Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa
File:                     f09f1947-81ed-3ed7-b33c-8067be1b4763.roa (raw, json)
Hash identifier:          LIjq8G9Uul/edIYxedZ0JI3dHQYFNOJlxOsb9FpvnGw=
Subject key identifier:   70:30:BF:26:38:A9:1C:67:D0:15:7E:32:C9:9C:B1:39:A5:BE:85:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF52E5B9CD4FB5E992EAC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.81.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:52:e5:b9:cd:4f:b5:e9:92:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=6d7578d6-bdce-4e7a-a360-c064bfdf23c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:35:c7:6c:bc:9c:58:44:09:1f:78:6c:53:92:
                    2d:3f:51:d5:26:c9:90:8a:e3:3c:b5:7d:f5:5a:79:
                    37:ae:c2:f1:fe:66:f0:be:6c:94:8b:7a:98:51:79:
                    85:a7:23:2e:bb:76:4d:1c:21:9b:7f:46:e7:db:c9:
                    fe:eb:c6:77:36:ff:3c:6f:b3:d1:bf:4c:d9:e6:7a:
                    09:a3:7f:ce:a6:da:5a:04:f1:a1:2b:98:b2:88:66:
                    0c:94:bf:2c:00:7f:a5:13:0a:13:a9:af:35:b1:b0:
                    b7:7f:9a:b0:d3:43:8e:a3:f4:03:70:9b:85:fb:21:
                    b5:28:c6:fd:ee:d5:39:a6:b7:9a:6c:e5:e0:91:58:
                    ea:6a:02:c1:3c:89:eb:a6:ab:79:6c:19:de:06:a4:
                    3c:eb:ca:65:3e:6f:9e:79:1d:94:01:04:7e:5d:bc:
                    a4:75:cf:23:13:16:9e:3a:2c:57:91:a5:26:58:c8:
                    78:22:3d:db:f4:29:fb:0a:eb:ca:07:a4:d7:81:21:
                    51:ce:f9:a3:34:b9:1c:53:e0:44:ed:0b:8d:e8:07:
                    d7:a5:e9:c2:50:b1:4f:9e:05:12:df:f5:7e:64:d6:
                    33:0f:80:bd:15:bc:90:5d:13:b2:d7:d6:9c:0d:5e:
                    54:94:8d:a9:11:bc:2f:ba:48:44:1c:c2:70:31:bc:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:BF:26:38:A9:1C:67:D0:15:7E:32:C9:9C:B1:39:A5:BE:85:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f09f1947-81ed-3ed7-b33c-8067be1b4763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:40:69:23:83:50:c0:7a:6d:b6:75:99:08:d2:6c:9a:1a:8f:
         71:24:64:cc:5b:16:40:f4:37:60:b5:3a:80:be:d5:8a:78:a9:
         e0:73:29:b3:ed:f4:f0:56:5d:c9:72:12:9b:9d:bb:98:46:da:
         96:20:49:5f:60:02:af:76:02:f9:2a:18:fa:ac:34:20:a7:a7:
         65:0d:56:cb:15:3a:b2:6b:85:cd:ac:64:03:13:a0:67:a6:46:
         1f:2b:d8:16:51:29:3e:64:b2:88:f1:bd:d3:5c:70:cf:69:ab:
         41:84:74:85:95:84:3d:d1:5d:1d:5a:27:e7:f8:1e:3c:02:98:
         87:78:79:05:d1:34:05:e1:a8:c4:5e:14:f3:e7:15:60:7c:f4:
         0d:95:15:19:8c:df:71:75:0e:fe:21:82:26:a1:db:f1:94:7a:
         72:4e:b7:c0:74:e6:f4:6b:31:21:4a:07:70:fe:8b:4b:70:f1:
         eb:27:73:6d:8e:98:7c:b1:4b:d9:34:d2:46:67:57:b9:a1:a9:
         b5:d5:1e:37:14:52:93:e3:63:73:c7:df:fa:3d:7e:c0:f0:b9:
         8a:ad:72:fb:b8:c3:68:ed:b2:ce:52:3e:ed:81:99:a1:49:7d:
         5e:05:0a:34:64:fd:3c:7f:6a:93:bc:c9:29:53:c8:90:c9:d3:
         5a:9e:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:56 2025 by rpki-client