Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa
File:                     cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa (raw, json)
Hash identifier:          35cHH3nKB/kuPCuwXQbDD9UWQW/WsT7exQxpxgb5Ssc=
Subject key identifier:   AB:11:F7:53:9E:BC:2E:98:F8:19:62:33:20:10:CC:EE:23:9C:17:48
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA4140E266F4C78E8CB600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:41:40:e2:66:f4:c7:8e:8c:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9a418a84-156f-4fb7-89ba-ac7e5b23cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:e8:13:af:a9:f8:5d:f9:2e:39:fa:9a:68:
                    b5:eb:4a:2f:45:80:8a:34:f5:e4:b9:15:13:e0:c7:
                    4f:f7:20:4b:2d:99:62:80:65:dd:2a:db:01:51:a6:
                    18:3d:47:50:0f:d4:ce:6b:2a:88:92:16:2a:b3:16:
                    bf:47:af:70:8d:8f:ad:29:35:04:7d:a4:69:60:b9:
                    33:4d:0b:67:61:9a:d9:8b:42:3c:39:b2:28:38:94:
                    f4:7f:f3:c0:07:ea:c4:2c:06:2a:df:fa:a6:f5:5b:
                    2f:fe:b0:70:b2:a8:5d:bb:13:c3:31:85:d9:dd:3d:
                    ca:85:b2:a0:36:2a:81:4b:fa:84:2b:da:6c:5e:db:
                    f7:64:34:aa:29:92:0a:b6:41:0b:62:ba:b9:54:15:
                    8d:d1:9a:07:b7:af:5c:e9:79:3f:83:ef:60:71:4f:
                    70:13:72:22:4b:f2:6c:57:6f:30:1e:c9:cb:25:b7:
                    47:09:74:a9:37:e8:73:aa:5e:f9:46:7d:30:15:89:
                    c2:bf:38:cd:48:38:cf:42:c7:5d:d6:12:92:b0:90:
                    4d:76:2d:95:e0:c0:32:4f:99:e8:3f:08:0e:2e:da:
                    e0:76:bd:e0:20:e1:2e:99:2a:74:de:c5:28:a4:33:
                    f3:d7:ca:56:c2:23:af:92:fd:83:ef:7e:54:62:c3:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:11:F7:53:9E:BC:2E:98:F8:19:62:33:20:10:CC:EE:23:9C:17:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:43:57:c8:40:70:32:15:6b:7b:eb:0f:b5:18:cd:05:2c:96:
         cc:3d:12:16:d9:95:cc:2a:c6:ed:65:2e:16:34:18:37:d0:21:
         5f:8a:0d:c4:6e:aa:3d:81:bc:28:81:4e:2c:92:e0:9d:4e:c4:
         e9:e2:b3:2c:ec:79:0b:8a:16:17:8c:ce:c3:9d:c6:52:b0:5a:
         6c:26:5b:16:7f:33:eb:db:bc:ba:6a:8e:24:9b:eb:28:e9:93:
         b5:8e:8b:d2:a8:d0:c2:f5:89:57:51:bb:b6:73:af:96:77:bc:
         94:5c:e1:ec:53:60:b0:85:fa:dd:ad:10:29:13:df:13:ed:f2:
         4c:e9:00:40:6f:3c:a0:a3:7d:20:01:25:30:5e:3a:10:9d:81:
         83:cc:ed:5c:25:4b:f5:ed:e6:2b:7e:30:70:da:b7:7e:cd:31:
         19:8d:8e:3f:fd:84:e8:5c:ca:27:d5:f4:13:88:f9:47:8a:e2:
         18:5e:2d:f1:4a:11:0e:15:2a:e2:c5:c4:34:e5:1e:4a:39:18:
         6b:ea:2b:a6:a5:03:30:49:79:2c:0f:6c:98:b7:e8:fc:f7:ff:
         7f:3c:10:52:8b:d7:f1:f5:3d:51:e2:f1:89:af:e8:72:e2:b0:
         37:10:40:48:35:99:3a:f7:e5:a1:b3:fc:2a:75:6c:5c:5c:17:
         67:59:9f:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukFA4mb0x46MtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OWE0MThhODQtMTU2Zi00ZmI3LTg5YmEtYWM3ZTViMjNjYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql7oE6+p+F35Ljn6mmi160ovRYCKNPXkuRUT
4MdP9yBLLZligGXdKtsBUaYYPUdQD9TOayqIkhYqsxa/R69wjY+tKTUEfaRpYLkz
TQtnYZrZi0I8ObIoOJT0f/PAB+rELAYq3/qm9Vsv/rBwsqhduxPDMYXZ3T3KhbKg
NiqBS/qEK9psXtv3ZDSqKZIKtkELYrq5VBWN0ZoHt69c6Xk/g+9gcU9wE3IiS/Js
V28wHsnLJbdHCXSpN+hzql75Rn0wFYnCvzjNSDjPQsdd1hKSsJBNdi2V4MAyT5no
PwgOLtrgdr3gIOEumSp03sUopDPz18pWwiOvkv2D735UYsMmPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsR91OevC6Y+BliMyAQzO4jnBdIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JhMGFmMjgtMGJlZC0z
ZGQwLWJlMmQtOTA5ZWI4MmJkMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlH8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlDV8hAcDIVa3vrD7UYzQUslsw9EhbZlcwqxu1lLhY0GDfQIV+KDcRu
qj2BvCiBTiyS4J1OxOnisyzseQuKFheMzsOdxlKwWmwmWxZ/M+vbvLpqjiSb6yjp
k7WOi9Ko0ML1iVdRu7Zzr5Z3vJRc4exTYLCF+t2tECkT3xPt8kzpAEBvPKCjfSAB
JTBeOhCdgYPM7VwlS/Xt5it+MHDat37NMRmNjj/9hOhcyifV9BOI+UeK4hheLfFK
EQ4VKuLFxDTlHko5GGvqK6alAzBJeSwPbJi36Pz3/388EFKL1/H1PVHi8Ymv6HLi
sDcQQEg1mTr35aGz/Cp1bFxcF2dZn1M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:18:09 2025 by rpki-client