Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa
File:                     e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa (raw, json)
Hash identifier:          4AsBVrRFaNholVytwE8DmV0RHsQp9LPVoz0M7G6lAJw=
Subject key identifier:   D6:17:F2:76:8A:C6:30:17:98:BF:E0:48:C0:68:A2:D6:5A:1A:55:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841250D611BF80C115E2E700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.80.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:50:d6:11:bf:80:c1:15:e2:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=242263ab-76c4-4310-8ba1-cb6598254d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:1c:0e:93:5c:82:8c:68:48:58:38:99:bf:
                    8e:a8:79:45:a1:79:d6:e2:3e:ee:c0:72:46:12:83:
                    85:e8:30:6a:f0:f6:0a:88:be:39:41:d3:7b:57:b7:
                    3b:e9:4f:ba:91:06:4f:e4:75:9f:4f:6f:64:5e:de:
                    fd:1c:c7:88:d4:c3:ec:f2:04:d2:00:28:eb:0f:09:
                    1a:92:fa:79:0a:c0:75:a3:d7:ae:65:58:18:96:00:
                    01:16:4e:5b:11:1e:2c:d1:43:27:08:1c:32:eb:9d:
                    96:e2:fd:61:21:e4:bc:01:f2:d3:49:54:a4:be:f9:
                    20:cf:b6:00:9e:d3:fd:08:a4:99:82:19:5c:f5:d3:
                    41:6e:34:50:44:e3:d6:ad:98:dc:f3:4b:2c:f2:74:
                    e7:f6:89:86:0d:45:d7:bb:98:10:e1:c6:21:06:ca:
                    16:a2:25:59:78:c9:2b:3d:40:c5:fb:49:c6:39:fd:
                    99:b3:9d:c2:24:f9:89:16:cd:fb:43:01:b1:56:b3:
                    dd:8e:25:f7:42:a1:5f:0a:49:7b:e9:21:a5:5a:91:
                    88:3a:af:a2:c7:1b:3f:6c:fc:67:d2:07:a8:e3:bf:
                    36:d5:9a:60:b4:e1:8b:23:c0:38:10:0e:42:1c:1a:
                    50:72:4e:1d:6b:b3:a8:68:c4:a7:e1:b8:61:33:90:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:F2:76:8A:C6:30:17:98:BF:E0:48:C0:68:A2:D6:5A:1A:55:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:ac:35:82:b8:d4:40:48:c9:1e:48:7c:8c:47:64:3f:28:
         b1:06:29:6c:86:37:3b:2f:78:1d:67:ab:13:11:a2:31:90:9a:
         84:fa:9a:fe:3d:a1:1e:a2:85:5f:f4:fe:2c:f6:72:d6:c8:60:
         84:5b:1c:01:e2:c0:a2:f8:24:ed:4d:72:61:ab:fc:57:b0:43:
         36:a5:52:53:b0:ac:e7:50:f9:b3:20:4a:29:43:1f:4e:09:6b:
         f3:fd:22:dd:01:15:fb:a0:c7:c1:6b:1c:b7:35:4b:bb:38:72:
         ce:96:53:ea:4d:11:ac:f0:16:84:3e:0c:2a:e4:ac:c4:a4:48:
         51:39:fa:5a:aa:9a:0d:1e:f3:3d:10:80:89:63:ca:25:38:b2:
         01:b8:16:23:2e:48:93:99:34:f1:57:14:06:7e:7b:39:f8:22:
         fb:6b:3b:e5:c4:b2:d4:30:8f:24:7e:a7:b1:9c:f7:ea:5c:67:
         2e:2d:89:11:fc:3e:86:35:d3:54:ba:60:2a:52:78:e4:79:b5:
         7b:9b:44:88:c1:5f:33:01:19:2b:81:4e:d8:c7:e6:51:46:86:
         6b:35:cf:53:2d:8e:59:83:b9:ec:a7:da:0f:6b:bf:3b:a5:02:
         5b:1b:f6:f3:11:fc:f6:3e:98:c1:d9:81:de:f9:e4:4d:a5:9b:
         1a:c5:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:55:33 2025 by rpki-client