Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa
File:                     da07970b-00e7-351b-b5b0-2af37eb91af3.roa (raw, json)
Hash identifier:          7Qk9zTj+C4VM06EnIfw0HrwihajI5CEH7MbMCp9SHWs=
Subject key identifier:   97:C8:53:C4:48:6C:57:56:79:06:73:66:DA:64:A4:D5:B5:F5:68:C1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DC0305397726E694749E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.80.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:03:05:39:77:26:e6:94:74:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=d338f21e-0bbb-4a37-893a-5b9feb7c6c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:6d:0e:71:28:4e:b7:d1:69:58:15:85:b6:
                    44:4d:77:7d:b8:21:57:21:28:5c:0c:ce:d8:90:20:
                    b8:54:59:0d:25:29:7b:0e:4f:8f:a9:69:60:19:0e:
                    9a:ff:ea:82:58:63:0c:e0:cb:55:a4:3f:6c:64:f8:
                    53:b0:12:79:0d:ff:6e:a4:c9:3d:01:5f:43:9c:5c:
                    94:b3:89:ee:87:de:1c:cf:35:9c:0f:56:5b:d8:21:
                    1c:c3:eb:e3:81:24:99:96:58:d4:fc:8d:fe:ae:63:
                    dd:87:e7:b7:1e:2f:ad:18:bc:8e:ac:b9:e0:25:b8:
                    d3:5c:a0:af:7c:ad:2f:d3:77:8f:c6:1f:23:2a:58:
                    68:29:b4:2c:7e:59:18:e8:e8:4a:c2:1d:b5:24:cf:
                    e4:a9:e1:53:9b:15:28:7e:df:82:e8:aa:b5:d8:c9:
                    33:48:64:fa:77:41:be:49:aa:4a:e6:52:e7:ff:07:
                    fb:da:7d:43:87:a1:92:55:7b:f0:20:6a:0f:51:06:
                    15:72:b3:3b:e4:f0:f8:5f:e3:f0:35:88:1f:d6:77:
                    b8:84:0d:75:85:42:59:35:1a:76:f5:71:9c:9c:f6:
                    f2:f8:c4:ef:d9:68:4f:7f:7a:6d:f9:7d:f7:3c:5a:
                    da:ae:12:17:0c:10:88:95:4f:31:07:fe:bb:37:94:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:53:C4:48:6C:57:56:79:06:73:66:DA:64:A4:D5:B5:F5:68:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:b9:80:3a:49:79:a1:06:a5:c3:1a:09:8b:a4:8a:6b:09:
         ac:c0:84:59:68:e6:d4:23:e6:bf:c1:10:be:37:8f:8b:c9:9b:
         da:78:18:b4:95:9d:bf:41:1d:97:37:cb:64:56:0f:1b:14:5e:
         df:14:82:e6:70:1d:fd:b9:1b:f0:d8:8f:f8:72:29:59:80:98:
         f6:1e:6b:f1:70:cb:2c:3a:b0:2c:30:ad:93:c8:17:2a:41:b7:
         18:e8:65:33:b5:40:45:38:9e:1d:ad:fe:8d:cc:d0:28:4d:37:
         21:8f:ab:d2:95:73:d8:f6:67:31:b1:0a:59:bd:b4:fb:d7:62:
         6f:67:8e:40:82:39:43:88:a0:72:e9:f9:ab:51:e1:e4:2f:8c:
         26:9e:62:b1:77:13:09:8e:a4:2a:e3:0c:e7:d4:e9:f9:24:12:
         8a:9c:41:44:69:f8:b5:fd:23:ab:60:e6:e3:a5:fd:3b:67:77:
         74:f5:9c:d7:60:c3:37:9d:5b:dd:d5:28:c2:21:e4:0e:ac:b2:
         a3:cf:8e:20:44:80:cd:6f:5b:ef:91:3d:a1:17:f4:ef:ee:31:
         9d:17:53:4f:02:25:fa:20:c9:76:d2:cc:74:7c:23:a8:ec:76:
         63:2b:10:46:f9:7c:e6:f9:5a:b6:ca:d4:33:f3:b3:4f:e6:15:
         4f:a3:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:56 2025 by rpki-client