Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5a424e-8769-3ee2-815e-5c704c7b577e.roa
File:                     ab5a424e-8769-3ee2-815e-5c704c7b577e.roa (raw, json)
Hash identifier:          bfK6uFPHgpIet245py5IhJXW9DJzDGGWung3kOESrBE=
Subject key identifier:   06:2C:AC:39:45:B0:8E:A2:50:26:7A:96:47:AB:C6:35:37:CB:DE:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841250BB831D0C2B2924C500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5a424e-8769-3ee2-815e-5c704c7b577e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:50:bb:83:1d:0c:2b:29:24:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d7561395-ae44-4d57-8a90-75e06a01a834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:0c:5f:46:05:c5:e4:36:9d:00:9a:ff:81:
                    b3:e1:8a:2d:3d:db:fc:0d:2d:16:a8:6e:dd:5b:e9:
                    92:49:d1:5b:2e:c5:36:a2:8d:9c:bc:97:3c:d2:e2:
                    60:c4:9d:cb:2b:cb:72:c0:27:aa:c8:13:d2:25:70:
                    ae:91:42:8c:65:2a:d2:5a:59:35:b3:bb:bb:d8:c0:
                    69:d2:26:a7:10:b0:12:33:c5:3e:01:f7:54:fc:ed:
                    5b:ff:6c:32:ca:e3:24:51:ff:aa:be:50:a6:aa:d1:
                    33:d8:a2:98:cf:67:63:0c:6a:26:39:f3:93:89:04:
                    fa:b4:47:f5:32:91:bd:7d:40:ed:d1:6f:16:76:49:
                    d2:0c:f3:36:5e:7a:25:36:e2:93:b5:11:3a:ec:62:
                    be:2d:75:74:51:9c:45:79:55:6b:38:7a:9f:f2:df:
                    98:2f:02:a7:ba:d0:5c:a1:45:15:5b:28:bb:7b:22:
                    ca:cf:b1:87:ea:07:2d:3e:97:4b:dd:04:db:ad:d1:
                    e5:56:49:48:ce:c9:e1:89:13:1c:a8:34:94:71:73:
                    32:27:b1:d7:2f:1c:fc:2f:cc:64:6d:f4:5a:e0:b7:
                    1d:7f:05:b7:68:d4:7c:6e:af:04:af:28:db:ef:83:
                    05:96:75:2d:5c:13:c0:c0:82:1d:36:20:bf:44:58:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:AC:39:45:B0:8E:A2:50:26:7A:96:47:AB:C6:35:37:CB:DE:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5a424e-8769-3ee2-815e-5c704c7b577e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:26:50:d2:53:a8:6a:06:67:13:c2:5a:dc:3c:52:5a:c8:
         76:35:c3:e5:80:19:c2:03:b8:16:06:a1:78:6d:d6:cb:7d:3d:
         b2:07:81:38:c5:da:08:a9:8b:f6:bd:90:ed:f1:00:2b:17:6d:
         16:e3:d1:7a:e2:9c:d3:9b:61:2c:90:47:1c:0f:ca:a2:83:11:
         28:2a:e8:3e:de:1d:33:b4:45:7b:9e:46:a0:be:9c:a8:38:62:
         a9:18:97:1c:a2:0e:2f:14:87:00:ea:c0:44:d7:1e:12:84:aa:
         00:0f:dc:03:99:7d:5a:15:30:74:5e:f3:04:d6:7f:e5:a1:8f:
         c0:cc:86:1d:d2:14:1f:81:1a:44:0d:d3:68:14:ad:cb:01:e6:
         08:6f:56:4e:fb:2a:6c:03:8a:1d:c7:fb:6a:aa:a4:9a:55:58:
         45:a9:b1:fc:0c:60:c3:65:42:db:69:14:5b:dd:af:6f:69:86:
         f4:ec:e2:ee:c6:8a:d2:5e:0f:62:6a:47:55:d8:f0:81:4d:06:
         8f:be:97:46:a8:fe:ac:f1:5d:62:11:00:63:eb:c3:a1:33:5b:
         2b:1e:90:c8:c3:3c:f6:cc:dc:02:f4:aa:fb:91:bf:16:35:65:
         90:f9:1b:3c:2b:18:45:64:b5:60:8d:86:45:a0:ef:37:51:c5:
         5b:4c:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:49 2025 by rpki-client