Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1c6b59-ee37-37b7-8bef-2a8064f5f2dd.roa
File:                     bf1c6b59-ee37-37b7-8bef-2a8064f5f2dd.roa (raw, json)
Hash identifier:          yefmEzlFzwhKmGwdNl/Bxvqug8HBAiJZYUUgi5cGgb4=
Subject key identifier:   C3:F8:72:21:98:F9:F4:3E:FC:86:D4:EC:47:FB:22:79:0E:EF:6B:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814663F2EA276A1BDBB0ED00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1c6b59-ee37-37b7-8bef-2a8064f5f2dd.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        50.80.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:63:f2:ea:27:6a:1b:db:b0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=13b297aa-e714-4354-83c1-0712ab4a85a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:88:0a:44:0b:9f:2d:bf:07:50:32:51:4c:
                    5b:15:65:cb:42:8a:5b:bf:cf:5d:f9:f9:46:7d:30:
                    e4:a4:e1:0e:67:89:92:d3:0c:e3:65:c9:f3:44:e5:
                    6f:5c:1f:c9:6c:40:35:de:01:ab:a9:57:ce:f2:89:
                    0a:de:3e:8e:d9:2e:cd:31:47:e8:84:8c:c8:a2:e2:
                    81:10:59:4c:76:87:dc:c5:ea:ab:47:1c:b7:7b:49:
                    d0:79:e5:f8:d9:ca:45:d9:8d:7a:24:cf:c6:29:42:
                    27:b8:c2:39:28:ad:9c:a8:d6:62:f9:60:8c:bc:0b:
                    96:2f:d3:32:bc:6e:2b:2c:33:78:a4:c7:08:ba:32:
                    94:09:e9:7c:a7:25:a8:b0:4c:06:66:f6:c8:77:21:
                    ef:80:b5:3c:7a:9d:10:5b:d5:c9:f8:e3:a9:41:df:
                    42:a0:81:9f:1c:51:20:e7:60:d3:70:90:6c:3d:72:
                    78:9a:48:12:d3:c5:5f:7c:6f:af:a4:70:ee:a4:dc:
                    28:2a:08:79:f6:77:45:da:03:67:a9:93:e1:6a:5a:
                    90:f4:c3:56:66:df:6d:30:23:bb:b9:bf:fd:7a:05:
                    6c:8d:16:79:ea:9d:82:dc:a5:fe:5b:20:ea:44:0a:
                    ca:a8:3f:23:14:b7:e5:d4:7f:1e:5c:54:58:28:21:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:72:21:98:F9:F4:3E:FC:86:D4:EC:47:FB:22:79:0E:EF:6B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1c6b59-ee37-37b7-8bef-2a8064f5f2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:36:85:fc:7e:51:a0:c2:d3:a0:b2:f6:3e:3e:25:1f:d9:
         86:c7:c1:4f:c5:48:c6:61:c4:67:b2:dd:40:c3:fd:94:fa:e6:
         30:71:98:c7:f5:6e:5f:07:68:9d:9b:ec:df:c9:bb:03:6d:42:
         37:0c:23:59:de:0a:2a:de:4e:37:09:e6:b2:68:16:22:94:2b:
         0b:19:ef:a2:c0:43:54:55:55:c9:9b:64:12:71:78:ec:59:7f:
         c2:f9:58:d6:26:b8:0d:29:6f:fa:73:84:a9:20:f6:57:2d:d8:
         e8:2f:59:69:a1:cc:3b:e5:ee:ba:ee:a5:fe:d4:38:ff:e6:5b:
         7d:36:b7:be:a8:2f:95:d0:07:00:fa:80:21:af:f0:e1:1f:55:
         3a:94:e0:1c:32:ff:1e:c7:63:8f:b6:15:bb:09:71:44:c4:47:
         f4:54:77:33:8b:d6:c2:ff:76:b9:34:85:c5:2e:c3:5f:9f:e5:
         a2:75:2d:5d:8a:3a:3c:ef:88:29:7f:b4:58:e1:d2:77:ef:ce:
         d0:34:16:3c:00:38:bf:80:68:e7:a3:e6:32:2f:03:6b:89:2a:
         91:fb:a9:af:eb:6b:46:d7:57:1d:72:a2:c1:e6:5b:38:e5:81:
         cb:75:b9:34:1b:fe:f5:14:4d:20:55:35:b0:b2:d9:8b:7b:5b:
         b9:f5:89:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRmPy6idqG9uw7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MTNiMjk3YWEtZTcxNC00MzU0LTgzYzEtMDcxMmFiNGE4NWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo6ICkQLny2/B1AyUUxbFWXLQopbv89d+flG
fTDkpOEOZ4mS0wzjZcnzROVvXB/JbEA13gGrqVfO8okK3j6O2S7NMUfohIzIouKB
EFlMdofcxeqrRxy3e0nQeeX42cpF2Y16JM/GKUInuMI5KK2cqNZi+WCMvAuWL9My
vG4rLDN4pMcIujKUCel8pyWosEwGZvbIdyHvgLU8ep0QW9XJ+OOpQd9CoIGfHFEg
52DTcJBsPXJ4mkgS08VffG+vpHDupNwoKgh59ndF2gNnqZPhalqQ9MNWZt9tMCO7
ub/9egVsjRZ56p2C3KX+WyDqRArKqD8jFLfl1H8eXFRYKCHUkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMP4ciGY+fQ+/IbU7Ef7InkO72u0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYxYzZiNTktZWUzNy0z
N2I3LThiZWYtMmE4MDY0ZjVmMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlAxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUaNoX8flGgwtOgsvY+PiUf2YbHwU/FSMZhxGey3UDD/ZT65jBxmMf1
bl8HaJ2b7N/JuwNtQjcMI1neCireTjcJ5rJoFiKUKwsZ76LAQ1RVVcmbZBJxeOxZ
f8L5WNYmuA0pb/pzhKkg9lct2OgvWWmhzDvl7rrupf7UOP/mW302t76oL5XQBwD6
gCGv8OEfVTqU4Bwy/x7HY4+2FbsJcUTER/RUdzOL1sL/drk0hcUuw1+f5aJ1LV2K
OjzviCl/tFjh0nfvztA0FjwAOL+AaOej5jIvA2uJKpH7qa/ra0bXVx1yosHmWzjl
gct1uTQb/vUUTSBVNbCy2Yt7W7n1ic8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:00 2025 by rpki-client