Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90d9943e-44f9-3f73-b3ea-64c071729c3f.roa
File:                     90d9943e-44f9-3f73-b3ea-64c071729c3f.roa (raw, json)
Hash identifier:          k0ZK19C6YIUJBrc2y5nNj54o9sqp8AFpIu2fplQQUCw=
Subject key identifier:   19:29:65:A6:91:3E:F1:AF:B5:6B:34:7D:02:09:3F:3E:D6:E6:45:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AD2CDE3145F686ADBA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90d9943e-44f9-3f73-b3ea-64c071729c3f.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        50.82.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ad:2c:de:31:45:f6:86:ad:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=ce5a1083-e718-487f-8071-94158308280f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:c8:f6:24:bc:c3:c2:6e:c7:ef:8c:eb:99:
                    83:61:70:f8:42:c6:35:c2:30:44:cb:d7:17:3a:3e:
                    76:d1:f9:d9:2c:d3:ee:88:fe:89:4b:f3:56:73:28:
                    86:94:d7:8a:8a:e3:a2:3e:f2:a5:a5:07:25:a8:f1:
                    d1:09:67:47:7a:72:cc:86:df:bb:7f:24:d0:05:07:
                    e5:c0:43:c8:8f:29:d0:54:95:f8:4a:d9:d4:c2:1f:
                    eb:7d:2c:96:92:a0:bb:ee:d1:ba:05:31:5e:53:a7:
                    02:1f:43:a9:0c:96:5d:c9:52:41:07:96:d2:25:36:
                    41:45:0f:1c:f7:fe:74:bb:c7:1f:d1:99:11:cd:1b:
                    95:62:da:37:82:b4:3c:6d:64:12:95:74:00:92:fb:
                    31:fe:91:43:bf:4c:60:91:d0:e5:96:89:26:d8:b6:
                    d8:b4:84:c6:aa:15:d6:6c:00:9e:b4:2f:96:18:63:
                    b9:f9:c7:b2:73:e6:93:63:f3:0c:f3:c4:aa:76:f2:
                    b2:22:3c:e6:57:20:73:46:aa:f3:d7:58:90:76:b9:
                    35:b3:75:b0:e7:67:0a:56:30:b9:22:94:c5:3b:30:
                    e3:3f:56:ec:a8:77:10:04:66:8c:d0:1c:44:23:1e:
                    aa:b3:16:02:e6:f7:e5:f1:42:3b:e3:5b:37:4b:66:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:65:A6:91:3E:F1:AF:B5:6B:34:7D:02:09:3F:3E:D6:E6:45:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90d9943e-44f9-3f73-b3ea-64c071729c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:06:56:d5:75:8f:e9:e3:b8:93:4f:e1:58:dc:3f:1d:63:
         c2:f5:14:6f:36:26:dc:d5:0d:e8:42:da:d4:a4:de:ab:59:f5:
         18:03:7c:26:19:8b:70:06:9f:7c:8a:d1:d3:34:91:52:5f:10:
         ff:d2:43:cb:da:89:b7:cb:83:4a:a8:f6:46:25:2d:65:c2:af:
         33:77:76:04:24:7a:ed:a3:1c:7d:5c:78:0e:2d:73:0a:44:d0:
         ef:2d:d9:46:9b:fb:bb:63:38:ff:6b:00:8b:ac:bf:e5:cc:a7:
         cd:1f:f7:c5:dd:17:bc:cb:3a:23:e1:44:e6:70:94:d2:b2:92:
         38:e7:cd:f5:9d:06:5a:b2:ab:f7:e4:b7:45:b2:2a:f6:40:d3:
         2d:ae:b3:bd:27:3a:4b:8c:93:e4:6e:d0:97:ac:17:eb:46:ab:
         f1:27:c8:69:fa:db:33:0d:1c:dd:f5:dc:f4:c3:17:68:d9:c9:
         5e:cc:b3:6b:ac:1d:6f:dc:bd:28:e7:35:71:62:2d:99:40:ef:
         3e:92:61:e8:31:d5:40:80:39:c5:26:53:6e:06:c7:dc:58:c4:
         e4:3e:96:03:55:5f:8c:01:93:69:79:6a:7f:5d:7e:18:e5:ff:
         03:c6:fe:78:42:dd:14:83:40:48:22:57:4c:f4:5d:f9:a3:d0:
         e8:ea:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:51 2025 by rpki-client