Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd47cefe-96a8-3504-84ee-6031d775416e.roa
File:                     bd47cefe-96a8-3504-84ee-6031d775416e.roa (raw, json)
Hash identifier:          WVHob4h5DhMwEEtNYG5hMakxCGdVElU6UqTt9EJI3Qs=
Subject key identifier:   68:4D:00:2D:14:62:E1:62:71:97:E3:9D:12:97:66:06:DF:23:96:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814661B80E2ED09E07F8A730
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd47cefe-96a8-3504-84ee-6031d775416e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        50.82.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:61:b8:0e:2e:d0:9e:07:f8:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=a9bc1ac4-ae0e-407d-9054-7fa1123ad4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:8a:1d:66:94:2f:f2:7f:94:ea:d5:a1:e3:
                    35:24:5d:df:fa:13:53:e5:53:e3:91:28:da:f0:62:
                    bf:5b:d3:02:f0:7a:32:37:74:a1:4f:69:c4:9e:3f:
                    4a:7d:bd:b6:ec:3a:ae:14:bb:6f:81:ce:ea:50:73:
                    5e:69:3d:0c:a6:dd:79:b7:47:c9:90:25:ab:3e:a9:
                    68:59:ed:d6:ac:58:08:51:9e:83:fe:60:70:40:18:
                    91:19:f2:ee:ff:2b:55:53:c2:29:b9:2b:52:4d:30:
                    4b:73:b3:33:24:94:42:80:c2:98:b4:4e:10:c1:50:
                    5e:6a:8d:d9:eb:1d:e9:88:27:15:ce:b5:eb:11:4f:
                    78:6a:6b:d8:3c:7e:38:8a:9b:cb:7f:68:ff:3c:12:
                    e7:b4:e5:64:e9:aa:d8:8f:81:01:4d:ae:d5:c3:1c:
                    24:ef:40:c0:e5:91:b5:1f:52:69:36:7e:8b:d8:01:
                    d1:d9:5f:6b:38:ba:16:75:66:28:ca:6c:5a:b7:46:
                    78:fd:2c:57:e5:a6:bc:0e:e6:a5:6a:95:fd:cc:86:
                    0a:64:0a:87:1d:4d:8e:4d:60:72:41:03:84:2e:02:
                    67:00:e0:18:8a:15:02:d7:4e:db:8a:50:34:26:ae:
                    f7:52:b0:e2:58:b5:4d:fb:45:52:f2:d5:06:d9:33:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:00:2D:14:62:E1:62:71:97:E3:9D:12:97:66:06:DF:23:96:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd47cefe-96a8-3504-84ee-6031d775416e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:69:1a:68:96:a9:3e:38:e1:56:b3:b6:b0:26:85:79:07:
         a8:75:e0:62:44:a5:8c:c3:e5:80:f8:95:85:8f:76:43:63:69:
         a5:19:a2:02:19:4c:60:aa:6e:de:17:0b:3d:dd:95:ec:5b:b8:
         55:ec:a2:00:3a:fe:35:d6:90:cd:2a:14:66:c9:e8:f3:68:b8:
         b3:2f:e8:70:03:5a:78:8a:33:49:d7:89:d1:e4:97:1f:91:0a:
         50:d8:41:45:be:2d:24:ed:0a:c9:66:16:0f:b8:6e:3d:10:45:
         6f:f4:dd:ee:27:ab:0a:bd:c1:4e:3a:60:da:e5:79:d0:34:17:
         1f:3d:cb:a0:01:5e:68:98:fc:1c:a3:ca:6c:98:d4:ba:fc:9f:
         35:5d:fe:95:f6:ef:d3:b8:51:9a:0c:ed:60:1f:4c:78:a3:9e:
         59:52:0e:06:f6:9b:da:0a:a9:fe:3d:c7:c0:8b:48:21:ea:2d:
         1d:10:8e:92:93:eb:e7:e6:51:9e:8b:51:85:78:ca:0f:f4:c4:
         d8:8e:08:00:e9:82:94:ae:1a:d9:77:87:ba:e0:ae:b0:8b:aa:
         b1:83:b1:2e:94:fb:fc:8e:45:e7:ff:8a:aa:c4:28:5a:79:e3:
         f3:94:9c:95:f6:9d:44:a2:b8:0f:ff:f3:7f:2c:86:01:1d:8b:
         37:aa:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:41 2025 by rpki-client