Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993f43e8-bee9-3d6c-9457-c5dc13722c8b.roa
File:                     993f43e8-bee9-3d6c-9457-c5dc13722c8b.roa (raw, json)
Hash identifier:          yF2lnSnBSsOS6lhRiqDIXvZU69rde/zvhXkR4H0R4bA=
Subject key identifier:   C4:71:44:03:B3:19:38:80:B6:AA:8D:75:6B:CD:F5:A6:47:B4:B2:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146634B6B694C0DDBDF7E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993f43e8-bee9-3d6c-9457-c5dc13722c8b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        50.81.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:63:4b:6b:69:4c:0d:db:df:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=874a8609-12fc-4dcb-a9ed-4d2fa7c55ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:64:bf:0b:27:4c:23:92:bb:16:29:30:5b:
                    62:44:d1:1b:f7:de:9c:75:3a:38:80:ed:72:58:7e:
                    b7:6a:4e:81:13:84:89:a0:62:61:0b:91:78:cc:b9:
                    31:dc:99:bd:2d:d7:c3:5e:4f:96:64:90:ed:12:35:
                    0c:83:f9:a4:cb:a7:b0:29:30:05:e8:bb:f8:ce:0a:
                    59:a7:fe:0e:14:71:c4:ca:e2:70:fe:3e:00:b1:a6:
                    87:42:7c:cd:20:be:d0:7e:79:4e:ef:b4:f9:cc:41:
                    e2:7c:ff:ab:ab:78:55:82:c7:14:18:8f:e2:29:16:
                    e9:73:7d:8f:17:8a:45:a1:a3:d0:e7:8a:53:ee:d9:
                    18:cf:b7:96:87:e4:94:48:ae:8c:62:4f:d3:cc:fb:
                    fe:de:78:cd:ee:a4:e3:48:fe:d6:aa:d1:ce:50:c8:
                    56:e7:2e:6a:0f:41:32:63:d6:dc:48:0f:5b:b7:4c:
                    3a:df:5b:75:2d:b8:a1:05:74:1d:b5:ec:78:30:31:
                    17:37:cb:7b:dc:b4:97:38:c0:23:a0:e1:1f:14:ba:
                    f6:3a:1e:7a:38:4f:08:bc:8a:4c:ed:5d:b0:09:35:
                    4c:62:83:1c:f9:b0:53:39:5c:2a:4f:89:ea:5e:fd:
                    b2:33:68:2d:9a:f4:d4:38:20:a0:73:32:0c:67:f0:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:71:44:03:B3:19:38:80:B6:AA:8D:75:6B:CD:F5:A6:47:B4:B2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/993f43e8-bee9-3d6c-9457-c5dc13722c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:15:9a:04:62:f4:2a:9b:dd:ed:70:ff:96:ce:88:7e:58:34:
         d9:48:4c:ff:1b:44:1f:18:11:b6:b2:9c:bf:f9:f8:47:ab:48:
         75:f4:24:e7:b1:6c:0a:bd:6a:ec:7d:b1:95:45:ab:7d:0c:e3:
         a6:ec:e5:e3:04:72:fc:44:ae:4f:c9:54:9d:08:f1:5e:c6:d9:
         49:3b:5d:49:d4:77:04:b7:dd:0a:be:60:d9:c8:f7:80:b0:46:
         b9:64:0c:95:54:91:78:a3:f7:38:3f:f2:85:42:e8:87:3c:f3:
         92:9e:ea:c2:57:b9:43:35:6f:cb:74:57:9f:29:63:12:7f:68:
         de:b6:b3:80:a6:6c:e4:b4:0c:b4:e6:a1:5a:2a:ac:b3:f0:74:
         cb:05:0b:16:cc:25:07:94:b7:b0:c6:80:74:b5:70:67:8d:a2:
         63:54:ed:72:ac:50:14:30:37:77:87:5a:e8:7a:c0:5a:0c:e3:
         da:89:b9:e4:82:95:21:8c:a9:fb:1e:eb:70:2d:5c:6c:de:b1:
         b1:f3:d8:60:86:92:ae:76:16:99:dd:2e:31:fc:d7:96:b3:05:
         d6:bc:f5:dd:3e:65:be:73:01:4f:13:e5:00:72:10:7a:2d:45:
         ed:07:34:5c:a0:64:5d:ba:13:db:7a:24:8f:47:50:7e:57:41:
         da:e1:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:17 2025 by rpki-client