Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa
File:                     bea4add9-19c9-3643-a83c-496bd1649cea.roa (raw, json)
Hash identifier:          rG9DG4Fk44WKAuPzz9V4O0WbX33XLdDDPV0zlLUHQ54=
Subject key identifier:   69:0C:2A:B1:9E:6B:BB:8B:3B:54:E8:B1:0A:D7:78:BB:90:38:24:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81462794B734C5B9FF445E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        50.82.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:27:94:b7:34:c5:b9:ff:44:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=ece2b448-3df6-4a99-b302-5efd60bcf194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:5c:0c:db:3e:08:28:5b:fe:ab:e8:94:25:
                    40:fb:0d:d2:00:42:48:d4:1f:4a:27:f4:3d:70:c9:
                    6c:ab:b1:e2:45:bd:ae:c0:07:d1:4e:f2:eb:00:65:
                    1b:bf:2f:be:4f:33:32:99:ac:47:3d:be:06:23:17:
                    be:d0:25:b7:ba:ea:a5:63:7d:1c:af:65:00:e6:5a:
                    8e:83:83:a0:c6:4b:32:47:90:aa:37:77:cc:6a:e4:
                    6b:3a:ac:28:81:fc:05:b4:8a:e7:85:90:1d:b0:8b:
                    18:99:b6:e0:1e:69:5e:fb:7c:5b:d7:31:f0:fd:a7:
                    68:2d:99:5a:78:b7:cb:d7:04:91:f1:84:07:d0:8b:
                    a7:d0:6f:56:f9:d5:8e:70:ea:1d:a8:2e:c5:e9:01:
                    3a:77:6b:f8:b7:2d:d5:2b:75:6f:ca:3f:82:8d:98:
                    62:11:a7:74:d4:a4:3e:63:1e:53:9f:23:ee:fd:19:
                    05:c8:62:4b:a7:94:fc:1b:f5:a6:79:17:54:99:67:
                    83:5b:57:d4:d1:06:ec:e7:a5:41:b2:28:02:78:79:
                    8b:34:f0:94:74:00:48:ba:de:61:e0:0d:ae:3b:5d:
                    24:64:e2:79:68:e8:ad:19:98:ff:20:a1:0e:1f:b3:
                    c8:b7:79:e4:7e:43:d4:be:17:07:42:ff:0d:1b:ba:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:2A:B1:9E:6B:BB:8B:3B:54:E8:B1:0A:D7:78:BB:90:38:24:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:94:14:03:58:1b:80:3e:06:d5:61:5f:71:8e:61:e0:08:
         8e:90:ec:66:d0:a3:7e:f2:88:76:f4:60:a0:e6:6f:d1:fe:02:
         d4:8e:b2:94:41:c5:54:98:54:6d:cd:c5:88:fc:1e:81:c2:c4:
         00:14:79:98:c3:e6:9f:0b:0e:d4:87:88:4d:20:df:85:bb:34:
         e8:d7:1e:fb:3c:d3:74:2a:95:45:5e:0e:b7:dd:de:b9:83:bd:
         23:7c:5b:cd:11:53:9b:7d:50:f5:d8:05:78:7a:63:f0:d9:77:
         b2:58:7b:c6:2e:c4:c9:16:36:63:4e:1b:5c:6e:8d:61:65:db:
         e8:e8:4d:07:ec:5d:85:69:df:86:79:fd:98:7c:d5:53:ec:cf:
         92:5b:0c:d3:ea:c7:7f:40:c7:13:2a:4c:68:a4:7e:ff:09:da:
         5c:47:fa:7b:e5:32:bd:bc:1e:ec:6b:27:c9:56:18:0c:1f:c9:
         0c:51:d6:cb:00:cb:cc:1d:e5:1a:1d:24:0b:0a:1b:08:80:b2:
         0e:92:15:f6:75:81:d0:b2:87:b2:8e:83:2d:64:f7:ee:10:e0:
         90:e9:36:fc:b4:4f:bd:91:77:bc:16:52:e3:08:06:65:dd:3b:
         4e:e0:55:d9:f9:7c:60:2a:78:91:78:f3:1e:88:3d:e4:66:7b:
         0b:e3:b4:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRieUtzTFuf9EXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZWNlMmI0NDgtM2RmNi00YTk5LWIzMDItNWVmZDYwYmNmMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxcDNs+CChb/qvolCVA+w3SAEJI1B9KJ/Q9
cMlsq7HiRb2uwAfRTvLrAGUbvy++TzMymaxHPb4GIxe+0CW3uuqlY30cr2UA5lqO
g4OgxksyR5CqN3fMauRrOqwogfwFtIrnhZAdsIsYmbbgHmle+3xb1zHw/adoLZla
eLfL1wSR8YQH0Iun0G9W+dWOcOodqC7F6QE6d2v4ty3VK3Vvyj+CjZhiEad01KQ+
Yx5TnyPu/RkFyGJLp5T8G/WmeRdUmWeDW1fU0Qbs56VBsigCeHmLNPCUdABIut5h
4A2uO10kZOJ5aOitGZj/IKEOH7PIt3nkfkPUvhcHQv8NG7rZIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkMKrGea7uLO1TosQrXeLuQOCTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmVhNGFkZDktMTljOS0z
NjQzLWE4M2MtNDk2YmQxNjQ5Y2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlICMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrXlBQDWBuAPgbVYV9xjmHgCI6Q7GbQo37yiHb0YKDmb9H+AtSOspRB
xVSYVG3NxYj8HoHCxAAUeZjD5p8LDtSHiE0g34W7NOjXHvs803QqlUVeDrfd3rmD
vSN8W80RU5t9UPXYBXh6Y/DZd7JYe8YuxMkWNmNOG1xujWFl2+joTQfsXYVp34Z5
/Zh81VPsz5JbDNPqx39AxxMqTGikfv8J2lxH+nvlMr28HuxrJ8lWGAwfyQxR1ssA
y8wd5RodJAsKGwiAsg6SFfZ1gdCyh7KOgy1k9+4Q4JDpNvy0T72Rd7wWUuMIBmXd
O07gVdn5fGAqeJF48x6IPeRmewvjtIA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:58 2025 by rpki-client