Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c7ce4b-0efc-3b46-8162-ac013d02ad36.roa
File:                     85c7ce4b-0efc-3b46-8162-ac013d02ad36.roa (raw, json)
Hash identifier:          w36pMkNBzybCHuJ9rS8KX34RS9DQcTUK6qvfkgx+2B8=
Subject key identifier:   16:CF:68:5E:F8:2E:DB:3C:F9:38:5C:1F:A7:ED:0D:60:BD:DB:65:70
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124C59EDCDE0DAA73A5400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c7ce4b-0efc-3b46-8162-ac013d02ad36.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4c:59:ed:cd:e0:da:a7:3a:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=086c8902-8529-4797-be56-65fe613d9049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:c3:a1:f6:b4:0e:a8:ba:a1:ad:f5:78:00:
                    ff:b7:30:a9:ba:38:cf:cb:ec:bc:98:ff:4d:95:5a:
                    b4:a6:ac:f4:fc:49:06:b6:0d:4a:ec:e5:43:95:b2:
                    7e:3a:5a:16:7c:de:b3:76:c5:fe:3a:a8:19:e8:43:
                    fc:0c:ad:f4:0e:64:73:ba:bc:b1:e2:ab:16:f1:14:
                    91:eb:bd:2f:8e:f7:30:46:8f:27:4e:c1:1f:36:c2:
                    c5:78:70:30:01:0d:a9:7f:3d:fc:e7:9d:1f:91:29:
                    ce:57:3f:c2:93:c6:5e:3a:22:3e:c0:79:45:6b:a6:
                    65:3d:2d:27:cd:52:7d:84:d8:c9:5d:c1:21:33:65:
                    96:38:55:14:dd:9c:8d:18:f9:43:85:b2:c9:bd:08:
                    3b:63:e4:9d:90:d9:02:f1:de:2c:26:a4:53:eb:9b:
                    a8:0e:bf:1c:8c:6b:f0:a5:4d:0f:7d:ba:00:c4:ff:
                    f8:52:31:24:10:54:fb:8b:ce:8d:e2:26:34:c1:63:
                    e6:13:59:cc:ca:7d:65:a7:9b:21:cd:66:df:03:59:
                    c7:db:a7:47:c1:91:cb:e2:da:5a:d7:f1:ae:69:40:
                    fb:07:27:be:17:95:04:e1:f1:be:4b:4a:27:39:97:
                    8a:6c:a8:ef:6e:dd:90:fc:ec:94:e2:66:be:f6:eb:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:68:5E:F8:2E:DB:3C:F9:38:5C:1F:A7:ED:0D:60:BD:DB:65:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c7ce4b-0efc-3b46-8162-ac013d02ad36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:af:23:97:94:ac:be:04:9c:0d:44:60:57:02:1f:e6:e9:33:
         b5:72:62:de:02:02:e3:fc:5c:e6:64:2f:db:18:1d:c2:fc:74:
         60:e5:1e:dc:de:e0:55:67:bd:bb:bb:5f:dd:81:9b:b8:25:eb:
         04:f9:60:1b:7c:02:be:ca:b9:a4:b9:1e:57:07:ea:ba:dc:6d:
         e0:84:54:e2:6e:69:72:c0:ea:46:56:34:ff:15:63:37:d7:58:
         ec:4d:98:5f:02:61:98:f3:2e:a1:0f:e6:cf:7c:7e:f2:e2:7f:
         42:82:99:c2:89:d4:70:5f:d9:74:e5:e8:34:63:e6:09:4f:eb:
         bf:17:9d:fe:42:40:ba:f6:65:2c:cd:62:40:a4:d0:ec:7d:29:
         64:f9:2f:82:39:eb:06:1b:d7:c2:b3:a0:1b:60:e4:9c:8f:3c:
         64:1c:09:2f:78:0e:de:34:66:b8:48:52:7f:94:cb:78:02:d9:
         03:77:9b:c1:01:ba:30:2d:30:de:17:a1:45:97:ae:ce:9b:9b:
         dd:17:3d:b8:97:8a:89:1c:27:e3:21:84:56:7d:9a:17:ec:1b:
         d6:bb:20:be:f8:50:9c:5c:ae:e9:cb:71:9c:49:4b:e3:8f:44:
         cb:ef:59:14:14:a8:b0:6a:9b:f1:db:a5:78:a4:66:0a:ed:02:
         40:b4:0f:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkxZ7c3g2qc6VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MDg2Yzg5MDItODUyOS00Nzk3LWJlNTYtNjVmZTYxM2Q5MDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhizDofa0Dqi6oa31eAD/tzCpujjPy+y8mP9N
lVq0pqz0/EkGtg1K7OVDlbJ+OloWfN6zdsX+OqgZ6EP8DK30DmRzuryx4qsW8RSR
670vjvcwRo8nTsEfNsLFeHAwAQ2pfz38550fkSnOVz/Ck8ZeOiI+wHlFa6ZlPS0n
zVJ9hNjJXcEhM2WWOFUU3ZyNGPlDhbLJvQg7Y+SdkNkC8d4sJqRT65uoDr8cjGvw
pU0PfboAxP/4UjEkEFT7i86N4iY0wWPmE1nMyn1lp5shzWbfA1nH26dHwZHL4tpa
1/GuaUD7Bye+F5UE4fG+S0onOZeKbKjvbt2Q/OyU4ma+9usrgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbPaF74Lts8+ThcH6ftDWC922VwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVjN2NlNGItMGVmYy0z
YjQ2LTgxNjItYWMwMTNkMDJhZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCvI5eUrL4EnA1EYFcCH+bpM7VyYt4CAuP8XOZkL9sYHcL8dGDlHtze
4FVnvbu7X92Bm7gl6wT5YBt8Ar7KuaS5HlcH6rrcbeCEVOJuaXLA6kZWNP8VYzfX
WOxNmF8CYZjzLqEP5s98fvLif0KCmcKJ1HBf2XTl6DRj5glP678Xnf5CQLr2ZSzN
YkCk0Ox9KWT5L4I56wYb18KzoBtg5JyPPGQcCS94Dt40ZrhIUn+Uy3gC2QN3m8EB
ujAtMN4XoUWXrs6bm90XPbiXiokcJ+MhhFZ9mhfsG9a7IL74UJxcrunLcZxJS+OP
RMvvWRQUqLBqm/HbpXikZgrtAkC0D5w=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:26 2025 by rpki-client