Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
File:                     3b5d48c6-351c-3660-9ca3-dee164df588d.roa (raw, json)
Hash identifier:          26b+l3p+xhElLo3npPL11YRID81I2pNkzTq7g1+dvRc=
Subject key identifier:   E6:32:0D:3D:DA:3D:CD:8E:49:6E:22:5E:78:4F:58:C0:FA:B4:FB:DE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AB386226D06123E2859A09C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     7029
IP address blocks:        50.96.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:22:6d:06:12:3e:28:59:a0:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=51d221d8-d696-4d6c-a45b-db9adfa3e3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:3b:7a:e0:5b:7b:a7:2b:1f:97:cb:da:0a:
                    8c:87:58:ae:b2:70:f9:f0:b4:f2:18:b1:dd:d8:0c:
                    40:5a:df:90:87:a6:77:38:db:28:32:7e:f0:38:63:
                    8c:8a:b1:3d:ba:7d:ad:aa:63:d7:27:81:3a:a7:6e:
                    c1:a5:67:ff:55:17:5e:bd:e1:2a:3c:61:56:60:ba:
                    84:18:36:7a:62:e6:bd:ed:78:bb:c7:f3:a8:dd:36:
                    cb:ba:6b:03:a1:55:ce:a8:6e:c0:79:55:c7:7c:47:
                    06:53:49:c3:12:b4:4c:e2:b0:e3:7a:b9:35:ec:5d:
                    98:98:c8:e0:cd:e7:dd:55:68:e9:2c:51:6e:7c:e0:
                    bf:53:87:76:f3:86:a1:5f:8a:50:1f:2a:de:19:8e:
                    09:b1:21:86:8e:ad:a6:bc:c3:5f:a4:d3:94:49:d6:
                    0b:b6:c4:c7:db:2f:c1:25:ff:a5:8c:e4:2b:77:18:
                    10:1b:e2:d1:8e:51:65:d1:6e:de:d8:17:a9:d4:a8:
                    99:80:66:8e:53:8c:97:4b:39:87:50:5d:fc:50:19:
                    a1:eb:5c:31:fc:6e:4d:48:5e:2b:9f:2b:69:13:3b:
                    91:48:f6:e6:b2:ca:cf:a2:2f:d0:0b:81:e7:5d:0e:
                    61:cf:7d:8f:9f:a6:ca:75:88:48:63:4f:d3:68:92:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:32:0D:3D:DA:3D:CD:8E:49:6E:22:5E:78:4F:58:C0:FA:B4:FB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:84:b9:97:33:89:69:2d:07:94:1e:c0:60:9d:20:d9:47:19:
         d3:81:8b:34:31:62:bd:62:07:a3:91:18:73:53:6c:68:39:ee:
         d4:d3:d4:ce:f6:f6:a7:eb:53:b9:5e:92:d0:bf:ed:a0:da:14:
         4d:85:b1:f0:fa:26:48:7c:0c:ae:ee:ad:0c:61:08:3d:94:c4:
         62:b6:12:d7:da:6c:19:b0:7c:7b:4e:39:d5:67:6c:f3:94:f3:
         50:59:a8:d8:05:74:8c:be:1c:15:86:73:84:4f:59:28:72:1f:
         26:b9:a9:1c:66:b8:44:7d:3f:80:6e:b8:f4:19:04:ce:1f:b7:
         3f:98:3c:71:02:ca:17:1d:39:69:c4:b7:f9:5a:2c:0e:fc:eb:
         3a:d9:25:46:8a:a3:6b:7e:66:53:ce:0a:3e:a5:3e:79:89:8c:
         ac:7a:49:70:dd:04:6a:1b:0b:02:aa:eb:51:ec:a2:dd:25:b8:
         d7:e4:7d:d9:80:f1:2b:3c:cf:5e:0b:1e:29:b6:a8:89:ec:c6:
         2e:df:d3:72:54:54:de:01:65:d5:85:1d:c9:f7:c1:13:4a:a2:
         d8:53:ef:9d:23:91:ab:f3:4b:e2:18:07:84:76:f1:97:c0:2e:
         08:31:d9:eb:bb:4f:db:be:49:c3:f0:4f:f3:e7:cc:d1:0e:2a:
         22:40:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:15 2025 by rpki-client