Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/822b1a43-db2b-303b-a238-58110e91a1b9.roa
File:                     822b1a43-db2b-303b-a238-58110e91a1b9.roa (raw, json)
Hash identifier:          ubnTuXnnOuiovxvb67b1nj3Fn5v0ysEJed5azEo5k4I=
Subject key identifier:   D5:A1:F7:20:70:4B:20:E1:90:18:A9:77:86:C5:6F:CD:1F:D5:47:25
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D63D71AEF1F36442E080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/822b1a43-db2b-303b-a238-58110e91a1b9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d6:3d:71:ae:f1:f3:64:42:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=73683018-f226-4b49-acf1-81c4db1a3dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:4f:f0:fa:34:1f:6a:31:f7:ad:e9:0e:74:
                    97:e4:67:ef:77:a3:80:98:e3:14:a3:73:2c:a0:34:
                    7d:c0:bf:c3:7d:cb:ed:43:0b:9a:c3:76:d5:59:0f:
                    e5:46:c7:db:7f:4f:3d:ae:6b:ef:f0:51:68:8e:66:
                    5a:24:ed:17:bb:d6:dd:5f:70:05:99:46:d9:0f:e4:
                    d5:d2:d9:cc:6e:1c:af:50:74:60:f6:ba:6b:87:bc:
                    e1:73:35:60:3a:71:09:1b:ed:c0:3e:4a:6c:ba:eb:
                    97:d0:60:12:30:84:3b:3b:6a:85:82:d5:ed:54:e8:
                    0c:be:e1:24:13:c5:86:cc:95:1b:7c:d7:31:5e:cf:
                    51:79:4c:6a:1c:a8:2f:a5:e5:d4:bc:f1:f9:02:0f:
                    34:07:ed:de:be:d5:a4:24:6e:a3:2e:9d:c5:ed:dc:
                    a5:d6:55:2e:fb:64:2e:a2:da:f9:4b:da:bd:94:88:
                    5d:61:2b:03:0e:5e:0c:18:7e:82:17:40:37:d7:e1:
                    f2:3f:04:4a:c1:a0:d8:b1:c1:01:1c:f9:12:0e:b1:
                    b3:33:44:f3:a8:5f:e7:f0:a2:c8:67:b3:45:89:bb:
                    e5:10:a5:6d:88:c0:5e:11:a0:d9:11:37:7c:98:36:
                    14:06:d4:6e:ab:92:ef:4e:2d:10:98:98:1b:61:87:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:F7:20:70:4B:20:E1:90:18:A9:77:86:C5:6F:CD:1F:D5:47:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/822b1a43-db2b-303b-a238-58110e91a1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:cb:b1:cb:8b:5d:72:b6:d7:34:60:34:e4:db:3b:f1:7b:
         71:39:08:3a:20:cc:58:0e:23:9c:7e:e1:0e:89:3f:92:e5:94:
         c3:dc:66:f7:82:15:42:d2:d5:ba:5a:06:b5:9b:5a:3b:38:8c:
         42:11:8b:3a:27:06:8a:39:9e:97:35:89:d5:d0:95:01:a1:d0:
         e9:65:56:09:45:cb:de:2f:7a:26:64:e2:0c:c3:56:46:b0:e1:
         7b:9e:bc:a3:26:8c:0e:44:35:10:4c:6b:9e:76:48:a9:0c:64:
         e9:87:76:06:41:f7:8e:cf:d9:7b:b2:c0:64:43:82:35:e8:ca:
         36:74:dd:63:79:a2:26:3f:4c:7a:b1:df:09:47:3c:7c:5d:95:
         76:23:63:23:bb:2a:e7:88:9e:40:e8:e8:5c:23:f0:08:ed:65:
         bd:4a:20:cd:27:14:8d:84:41:14:92:43:2c:46:9b:3c:40:16:
         4d:49:72:b1:b7:bc:78:07:64:98:e8:0a:a6:6e:db:1b:32:20:
         70:0c:a8:d6:47:0f:c2:95:73:45:ac:f2:c2:a4:ef:6a:c4:34:
         01:d2:67:23:65:47:6d:51:1a:08:c7:bb:5c:a4:fe:8b:35:7e:
         3a:ef:f9:5f:24:1b:60:d4:94:0f:f7:d3:e7:79:c3:87:d6:ea:
         f7:39:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:38 2025 by rpki-client