Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3dcb42-5c79-3c57-bda1-04d19d452db6.roa
File:                     ea3dcb42-5c79-3c57-bda1-04d19d452db6.roa (raw, json)
Hash identifier:          sPbiIN3T4PnChLbF4gdhFl1IhF9JygFmX2OfbCrkN7s=
Subject key identifier:   31:A2:EF:E3:97:59:2F:8D:5C:7B:EC:E6:7D:BC:4B:0F:2D:25:B6:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410DAA7BCE3E6E907D03600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3dcb42-5c79-3c57-bda1-04d19d452db6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.80.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:da:a7:bc:e3:e6:e9:07:d0:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d79db8e4-6af6-43f7-8272-f44353a4641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:22:2a:e3:79:4a:a4:3c:78:32:e5:83:f4:
                    6f:c7:0d:17:bc:85:e1:e4:ef:89:c3:6c:d4:d1:85:
                    22:7b:32:ec:49:64:f7:60:a4:0b:f0:fd:c2:7b:cd:
                    91:d7:2e:3f:5f:04:de:cf:82:21:68:70:19:40:a6:
                    d7:31:7a:71:a8:1d:8c:66:7d:e9:22:24:e6:60:f4:
                    98:fa:2a:ac:e0:c6:36:10:db:e3:bf:7d:33:95:7e:
                    8b:0c:56:30:44:b9:2f:a7:ba:29:0e:ca:3f:15:ef:
                    77:69:29:30:82:84:a9:f5:3c:03:a2:b1:49:91:6a:
                    ff:a2:a1:27:b9:ec:63:d4:6d:49:0b:47:2e:b6:62:
                    e7:b5:94:19:02:de:c2:7b:3e:6f:10:1d:10:a6:9b:
                    51:06:b6:8e:0d:9e:35:7a:f4:fa:3d:29:73:96:aa:
                    e7:7b:e4:9a:89:f5:9e:b3:d4:b4:3e:30:4d:24:57:
                    1e:fd:01:a0:0f:27:4c:8f:ed:72:d0:62:70:7a:d4:
                    49:e5:c7:4e:82:1e:16:a4:a4:50:cf:e9:2e:00:42:
                    e5:fb:37:40:7c:eb:1e:e3:38:8f:cb:fe:42:3c:9d:
                    68:c3:ab:95:b2:08:44:34:66:a1:ea:7d:38:b8:ee:
                    03:03:ba:f2:2b:0f:b7:f8:bd:6e:4c:01:25:41:83:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:EF:E3:97:59:2F:8D:5C:7B:EC:E6:7D:BC:4B:0F:2D:25:B6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3dcb42-5c79-3c57-bda1-04d19d452db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:f4:eb:73:85:01:85:6b:36:5d:5d:cf:9e:23:08:bd:82:
         01:c3:ce:35:d8:d0:26:c7:3a:2a:e6:83:ca:83:aa:8a:69:76:
         fd:7b:af:d4:9c:b6:47:06:39:61:5e:23:8b:67:93:0e:c2:c6:
         cd:5c:56:a4:e5:8c:b7:f8:a7:5e:cd:ce:b8:ec:ec:3b:94:81:
         fe:c6:d3:09:d8:7a:07:0d:01:dd:30:e1:ff:a1:ab:c5:7b:20:
         13:9a:59:df:8f:68:47:3f:ba:52:02:90:85:9f:fe:e3:19:a2:
         76:fa:5a:5e:bb:2c:b1:31:3a:4a:b3:5c:03:63:b8:37:b4:2e:
         f7:c2:6c:89:d2:c0:93:4f:50:7a:cf:d5:30:28:33:0b:4c:95:
         5a:3b:13:4d:07:a7:d6:4d:55:32:d2:61:48:42:ec:97:df:a6:
         ab:1b:8f:af:50:e4:e5:bc:bb:4c:9b:5a:da:fa:34:cb:8b:9f:
         28:ae:87:62:27:fe:4e:8b:11:b8:a7:8e:9e:a7:a5:8a:2c:66:
         07:6f:ad:07:df:d0:3e:9b:84:b2:43:38:6e:ee:6a:98:b0:f4:
         a2:7a:eb:8c:c3:c8:75:e8:e7:7a:77:77:43:81:3c:82:55:7c:
         0e:8b:8b:dd:18:76:b5:ed:d4:97:4e:9f:d5:e9:77:59:e0:05:
         58:7d:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:56 2025 by rpki-client