Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de2246db-3645-36fc-aa8e-977853eaba28.roa
File:                     de2246db-3645-36fc-aa8e-977853eaba28.roa (raw, json)
Hash identifier:          ybxPuKLkiUKMF4HA602jmItvfIvMDejDc2SH9CCTtb4=
Subject key identifier:   E9:4B:91:14:9B:E4:55:20:39:84:AB:47:B4:D9:3C:55:4B:2E:58:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412441953BC3204A592C980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de2246db-3645-36fc-aa8e-977853eaba28.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:44:19:53:bc:32:04:a5:92:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e33b0c62-93b3-44a2-9814-c6c700f628db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:e6:53:9e:31:98:38:57:ce:3c:d4:6a:e2:
                    f5:f7:62:33:b8:96:35:48:ec:c7:6e:5c:13:af:65:
                    52:9c:e6:72:90:3f:ba:75:34:32:47:81:a3:65:91:
                    d4:2c:de:1f:bb:c6:a8:0d:47:d3:aa:ba:b6:aa:ba:
                    a0:9d:2a:c1:2b:cb:8a:d1:b7:b5:e2:5c:9d:c6:84:
                    86:73:91:3d:23:31:f0:8e:70:05:12:12:7c:8f:63:
                    13:cd:90:21:fc:6f:ae:45:3f:85:fe:5f:88:bb:a9:
                    2d:8a:ad:2e:c3:09:86:95:7d:b1:49:18:fa:5d:7c:
                    71:19:93:72:fa:37:9c:f4:a6:c7:e7:66:8e:fc:84:
                    89:7f:1a:f1:e1:ef:f8:61:10:c3:03:4e:03:f9:b5:
                    70:c0:00:67:59:89:d1:38:cf:c1:66:98:00:76:44:
                    81:03:c5:31:64:01:86:c3:98:26:0b:c0:5a:75:00:
                    35:25:22:d7:7b:20:c6:98:22:43:16:bb:f1:dc:82:
                    20:eb:c9:74:6c:8b:cf:90:98:e2:91:4a:e6:2c:70:
                    14:b4:5c:6c:82:ca:45:ea:c6:e1:99:ee:f3:87:8a:
                    0c:57:ae:5b:d2:3f:4e:ae:e1:e2:c4:06:9d:fe:dd:
                    fd:bf:ee:3e:e7:88:7b:5b:8c:72:a0:89:a0:52:cb:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:91:14:9B:E4:55:20:39:84:AB:47:B4:D9:3C:55:4B:2E:58:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de2246db-3645-36fc-aa8e-977853eaba28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:3c:2a:19:db:76:94:72:29:8e:42:b9:40:01:a1:b9:3d:
         ff:15:f1:8e:21:0f:5b:c6:05:c1:21:fe:a5:f9:03:98:ae:ea:
         ac:87:d5:49:0c:38:8b:60:a9:97:8a:2d:55:49:3f:c5:00:d3:
         5f:57:b5:65:2f:0a:da:61:d1:32:8f:3c:00:ac:03:d5:b2:8b:
         d7:59:c3:2d:f0:82:ca:97:0d:a0:a1:a4:7f:d4:44:f1:b9:49:
         62:c9:c8:42:e0:97:9b:dd:72:05:46:0b:9a:08:e6:53:70:bb:
         1a:00:d3:2e:fd:e5:f8:90:4b:91:13:ee:e0:96:ce:4b:7a:70:
         c9:24:49:ac:8f:81:59:40:91:3a:7a:af:7a:47:c4:ed:97:99:
         7c:4e:bd:40:24:49:d7:e2:63:96:cc:7e:f8:a5:9f:92:0a:54:
         67:51:8b:b6:65:fe:8c:2f:14:b4:65:b7:72:ef:c4:63:6b:92:
         e4:a9:56:c6:ec:78:71:d8:59:65:f0:7b:b3:52:d1:60:14:4e:
         25:0e:18:58:1f:71:7b:9a:95:1e:91:f3:bc:c2:1c:f7:58:47:
         9d:a6:5d:f6:dc:25:15:8e:4c:52:77:2d:a4:84:f8:fd:06:bc:
         4a:ad:9c:22:ed:90:4f:17:56:78:30:c9:b5:f1:d7:b7:71:a2:
         63:0f:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:38 2025 by rpki-client