Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c72129a6-58e7-3648-ab35-1f89cd300cd1.roa
File:                     c72129a6-58e7-3648-ab35-1f89cd300cd1.roa (raw, json)
Hash identifier:          EiIkMJn4zoSyOXYVwRp+FA3j4JozJNT6UttDJLBqsWk=
Subject key identifier:   1A:DE:A8:10:8F:FC:EE:2E:76:E7:BA:F4:39:56:D2:F9:51:0B:51:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF4A22915264C6C92799A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c72129a6-58e7-3648-ab35-1f89cd300cd1.roa
Signing time:             Tue 22 Apr 2025 09:37:02 +0000
ROA not before:           Tue 22 Apr 2025 09:37:02 +0000
ROA not after:            Mon 21 Jul 2025 09:37:02 +0000
asID:                     19905
IP address blocks:        50.82.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f4:a2:29:15:26:4c:6c:92:79:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:37:02 2025 GMT
            Not After : Jul 21 09:37:02 2025 GMT
        Subject: CN=83ec9060-17f7-4788-90f3-b5cca10e0f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:e5:17:4d:0f:e3:63:df:21:3b:48:52:98:
                    55:65:de:8e:19:56:6b:ae:27:bc:91:14:05:47:6b:
                    56:f9:93:94:e2:c7:00:4e:88:cd:f5:3b:a2:0b:f2:
                    77:79:40:2c:44:7f:8b:af:53:42:2a:2a:41:b2:ea:
                    42:17:3c:f4:b0:e0:dd:6f:9f:ac:e6:c1:5f:7e:de:
                    43:0d:dc:3d:73:5b:25:35:5b:c8:b4:80:4f:16:07:
                    0b:4b:95:35:3e:09:e4:51:c7:e5:c4:83:69:2a:e0:
                    09:2b:b6:fa:ac:0a:ee:c1:09:ab:45:6e:f6:68:83:
                    34:ec:43:83:8f:19:b0:e8:24:4b:bc:90:e2:fa:70:
                    9d:da:6b:a3:d4:8b:25:ad:25:65:fe:e5:1e:f0:e5:
                    4d:5b:19:37:ef:b5:11:7d:33:a9:09:27:f0:3c:27:
                    df:0c:0b:37:7a:f6:c9:67:31:bb:18:c3:1c:50:af:
                    2a:d4:db:3f:65:4a:71:88:21:86:2c:af:00:60:fa:
                    9c:a1:31:8c:4c:13:f0:61:e9:71:d3:a3:1b:c0:fb:
                    00:c5:3d:85:b3:19:a0:57:7a:91:dc:3e:e5:58:26:
                    cc:9f:c1:30:60:94:e3:2d:96:3e:19:36:fe:ac:64:
                    1a:fa:08:c0:6f:23:d6:e5:b2:71:eb:1b:85:3c:4d:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:A8:10:8F:FC:EE:2E:76:E7:BA:F4:39:56:D2:F9:51:0B:51:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c72129a6-58e7-3648-ab35-1f89cd300cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:1e:e7:d4:4f:1d:93:58:3c:c7:88:c4:79:2f:f1:35:9f:
         e7:72:71:66:04:ef:5e:3d:d7:d3:64:db:3f:82:44:c1:e9:dc:
         dc:7c:7d:db:3f:40:ea:7c:39:64:1b:27:43:b0:4a:9c:1b:d5:
         9e:8d:9b:79:1a:e8:55:3a:26:8f:36:48:c0:8f:c6:b4:28:ff:
         cb:34:fc:25:5a:62:b9:d3:c2:bf:9d:09:93:0a:d0:8f:d7:6b:
         6f:89:8d:46:5a:d1:fd:01:a9:34:99:2b:a4:4c:3b:70:c5:63:
         89:63:2f:d6:30:41:5e:bb:2d:bf:bc:25:0f:62:9b:bc:64:99:
         4b:07:7d:b6:e2:fb:c0:fa:5d:82:eb:73:77:85:4a:68:ce:5f:
         76:97:b6:47:17:9d:ff:9c:3d:10:1f:88:59:61:3a:95:a7:10:
         02:cc:59:fc:8b:fb:90:ad:7f:51:2f:fd:a6:12:40:e6:7f:8d:
         66:f4:88:0d:44:fd:38:46:4a:8a:67:9a:1b:03:31:0d:eb:f0:
         80:d0:31:84:0e:8b:5a:ec:e2:63:fd:b5:78:5a:4c:26:9a:e9:
         9b:7c:89:cd:52:0b:59:92:0b:96:36:04:f7:ac:79:ec:b2:0b:
         18:29:48:62:1f:87:8a:b9:b4:bd:91:25:09:b5:a4:df:ef:c8:
         e1:68:37:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9KIpFSZMbJJ5mgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyMjA5MzcwMloXDTI1MDcyMTA5MzcwMlowLzEtMCsGA1UEAxMk
ODNlYzkwNjAtMTdmNy00Nzg4LTkwZjMtYjVjY2ExMGUwZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5nlF00P42PfITtIUphVZd6OGVZrrie8kRQF
R2tW+ZOU4scATojN9TuiC/J3eUAsRH+Lr1NCKipBsupCFzz0sODdb5+s5sFfft5D
Ddw9c1slNVvItIBPFgcLS5U1PgnkUcflxINpKuAJK7b6rAruwQmrRW72aIM07EOD
jxmw6CRLvJDi+nCd2muj1IslrSVl/uUe8OVNWxk377URfTOpCSfwPCffDAs3evbJ
ZzG7GMMcUK8q1Ns/ZUpxiCGGLK8AYPqcoTGMTBPwYelx06MbwPsAxT2FsxmgV3qR
3D7lWCbMn8EwYJTjLZY+GTb+rGQa+gjAbyPW5bJx6xuFPE2GOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBreqBCP/O4udue69DlW0vlRC1GqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzcyMTI5YTYtNThlNy0z
NjQ4LWFiMzUtMWY4OWNkMzAwY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlLsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2LHufUTx2TWDzHiMR5L/E1n+dycWYE714919Nk2z+CRMHp3Nx8fds/
QOp8OWQbJ0OwSpwb1Z6Nm3ka6FU6Jo82SMCPxrQo/8s0/CVaYrnTwr+dCZMK0I/X
a2+JjUZa0f0BqTSZK6RMO3DFY4ljL9YwQV67Lb+8JQ9im7xkmUsHfbbi+8D6XYLr
c3eFSmjOX3aXtkcXnf+cPRAfiFlhOpWnEALMWfyL+5Ctf1Ev/aYSQOZ/jWb0iA1E
/ThGSopnmhsDMQ3r8IDQMYQOi1rs4mP9tXhaTCaa6Zt8ic1SC1mSC5Y2BPeseeyy
CxgpSGIfh4q5tL2RJQm1pN/vyOFoN/8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:05:12 2025 by rpki-client