Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd305e6d-b17c-368b-bb59-8c60a39c463f.roa
File:                     cd305e6d-b17c-368b-bb59-8c60a39c463f.roa (raw, json)
Hash identifier:          YpGUbd0Sa8vRv3qkiu80Nmea/JBzqZ0HzUWM3Nis7fc=
Subject key identifier:   37:B2:FA:0D:01:22:04:DD:CA:C5:D8:7E:96:0D:A1:F6:C1:81:E0:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1EB3F55E0E00B54A4F40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd305e6d-b17c-368b-bb59-8c60a39c463f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1e:b3:f5:5e:0e:00:b5:4a:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6e063c0a-14c1-4e5d-9eb1-d36894a91027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:1e:08:44:3b:98:25:05:80:1d:12:40:4d:
                    7f:8d:40:96:4b:53:c8:f7:cf:da:4c:9d:58:d2:66:
                    7b:2a:61:2a:bd:6c:ea:d1:c7:34:52:3e:d2:3a:b4:
                    7b:45:b8:20:65:81:a4:00:1c:52:b5:d5:ad:ca:96:
                    62:c3:49:67:ef:01:cd:14:1b:90:6e:db:9c:26:34:
                    18:5b:2b:89:6a:54:c5:5f:09:53:56:36:e1:d4:f4:
                    ab:56:92:9f:40:0b:29:75:52:fa:78:43:6b:8e:ff:
                    e7:bc:39:70:39:83:20:fb:eb:75:9d:56:79:37:2c:
                    e5:a7:5c:9f:8e:ec:1a:d3:7c:24:e7:36:f7:cf:da:
                    36:d7:d5:68:a0:5b:83:21:ee:4c:70:a5:3c:f7:65:
                    96:f1:a7:55:93:97:72:38:2b:fe:ec:d6:01:6f:54:
                    c8:0d:ba:c3:c6:6d:50:42:f0:cc:12:8f:99:ca:07:
                    06:f8:65:13:32:d6:50:d4:c1:23:2a:28:41:04:66:
                    9f:5a:e7:2d:2c:28:10:92:9f:a5:e9:66:d4:be:1f:
                    1c:9b:bf:4e:64:67:34:c0:9d:2e:cb:54:47:d6:01:
                    20:af:cb:c6:9d:73:83:9c:da:4d:1b:6f:15:68:35:
                    e9:36:8d:b8:1c:30:99:12:1a:3a:ea:39:f2:55:f0:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:FA:0D:01:22:04:DD:CA:C5:D8:7E:96:0D:A1:F6:C1:81:E0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd305e6d-b17c-368b-bb59-8c60a39c463f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:63:a3:e3:60:6a:6e:f5:72:ca:3d:df:84:d2:63:f2:20:
         c6:08:01:2d:07:10:0b:10:d1:42:72:cc:d2:91:47:aa:92:b5:
         4c:57:80:e5:bc:9f:02:11:1f:2f:63:fc:3c:c4:c6:aa:49:a4:
         5a:2b:08:ba:22:e6:50:79:f5:81:ac:ae:5a:7d:03:70:c0:c7:
         00:1c:89:60:e7:be:b1:3d:9a:d9:21:a6:60:12:31:2e:49:ed:
         7c:b3:fe:f1:87:ab:90:24:de:28:6e:4b:38:e4:83:ab:73:f4:
         00:98:53:8b:5e:c0:c6:37:5b:5e:66:57:fb:e3:46:dd:d4:29:
         7a:e0:cc:f0:c3:4f:39:6f:16:00:72:9b:69:5c:1d:f4:91:63:
         74:8b:4f:41:b7:52:42:61:c9:df:4d:f4:bb:31:27:03:a2:3d:
         fa:5f:f7:f3:5b:ed:b8:56:31:e5:3c:b4:fe:4e:e3:20:a4:30:
         29:2c:4d:cc:fb:38:a2:25:3d:22:46:9a:4b:55:b8:15:6c:12:
         1a:07:5b:48:21:34:92:cb:f9:d0:81:d2:b0:85:e0:f0:95:86:
         5e:3c:7f:76:15:df:7f:5f:dc:89:63:2f:da:bf:7e:c2:c3:1b:
         58:21:c5:d9:08:ad:a4:f8:50:44:82:7a:a6:33:75:05:67:ad:
         84:5a:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:57 2025 by rpki-client