Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
File:                     3f299cab-9486-3373-857f-a888d71f4f3e.roa (raw, json)
Hash identifier:          WaPBxQRv2HKh3gjfyXYARWZijrw/tsioIMBP+HVmAB8=
Subject key identifier:   03:B8:BC:57:1B:C4:CB:FD:BB:2D:4C:19:FA:40:6C:FF:5C:6D:54:9E
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584A96368F250E53F73380802BC0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     26337
IP address blocks:        50.6.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8f:25:0e:53:f7:33:80:80:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=2cf40f2d-487d-4f12-a5f2-a888779d2f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:2a:9f:68:cc:8f:fb:20:68:fd:d2:96:1a:
                    37:a6:4f:7e:3c:eb:e9:41:ee:dc:2c:d8:fe:a9:af:
                    d3:ee:d2:67:7f:d9:e2:47:71:7f:f8:8e:c8:f5:e6:
                    7c:c2:e7:a7:7b:03:94:61:6e:a3:33:9b:78:83:b7:
                    aa:bb:c5:07:77:de:87:ec:e9:e1:f0:81:ab:91:1b:
                    e0:6c:50:f1:e9:8b:e4:6b:c2:26:57:44:c2:96:57:
                    ba:2c:05:3b:35:ee:f9:42:ec:e3:6e:f5:87:2a:45:
                    9f:b4:b7:59:9b:29:fe:ba:3b:ef:d7:6b:b7:2a:3c:
                    c3:1a:ac:38:66:b7:1f:66:94:d5:7f:bc:38:a3:37:
                    e7:3f:47:76:a5:44:4a:8a:ca:36:45:ad:ee:78:00:
                    0e:06:70:ba:68:4f:92:9f:57:a5:b7:64:40:13:41:
                    39:2e:9f:da:e2:61:c8:17:76:85:8f:aa:71:ad:10:
                    dd:b7:c9:95:39:92:ea:1b:6f:4e:69:b7:39:bc:dd:
                    45:01:e7:5d:3f:3c:2c:00:b0:0e:43:a5:9e:20:57:
                    84:a1:96:04:6c:4e:e6:cd:d1:60:88:df:27:6c:5a:
                    ff:ac:97:ce:c3:d5:97:9d:ce:14:f9:60:3f:21:d2:
                    41:cb:33:32:fb:47:83:91:34:c7:96:bd:4a:cf:b4:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:BC:57:1B:C4:CB:FD:BB:2D:4C:19:FA:40:6C:FF:5C:6D:54:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:e9:59:c7:b7:a1:03:e5:95:cb:01:ad:42:7d:fa:fa:58:
         37:e0:0f:55:60:bb:8b:c7:d5:22:00:9d:ec:9a:d9:e7:d4:61:
         5e:b1:f7:e7:ba:64:32:eb:d7:67:85:4b:6c:69:d1:4c:cc:ee:
         15:d7:60:59:4b:79:88:0b:fe:fa:31:76:a0:98:3d:7e:a7:d5:
         65:92:e2:4e:41:e8:1c:ac:f2:08:d0:af:3e:07:69:a4:fd:22:
         74:98:c5:05:6e:58:05:dd:06:fe:bc:a7:99:d3:93:71:3e:5a:
         8b:b1:68:de:f6:33:95:85:4e:75:e6:e8:da:48:77:d6:e8:5e:
         b5:cb:5e:2b:2f:3f:88:67:ef:64:de:40:14:2a:00:de:7e:57:
         4c:a3:fe:96:40:2e:0b:e2:60:f9:e9:09:51:25:f4:12:31:97:
         5c:52:3f:89:31:84:e4:ce:68:5f:20:07:ba:de:80:31:e6:97:
         b4:62:51:7a:52:14:d9:ae:4a:e5:74:10:90:9d:43:28:8f:6e:
         a2:ae:98:c5:aa:8f:b4:a5:0e:d2:e1:af:15:9e:8e:45:71:e5:
         80:b8:2d:79:a6:b4:94:ec:3d:89:67:2d:ea:d5:ce:03:5d:fc:
         9d:d6:7a:ca:e1:58:26:f2:90:ba:41:f5:48:10:89:e2:da:9e:
         30:4b:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:11 2025 by rpki-client