Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f44abe15-50fd-38aa-b932-674cce28ce89.roa
File:                     f44abe15-50fd-38aa-b932-674cce28ce89.roa (raw, json)
Hash identifier:          BtWBfMwX8XXekFFWSg+rcc6KfeXWKe4pk0+t9TAMM1Y=
Subject key identifier:   34:67:1A:51:6C:8B:82:7E:A1:69:98:B6:E0:97:60:F0:D3:AE:04:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA132EE9B55B7F70E2D840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f44abe15-50fd-38aa-b932-674cce28ce89.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:13:2e:e9:b5:5b:7f:70:e2:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5f349f75-8c66-459b-a038-2daaccc8308c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:0a:27:dd:46:62:d7:0b:d7:79:77:f8:ec:
                    81:54:77:46:87:4e:25:b0:00:f5:6a:ce:9e:ba:50:
                    4b:f7:cd:65:88:de:47:0f:28:c6:68:c1:71:77:e2:
                    d6:f0:1b:ea:1d:52:a0:2b:2a:49:ab:a9:60:f2:4f:
                    2d:9f:a3:36:e8:16:b9:ff:34:2b:f2:71:7c:0e:5a:
                    ad:82:2a:4c:b2:8d:ef:17:68:9b:02:dc:42:2f:0e:
                    cb:99:bb:c3:0f:6c:ad:c3:37:af:70:20:34:c7:6a:
                    bd:32:70:0f:32:e7:5e:b9:5b:9a:d9:68:02:a9:db:
                    61:32:8f:02:37:b6:cb:1a:f6:0e:a1:80:fb:66:d0:
                    d0:a1:a5:b4:7d:ef:8c:a0:07:7e:05:40:d1:58:c1:
                    a4:51:89:35:6d:0b:fc:e9:cd:b4:07:f2:d4:65:28:
                    f9:8a:7a:0d:e4:d5:a5:ce:ad:32:f6:31:45:93:be:
                    93:fe:7b:5f:a0:5d:d2:8c:82:3a:e0:d8:69:ff:ef:
                    16:81:a9:ce:c3:bd:2f:4a:5c:5b:02:bc:67:81:29:
                    8c:a1:d3:0c:79:80:87:2d:9b:9f:bb:7d:bb:5e:0f:
                    91:cf:76:15:0d:dc:0c:49:cf:c5:02:65:65:2d:01:
                    23:0e:53:3d:9d:3d:e8:a5:f1:9a:cc:86:1a:78:38:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:67:1A:51:6C:8B:82:7E:A1:69:98:B6:E0:97:60:F0:D3:AE:04:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f44abe15-50fd-38aa-b932-674cce28ce89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:90:3b:e9:1b:9c:d5:a6:be:09:e2:47:c3:33:2b:b8:e7:77:
         8f:ad:ab:04:15:4b:1a:6a:2a:86:ee:a4:bc:bc:a5:37:5b:c7:
         9d:49:c3:c2:74:c8:26:2c:3a:f6:df:68:34:d8:f9:0b:cd:39:
         28:d5:1a:b0:e8:67:76:e0:f7:94:b6:7d:12:87:19:62:2b:fd:
         1e:7e:ce:6c:2b:e0:32:19:b8:0a:ee:85:36:68:ce:c0:b3:e2:
         6f:e6:b0:ef:bb:14:3f:cb:09:16:de:1e:aa:a8:eb:49:a2:6c:
         10:db:06:1a:0c:32:04:a9:ba:46:82:4d:41:7d:0b:ef:0f:5b:
         7d:ad:36:b6:9e:20:74:93:2d:04:74:18:a2:8c:87:22:4e:2e:
         94:c3:a7:b7:78:64:70:82:09:52:27:3d:d1:8c:08:09:1f:23:
         90:40:66:57:89:08:10:b3:8b:fe:ac:7d:17:b1:51:a8:cf:92:
         22:0d:a1:ea:3d:0f:cf:bd:34:ed:b5:53:3c:e8:fb:a2:7f:44:
         97:b3:6f:0a:7e:17:34:97:21:e2:f8:7b:6b:f4:7a:99:ff:64:
         0c:b8:86:04:2b:87:29:21:dd:76:aa:35:72:b8:e2:b0:5d:62:
         85:b8:09:0f:6c:99:40:99:3e:a3:f6:4a:28:2a:ef:b0:66:c0:
         fa:8d:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:30 2025 by rpki-client