Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa
File:                     d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa (raw, json)
Hash identifier:          HsjXwaMZiT51G/Z8+QLbZ8En4VCKvsqU4LKcR/h5+Ag=
Subject key identifier:   07:43:CB:8D:C7:D9:D7:E5:C2:D5:FC:1B:E0:ED:34:35:20:64:7A:5E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463CE1B223239FD8E4DF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        50.82.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3c:e1:b2:23:23:9f:d8:e4:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4cda7325-c503-49a5-8ef3-3163778a4cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:27:7c:9a:6d:1a:11:24:cb:64:a7:f9:94:
                    75:3e:61:ec:14:4f:d7:68:41:16:b2:50:f5:cb:33:
                    3f:cb:3e:04:de:80:2d:ab:76:a3:9a:94:df:a6:01:
                    2c:22:7b:68:82:3a:a1:81:a7:84:9c:ab:53:94:13:
                    ea:a1:24:23:74:a0:2b:e5:47:2d:f1:d8:1a:37:2f:
                    9b:87:6d:16:b7:11:7c:af:6d:3f:8c:05:1a:cd:dc:
                    a5:61:47:e4:f1:8d:6a:33:98:03:bc:fe:21:c6:01:
                    cc:1e:3d:24:05:92:01:9b:c3:57:50:fb:9c:94:be:
                    2e:e6:98:ab:20:59:f5:ac:d0:9d:e0:54:6c:a8:25:
                    e7:98:d1:c1:05:07:18:d7:26:d3:4c:b6:8f:e5:30:
                    93:69:73:03:03:f7:4d:29:f3:3b:c7:5f:94:4d:79:
                    eb:c3:6c:83:7f:2d:38:b3:62:81:43:c7:54:ab:6d:
                    4e:46:4e:8a:48:00:4d:85:fe:5a:b1:b6:84:31:fb:
                    e9:ec:e1:b4:28:e3:7f:72:10:b5:30:c8:00:cb:72:
                    02:c4:a7:aa:04:b4:82:85:78:d3:b2:53:26:a5:12:
                    0f:97:e3:80:0d:b2:4c:62:ee:37:32:1b:59:63:eb:
                    78:94:ac:3b:79:8a:82:fe:7d:17:91:db:80:9c:67:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:43:CB:8D:C7:D9:D7:E5:C2:D5:FC:1B:E0:ED:34:35:20:64:7A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:76:35:77:15:c7:25:3a:6c:07:92:1b:36:a0:22:52:b5:
         38:c3:ee:a7:38:3d:c3:9d:c0:43:e0:c2:f2:20:da:62:27:ac:
         43:2e:02:f3:4c:c8:5e:68:be:b3:e7:d2:72:40:69:dd:c1:c4:
         84:b5:1e:2a:2c:cb:ba:5f:2f:d3:54:1c:84:40:35:9e:59:6d:
         d8:7a:b3:37:f7:b7:04:f1:33:96:e1:fe:3e:4c:35:8b:db:f0:
         76:83:a4:66:ed:8a:a6:a0:0b:3f:48:84:ec:c8:36:53:fe:80:
         52:bc:63:93:cc:68:6d:79:ef:b6:53:70:ea:22:79:6c:05:1c:
         f7:85:f8:15:6a:23:f4:25:df:79:23:90:f6:84:73:fc:dd:00:
         0d:ad:9b:06:c9:0f:3c:7e:6b:40:62:47:8f:82:df:4f:e5:18:
         5a:c8:63:eb:60:7a:b9:b2:5f:a1:c9:7d:a3:da:2c:27:95:30:
         07:09:34:1e:89:b3:82:c0:8f:4e:d7:68:a4:95:64:63:c3:b8:
         5c:cd:5b:28:5d:82:2d:28:c4:4a:47:f8:3f:3e:eb:24:78:31:
         ec:c6:fd:d2:4b:c8:11:a8:71:b2:6c:a1:fa:eb:93:4f:c8:f2:
         23:a8:15:de:14:1a:56:96:df:ff:60:7e:1d:3a:86:b5:fb:ef:
         fa:65:7e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:26 2025 by rpki-client