Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9efc772-1eee-3962-8989-53110498e870.roa
File:                     b9efc772-1eee-3962-8989-53110498e870.roa (raw, json)
Hash identifier:          mCNmjR9wRZkvLRMcXK5TZ/A9AndKMMjsyZD8sWrV3OY=
Subject key identifier:   54:3D:56:9A:4A:3F:73:56:52:60:D5:F3:6C:FD:CF:62:43:4E:11:4E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784AB38693AAA0B759150C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9efc772-1eee-3962-8989-53110498e870.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        50.82.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ab:38:69:3a:aa:0b:75:91:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=3f0a1099-3ad0-4e23-b404-c407a34c2f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:01:e8:d2:1e:eb:e9:38:d9:46:49:ad:de:
                    a7:62:5c:9b:c1:ec:46:32:b2:d0:fc:d9:be:fb:87:
                    da:73:24:fa:02:0a:9c:82:58:3c:86:82:0a:4c:d5:
                    ac:d5:76:d0:85:50:75:1f:81:6c:8a:35:ce:a2:4f:
                    7f:83:b7:5f:aa:da:52:40:1f:bb:9f:53:1d:32:e8:
                    99:27:70:9c:29:0a:b8:52:cf:0e:fe:5e:ac:f1:0a:
                    b7:4b:d6:b1:eb:09:2f:c3:98:9c:24:25:85:a5:c8:
                    d2:f7:20:a6:fd:c7:06:8c:e9:f0:4b:7f:5a:2e:ba:
                    2f:a8:02:48:a7:bf:5d:50:75:3a:ae:f7:8e:37:f9:
                    d4:a0:80:0d:d5:63:dd:94:6c:43:8d:ca:1d:27:1d:
                    49:27:4a:f8:86:98:3a:2c:ff:6c:fc:6c:0e:2e:36:
                    2b:c2:4f:81:6a:43:5d:ad:3c:19:f5:23:ac:6d:f9:
                    31:5b:f5:96:c2:8d:ff:f9:23:21:04:e3:91:e7:de:
                    62:03:48:61:6f:1b:6e:db:cc:bc:1e:72:35:f6:e9:
                    76:68:56:b4:fc:88:0b:3e:2a:56:81:aa:b4:c8:7a:
                    54:a0:af:e6:39:c1:a5:14:a8:be:1a:d3:c8:62:69:
                    57:e2:93:1c:5f:2e:6d:2b:7e:3a:ed:3f:04:3c:5b:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:56:9A:4A:3F:73:56:52:60:D5:F3:6C:FD:CF:62:43:4E:11:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9efc772-1eee-3962-8989-53110498e870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:3d:e6:e2:e8:83:fe:60:fa:ea:97:7d:42:a4:37:8b:3f:
         9b:65:50:23:d3:fe:52:b0:ce:a6:a7:a9:ed:5a:9e:0f:cc:de:
         ca:a1:b7:a3:95:15:35:be:68:c0:76:99:27:81:94:0b:17:6c:
         ea:86:6a:59:0f:ae:f9:68:75:51:04:20:63:dd:c2:f2:51:57:
         4b:f4:25:78:0f:02:54:a9:b2:5c:32:4f:7b:c4:f9:75:3c:30:
         5f:23:87:13:e7:8d:11:01:76:9b:ef:eb:aa:a7:0c:50:95:35:
         f1:0f:2b:0b:b0:6f:bd:e8:90:ac:69:c5:88:88:71:65:76:16:
         8e:dd:d0:49:11:a9:ae:1e:a2:08:dd:9f:dc:34:c3:79:5b:fd:
         f5:fb:c4:a6:0a:8a:04:99:c1:1d:ab:92:8f:54:76:1d:72:60:
         19:c4:36:f9:ec:03:79:14:93:95:f6:36:37:1e:50:34:a4:3d:
         f2:0d:14:86:12:c3:eb:f7:a4:ff:3a:93:c4:76:4b:86:30:a8:
         21:0e:62:34:d3:ec:b9:7f:73:9e:a2:38:a2:97:15:e9:40:37:
         43:39:73:55:ce:ab:08:29:cb:0e:bd:85:da:28:30:5b:b1:c9:
         bc:6a:ba:17:1d:6c:c2:ee:24:6c:7b:31:96:14:26:2c:07:c2:
         7b:a6:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:03 2025 by rpki-client