Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d912d0-abc9-356f-9c84-bd8c58b5cf1b.roa
File:                     e8d912d0-abc9-356f-9c84-bd8c58b5cf1b.roa (raw, json)
Hash identifier:          IS+RVNBtxzfCqxJ6VYBblK46RaXsgKzs9YRtQHLUt+k=
Subject key identifier:   38:07:0A:76:58:55:98:A0:99:B1:2E:E2:FF:A8:03:1B:48:FB:49:DA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD679C70821C526FC3BD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d912d0-abc9-356f-9c84-bd8c58b5cf1b.roa
Signing time:             Thu 24 Apr 2025 11:52:50 +0000
ROA not before:           Thu 24 Apr 2025 11:52:50 +0000
ROA not after:            Wed 23 Jul 2025 11:52:50 +0000
asID:                     19905
IP address blocks:        50.83.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:67:9c:70:82:1c:52:6f:c3:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:50 2025 GMT
            Not After : Jul 23 11:52:50 2025 GMT
        Subject: CN=c7727a27-5b7f-4636-b4e3-95e67aabe068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:cc:dc:74:c8:65:97:0f:b5:d2:29:c6:24:
                    ef:5f:38:ff:07:65:24:d7:20:ef:75:e8:b8:f9:37:
                    49:5c:99:c5:6c:f6:ce:ee:a3:7b:f8:8c:7b:c9:3b:
                    8c:57:32:82:7c:ac:33:55:18:a0:54:a8:4f:66:5d:
                    74:43:a4:52:36:fe:7d:37:be:70:f8:b3:a4:01:14:
                    79:34:5e:ea:45:30:4a:c9:94:ed:d9:9c:b9:04:bd:
                    a6:15:fd:36:f1:10:f3:f8:ea:9e:fb:0a:3c:1a:0e:
                    98:00:cd:64:40:83:f6:9d:11:d8:7c:f5:1b:80:2f:
                    62:1e:3a:cb:f0:77:83:94:0e:1b:d3:11:3c:f7:65:
                    d4:b9:71:10:6b:fb:8e:ef:d8:a3:a9:0b:66:df:73:
                    2f:38:05:1a:36:4b:cc:60:ce:cb:04:ca:b9:73:6f:
                    af:5a:b4:8e:55:a6:cd:39:60:0e:34:3f:b5:f9:5e:
                    0d:d7:0f:2b:b1:12:58:26:a3:f0:87:39:8e:d4:de:
                    fe:4b:d1:94:87:f8:eb:66:5e:9d:8b:85:ff:fa:ee:
                    0c:ba:e8:7a:7c:b4:c0:51:5d:dd:f8:b6:60:a9:ea:
                    7d:4c:d0:a4:e7:8c:b3:fd:2f:93:03:a4:56:88:67:
                    33:c6:1c:08:7c:c8:28:14:4b:32:13:73:d8:37:07:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:0A:76:58:55:98:A0:99:B1:2E:E2:FF:A8:03:1B:48:FB:49:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d912d0-abc9-356f-9c84-bd8c58b5cf1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:6f:e2:c2:b2:fe:e1:49:c9:c0:df:e2:a4:31:ca:7b:50:
         b5:e9:3d:3d:ac:48:6b:14:e3:da:06:c3:f1:e6:e0:0c:86:17:
         a7:bf:64:a2:7c:d4:97:19:17:b9:73:1e:f6:35:24:2d:92:13:
         3b:12:ea:c9:04:05:d0:60:e4:49:f8:b4:71:18:23:8c:aa:51:
         d5:48:af:6c:34:4b:90:2a:86:78:cb:0b:8a:75:1e:d5:51:1d:
         c1:63:14:4c:b8:df:49:5f:1d:cd:f9:a4:ff:dd:38:90:50:45:
         35:25:8d:fd:e3:9c:b2:d6:9e:43:fd:9f:3b:f6:bd:50:12:fb:
         fd:99:09:97:05:67:d0:a3:34:87:3f:d5:22:6f:d5:20:36:68:
         4b:f9:98:46:34:72:d4:9a:a8:ea:36:f7:42:1b:5d:f9:8b:a9:
         2f:f7:48:85:2d:55:d4:f0:3e:aa:88:6c:b6:cf:03:5f:98:ca:
         21:c3:47:75:dd:cd:19:71:0d:48:5e:e2:cb:85:9b:0b:d4:2f:
         ae:1d:67:4e:b0:9b:be:25:29:91:86:7f:7b:b1:16:75:d2:c9:
         d4:5a:51:5c:72:41:63:c9:44:7f:b3:38:0d:41:c4:af:5a:88:
         a6:bf:69:44:70:5b:63:76:33:69:9b:fd:4c:bf:5e:f4:a8:48:
         ad:ce:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:18:23 2025 by rpki-client