Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89368f17-49a0-38af-b342-9607b5c128b6.roa
File:                     89368f17-49a0-38af-b342-9607b5c128b6.roa (raw, json)
Hash identifier:          YrBdSeGuhHpzKMB0Zn4wTzXENU67KlQemGb8Ki9B1p8=
Subject key identifier:   74:A5:95:32:60:CC:21:DD:21:2C:68:35:EC:FD:4E:8E:C3:95:A2:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA15B74DA76F4B09846580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89368f17-49a0-38af-b342-9607b5c128b6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:15:b7:4d:a7:6f:4b:09:84:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f3afed28-03e9-4a8e-93be-ace54486b5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:49:3a:b4:03:c6:42:fb:0a:10:e4:89:00:
                    14:00:ea:f7:d6:48:9e:1a:ef:46:ec:f5:91:07:3e:
                    26:86:e9:b6:5c:b7:c5:73:3f:60:c0:0e:10:f2:6d:
                    d7:30:e9:8a:f6:04:49:2e:0d:f3:d0:93:a0:ff:f4:
                    8e:e6:d9:aa:96:db:8a:8d:c6:fa:26:72:c1:94:b5:
                    cc:03:2f:0b:3e:45:a2:8c:8e:45:4f:33:1e:d6:2c:
                    29:9d:13:0a:90:90:b4:9c:e8:a6:6c:96:f1:d8:97:
                    da:49:dd:3d:7a:85:21:18:34:95:20:5e:13:4b:f8:
                    70:50:df:7e:58:7e:fa:d6:02:d8:41:0d:bf:a6:6f:
                    ed:41:e6:9c:98:0d:08:9f:64:57:43:34:c7:ba:8a:
                    d9:20:46:dd:a1:ab:7e:99:14:ce:c9:4a:21:27:f0:
                    b6:e8:03:b0:e5:76:4e:33:6c:05:ad:fb:ac:fa:ee:
                    f5:25:32:4b:d3:df:71:2d:93:6a:b2:59:b0:39:bd:
                    62:74:fb:55:9b:67:43:9d:0c:5f:29:3f:c0:dc:0c:
                    26:25:d8:1c:39:a4:ba:a2:6b:6f:79:5a:5d:74:a0:
                    86:d5:0f:36:c4:a2:dd:a9:12:af:d5:e7:d5:c6:f8:
                    a7:fc:73:18:ac:e9:a2:af:27:1b:08:c5:04:92:fa:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:95:32:60:CC:21:DD:21:2C:68:35:EC:FD:4E:8E:C3:95:A2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89368f17-49a0-38af-b342-9607b5c128b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:3d:20:3d:18:45:1e:5e:71:28:d1:cc:86:a2:23:4c:99:
         1c:d0:0b:50:fd:1c:85:cd:c5:3d:79:a2:fe:8c:69:5d:2f:22:
         d6:b7:de:1e:2c:2d:da:d4:ff:43:bf:ae:b2:e7:4a:2f:91:b7:
         0c:3d:9c:88:c1:b8:35:1b:a1:19:74:30:15:6d:54:98:a7:b0:
         fc:28:82:9d:5c:3c:15:f9:e3:15:95:ec:df:7d:92:4e:3a:2c:
         5f:e4:40:4d:65:3c:93:14:ad:dd:16:cd:74:81:26:56:ef:ee:
         3f:7d:e9:bf:ef:b6:8a:8e:36:8d:79:38:b2:85:f9:52:9c:a1:
         9d:3a:33:df:67:b5:d2:a5:31:c5:4d:96:86:51:d4:31:0b:5c:
         ff:fb:20:59:49:92:10:02:9c:59:ae:01:02:6b:4b:5c:b2:cc:
         ac:a7:83:cf:80:3e:a9:03:43:60:cb:c4:91:c1:1c:17:15:e8:
         98:72:39:ab:cb:5d:5d:b4:0c:e6:5b:05:28:50:a3:6c:79:4c:
         1e:66:90:a5:52:3a:14:25:aa:93:39:69:94:e1:30:d2:13:5d:
         a0:3d:b0:0c:8a:0a:19:b2:8e:e3:e9:27:8e:a6:aa:48:85:3a:
         bb:0d:02:b5:00:51:a8:1a:f6:df:74:ad:83:43:d1:a0:b0:01:
         6d:8d:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:16 2025 by rpki-client