Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa
File:                     f09f1947-81ed-3ed7-b33c-8067be1b4763.roa (raw, json)
Hash identifier:          4GuS1ltC7DjL4H6e96VZB83w8fRlt13ZCgKXnGRhLMQ=
Subject key identifier:   E3:58:D9:39:9E:35:DD:1C:28:3F:30:2A:AA:FD:97:6E:A5:AF:33:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463D85615C0FFDB46ECDD8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        50.81.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3d:85:61:5c:0f:fd:b4:6e:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=533db037-4eff-459f-9218-3121cfa54024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:5d:d2:92:fd:56:c6:1c:be:2b:ec:31:f7:
                    97:5f:03:0a:a4:16:20:8e:fd:cc:63:51:50:3e:d6:
                    59:46:41:04:ad:43:2f:50:d4:01:d9:4f:8a:0a:f1:
                    64:c2:b2:85:a4:c9:f8:84:cd:83:f2:b1:26:23:0c:
                    ef:94:b5:28:c3:25:05:4a:fc:8a:6c:6b:9e:fb:82:
                    ee:69:df:b8:01:80:13:04:68:09:a7:3c:25:32:30:
                    90:6c:67:e8:a3:28:15:2e:44:c4:76:6e:51:14:6a:
                    5e:d3:de:3a:d8:6a:01:d0:57:a7:fe:f4:00:1f:a2:
                    25:74:d8:2d:77:e0:1c:07:6b:d5:5a:25:68:30:fd:
                    29:8c:9b:63:f0:58:50:21:92:ae:77:1d:7a:27:88:
                    e2:39:40:c5:45:65:81:34:2c:b8:f5:ad:c1:23:3f:
                    ee:cb:43:8d:e8:0b:1d:b9:cb:0e:bb:a7:d3:a6:59:
                    94:e7:b9:7a:35:1d:0c:b8:0b:48:8f:7c:1f:d3:21:
                    2d:7a:6e:59:29:72:f0:97:c3:be:cc:a7:3a:de:61:
                    3d:14:b5:a7:90:68:ec:7b:a6:9c:cc:6f:c4:eb:79:
                    1d:c0:00:8e:8e:d2:a2:29:c2:23:bf:0e:d0:7d:b3:
                    3b:cb:6f:6e:4d:b2:ed:a2:75:c3:88:3e:38:a5:6c:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:58:D9:39:9E:35:DD:1C:28:3F:30:2A:AA:FD:97:6E:A5:AF:33:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:c8:9f:0c:32:50:63:d7:3f:cf:79:59:7a:d4:79:a6:ba:
         bb:ac:b9:b7:68:0c:18:7f:ff:5c:78:3b:1d:5a:23:c5:94:f3:
         60:01:3f:22:c7:3a:eb:b4:7f:cc:9e:2e:df:b5:f1:b4:88:43:
         39:15:e3:36:89:1b:94:37:88:32:b0:b2:b1:16:a1:c8:f8:e6:
         58:bf:26:9c:44:2e:e2:42:1b:86:07:a9:a2:6f:20:d2:fb:7a:
         fb:2b:ff:47:24:a8:d1:58:df:25:a7:10:d1:44:50:0c:d8:c2:
         2e:6d:a9:f3:fb:01:de:c2:fb:a5:4b:7f:2b:9b:e7:48:7f:2f:
         e3:60:6c:04:6f:5c:a1:d4:26:28:61:b1:e0:6b:55:c1:ae:3e:
         a4:13:32:c9:40:44:00:4b:b1:6b:34:88:e8:98:0e:93:7c:07:
         19:59:02:70:58:13:7d:77:f2:d4:40:16:68:36:70:95:89:04:
         63:8d:5e:98:87:69:59:a4:94:9c:ba:0e:23:32:15:fc:c6:18:
         83:6b:49:ba:b7:51:91:05:e2:e6:e8:70:26:f4:09:b1:70:23:
         4e:6a:85:c5:74:ca:55:c9:c4:52:13:b3:fa:74:81:c5:18:cc:
         6c:7d:a0:24:10:89:dd:fc:fc:a9:92:75:1c:82:3f:36:4d:ea:
         61:d0:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:04 2025 by rpki-client