:98:95:
                    9a:3e:69:ab:09:d9:03:76:78:b8:42:15:2d:18:6f:
                    64:f0:bb:1f:c9:0f:cc:71:df:11:48:6a:ad:a9:8c:
                    e8:a8:df:d6:dc:51:60:ad:71:f8:05:5c:5e:47:f6:
                    db:7e:ab:aa:a0:fb:12:58:de:f6:20:af:c9:87:39:
                    70:dc:c8:d2:ff:31:28:0c:ee:36:61:37:e1:d6:28:
                    f2:5d:44:06:48:49:be:d9:47:4d:6c:be:a8:f7:5e:
                    4e:9d:df:ab:cc:ab:d7:15:4a:25:ef:5e:b8:ef:4b:
                    1a:ec:3b:32:81:7c:b2:42:59:38:2f:e6:a2:57:f6:
                    d0:ec:8f:38:df:22:d9:45:75:6c:a4:3b:f8:78:79:
                    da:78:15:60:60:cc:b3:6c:31:5e:64:df:4d:43:7c:
                    14:9d:09:92:f5:f8:eb:e0:7f:83:1e:f6:6d:4b:ed:
                    ff:ed:22:47:73:74:fe:3e:a7:49:71:3d:9f:ee:1b:
                    c1:fc:60:40:21:82:f9:2d:2e:d7:94:53:67:42:a9:
                    d4:c7:1d:3d:f1:5e:80:95:98:52:bf:d3:aa:59:a8:
                    1f:b4:3e:3a:73:80:62:33:10:4e:66:53:59:e6:36:
                    21:7a:16:90:ab:ee:66:78:36:d0:cf:71:65:b6:b7:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:A3:4F:71:AF:6A:01:5E:C3:0C:3C:D0:FA:86:9F:EC:2D:50:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c32fb9c-b86c-3fcb-aee4-46b75d63d3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:da:3f:c9:f3:ac:ef:ad:f1:5a:26:8d:54:4a:a2:ca:0e:67:
         5b:f5:2e:d9:0f:f5:bb:4a:a5:15:8b:f7:e5:68:f8:04:67:f1:
         d1:ed:a1:48:05:f1:cf:9c:77:94:15:e0:6e:28:a6:c2:6f:3f:
         18:ab:df:0a:81:9b:22:04:d9:04:41:8f:ea:25:fd:2c:e8:a9:
         35:ee:6d:3f:f0:fe:a0:87:cc:d4:e8:ba:85:71:c6:44:b0:1d:
         aa:6b:aa:ac:dd:be:60:4e:7d:04:b1:dc:b1:db:05:0c:e5:01:
         ff:4a:fd:6b:10:49:c8:07:fd:ec:10:8d:fc:c6:29:39:b4:d9:
         18:f0:13:29:d1:70:0b:0d:48:e9:ff:3b:bb:c3:ec:32:97:a7:
         32:47:d7:bf:42:20:f0:87:b2:96:68:44:a0:4a:4f:8d:d3:2c:
         26:17:cb:96:59:b6:03:b9:d6:67:25:6b:1d:d4:db:88:46:0a:
         2d:b8:ac:45:68:65:a8:c9:28:ec:5b:4a:07:69:c5:1f:7b:59:
         a1:f1:20:1e:43:9a:99:6e:ea:57:f6:82:ba:36:87:b1:58:ef:
         1a:ba:e1:86:7d:46:42:10:c4:89:a4:f5:ff:3a:04:3b:c8:7b:
         bd:39:d4:16:77:b1:d7:90:f2:89:85:56:08:82:80:87:32:54:
         81:5a:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:47:44 2025 by rpki-client