Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82852a8d-502a-3cc5-9957-b4d80f5f9017.roa
File:                     82852a8d-502a-3cc5-9957-b4d80f5f9017.roa (raw, json)
Hash identifier:          4JVoaQVCigJ1NRjnfnqMuyzEIebZBoCez2Cv8zdfk1Q=
Subject key identifier:   13:77:66:4C:F4:50:0A:5F:E7:72:85:83:56:71:0B:E8:93:64:96:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA412901EC583A1F7D6140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82852a8d-502a-3cc5-9957-b4d80f5f9017.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:41:29:01:ec:58:3a:1f:7d:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c22652d1-5dd9-4df7-9d90-7fc9d826e3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:49:cf:a8:7d:12:68:33:f8:60:9a:8f:fa:
                    ea:68:40:a7:67:1f:18:bb:bc:ab:75:c8:1a:17:0e:
                    ed:d5:00:1c:5e:a0:47:9d:66:21:1d:52:de:df:be:
                    6e:7d:c4:de:2f:46:95:a9:3f:3a:f5:a3:a5:3e:87:
                    90:b8:37:12:d1:fc:8a:af:a5:8e:04:0b:8d:04:c7:
                    57:93:dd:2d:d6:2c:63:03:33:61:38:d4:2b:c1:20:
                    9d:2b:4b:bf:af:d0:21:38:a6:f8:6a:6d:b5:1d:24:
                    d1:d4:62:4c:d9:76:58:8f:52:4a:d6:f3:e4:fd:34:
                    b4:f1:7d:eb:b8:ac:69:05:8f:36:05:60:2b:4f:89:
                    71:46:8c:3d:08:6b:cd:3b:04:c4:76:16:24:09:6e:
                    dc:78:95:17:6c:b3:e0:94:ec:5a:5f:d0:11:75:37:
                    20:7e:35:22:1d:dc:83:ee:7f:ff:c1:1e:94:a0:42:
                    73:a2:1b:b4:3c:e6:1a:21:9f:3e:86:71:e0:dc:53:
                    b9:be:d5:a5:54:88:a6:5c:85:f7:22:f2:0a:be:7a:
                    e9:05:d0:8e:3f:58:c7:08:12:71:fd:d6:c1:c8:d9:
                    d4:e4:bc:5b:15:22:a2:e0:9f:1b:07:9b:1e:a8:3e:
                    a8:2e:2e:d2:b4:de:9d:1b:ee:39:45:a2:78:d8:6f:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:66:4C:F4:50:0A:5F:E7:72:85:83:56:71:0B:E8:93:64:96:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82852a8d-502a-3cc5-9957-b4d80f5f9017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:17:44:70:b8:ab:11:19:a1:fb:6e:b7:4d:58:73:4c:1b:b8:
         bf:c6:9c:ef:a4:ec:f6:0d:b1:a3:12:f2:9d:df:71:89:3f:c6:
         62:9c:8e:ad:af:2a:a2:c4:b6:9b:a9:62:da:90:09:e9:bd:7e:
         58:25:ac:04:41:26:84:28:fa:51:8c:01:1f:a8:e2:8d:20:24:
         a5:5b:26:d6:a7:5c:e2:ea:06:ac:a3:7d:6c:a5:ef:a7:10:ad:
         a8:24:a4:b5:ee:a4:4a:65:56:ba:98:f1:a2:88:e6:97:c7:89:
         d9:79:d7:45:70:d8:67:9d:f6:70:19:13:5b:dc:df:47:d0:ad:
         e7:01:90:e9:01:37:1e:85:82:b0:05:cb:a2:21:ce:cc:2f:57:
         57:7e:81:25:d7:a5:96:7a:7a:fd:1d:4a:91:1d:e9:be:92:e6:
         b0:4a:09:e8:9d:60:5b:4a:5b:de:0c:d3:e8:d9:3c:bc:be:5a:
         9d:e1:77:66:8a:4f:f1:42:6a:da:7c:aa:fb:04:01:14:3f:ee:
         b4:96:eb:90:b4:42:81:9a:17:78:18:92:ce:6d:7e:69:e4:ec:
         88:c0:60:7a:60:5f:92:74:e5:a2:89:d4:23:53:21:2f:07:c7:
         60:8f:f9:4c:e0:ab:15:db:17:0c:ea:45:43:d0:bc:c8:35:67:
         45:ec:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:30:13 2025 by rpki-client