Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8908c33-ee32-380d-ac1e-3751ac8134d1.roa
File:                     c8908c33-ee32-380d-ac1e-3751ac8134d1.roa (raw, json)
Hash identifier:          vQ/9YvPyyg20ejMD98KthLyQdtteYOpbBsoYNl8u1p0=
Subject key identifier:   3E:68:DD:A3:AE:53:86:A9:E3:C5:4F:C7:85:CF:9A:E4:29:ED:C8:D3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF515858C882FD2D14FD40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8908c33-ee32-380d-ac1e-3751ac8134d1.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.80.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:51:58:58:c8:82:fd:2d:14:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=6c9a58cd-7b45-4c99-af92-d07596589a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:a9:15:e6:b4:58:5d:2c:fd:93:8e:71:12:
                    0a:a9:cb:a5:b0:15:8b:54:74:77:60:e7:88:23:c0:
                    28:90:15:0f:a6:6a:75:07:70:b3:c2:11:8a:3c:c0:
                    d9:ac:8a:9e:77:cd:ee:f8:a9:03:77:00:98:c7:18:
                    76:20:7d:f8:f1:ea:13:ec:f6:8c:04:fd:70:35:ec:
                    e9:93:ec:5b:a5:bf:eb:47:06:0c:58:b7:51:f5:12:
                    6a:86:83:41:c5:bf:0b:28:dc:d7:12:ec:ac:3a:a1:
                    ae:82:86:bd:cf:16:a3:61:83:77:8e:45:93:4c:dc:
                    52:de:ec:77:3e:e5:b3:23:43:6d:c5:d7:ef:46:15:
                    d0:53:11:d4:68:5a:c5:0b:78:20:ff:68:c5:f0:3c:
                    3f:7f:89:e5:08:b9:21:97:34:c9:ad:04:df:a7:bd:
                    f4:3e:51:e6:c4:06:f3:8b:7b:41:42:d8:44:bc:90:
                    ed:5a:cb:22:c0:4a:0d:7f:20:fa:90:e6:c0:aa:a4:
                    d8:92:3d:23:8c:ae:a3:82:0d:55:8f:73:40:31:dc:
                    aa:f4:bd:38:46:b5:94:90:7d:9a:4d:4d:9c:20:b4:
                    2e:fb:d3:78:a1:4f:64:33:e7:5c:9d:eb:57:2c:63:
                    a5:89:38:23:99:0d:ea:74:aa:48:6e:53:9a:9b:2f:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:DD:A3:AE:53:86:A9:E3:C5:4F:C7:85:CF:9A:E4:29:ED:C8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8908c33-ee32-380d-ac1e-3751ac8134d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:5c:70:5e:58:e0:13:1d:18:50:00:1f:3b:e7:78:ca:bb:
         0e:e4:67:9e:98:a0:3f:ef:9b:6f:53:66:4e:cf:c2:57:51:29:
         3d:d0:6c:13:55:c4:5f:5e:00:2f:e9:2c:f7:e0:c4:b0:78:60:
         4c:45:76:b0:e1:8d:0b:ce:7b:63:8c:0a:2b:ca:5d:10:29:51:
         a3:95:c1:6b:9a:42:d8:0b:f4:06:fe:b2:0c:9e:a8:f7:49:fe:
         12:96:05:1a:1b:08:1c:18:c2:87:ff:71:16:20:4e:db:d4:46:
         9c:5a:fc:af:9c:d2:a5:da:6b:28:a4:51:8c:fc:3c:a5:e6:ad:
         a2:eb:8b:60:29:e8:f1:60:7f:c0:5b:04:c3:50:86:e8:f7:4e:
         f5:aa:f7:e3:2d:93:df:34:eb:f3:db:b7:73:2e:ba:c9:c5:b2:
         5d:16:07:d3:35:51:d2:eb:6a:bd:36:3e:f3:9f:37:78:c0:3e:
         f0:2a:bb:f1:b0:f1:91:42:73:b4:e0:92:ae:18:32:ce:89:be:
         38:65:ad:72:1a:ca:de:53:91:48:10:d3:ec:0b:18:75:48:e7:
         56:da:c9:e6:02:f4:2f:4e:9f:33:89:86:d1:e6:75:ce:b5:ec:
         f4:ed:4d:98:e9:68:e3:4d:de:bd:0e:96:e9:fc:36:81:7a:95:
         f8:3d:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:31:34 2025 by rpki-client