Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/a0815829-a1eb-3b72-a38d-129458208e02.roa
File:                     a0815829-a1eb-3b72-a38d-129458208e02.roa (raw, json)
Hash identifier:          Tm04gNhYeLc/PB2zhRUG8Neu1gaA/mIHKKQdu0fft30=
Subject key identifier:   33:54:49:C4:61:02:13:C5:22:A8:58:05:D1:C1:B5:00:B3:C4:BF:97
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849FB45286A5DF3C4854FD58880
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/a0815829-a1eb-3b72-a38d-129458208e02.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     397250
IP address blocks:        50.52.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:28:6a:5d:f3:c4:85:4f:d5:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=4cec1364-98fb-4f63-b29c-eda2fd8f60e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:7f:03:87:d6:fb:f1:f2:e9:2d:58:ba:26:
                    7c:4e:fe:57:d1:32:fb:57:9b:f0:a0:3f:c2:7d:ec:
                    0b:cd:cc:84:5f:c8:2f:1f:a5:b3:d3:ac:94:0f:53:
                    ad:d7:2a:55:fd:86:78:2b:6a:a0:a4:fd:d1:bf:82:
                    05:6f:00:02:3d:21:1e:61:f4:85:da:58:15:6f:da:
                    09:93:70:78:65:e5:27:5f:c0:12:62:7d:cd:0b:b4:
                    19:3a:58:c3:64:92:b6:d8:70:49:36:06:45:55:e5:
                    9a:f6:35:0b:a6:d6:e5:39:98:b3:f2:db:b4:42:66:
                    94:74:d8:92:1b:cd:ef:d5:b0:ab:ad:14:8f:fd:b0:
                    c6:96:5a:9d:06:69:a2:1e:f2:ed:68:47:71:32:93:
                    df:32:0f:02:06:c5:78:24:cf:ab:53:51:20:d9:d5:
                    a6:8d:e0:24:2c:e9:b8:db:8b:0e:5f:88:80:1b:eb:
                    26:7d:b8:16:24:fc:40:f9:78:1e:31:71:bd:31:d1:
                    2e:26:b2:64:9e:bb:14:89:2b:04:9a:23:29:7a:55:
                    1a:44:84:51:0a:30:60:9c:3b:d2:9f:e5:e2:40:a1:
                    c0:57:27:4d:8f:60:b2:e5:80:b1:85:12:94:c9:9d:
                    c1:5f:ec:a2:a0:51:84:0f:67:8f:f2:8c:c0:34:e4:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:49:C4:61:02:13:C5:22:A8:58:05:D1:C1:B5:00:B3:C4:BF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/a0815829-a1eb-3b72-a38d-129458208e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.52.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:c6:1d:02:4f:b4:78:7d:f2:3c:2d:84:7f:3d:88:3e:36:
         77:9f:de:b8:b7:78:f6:41:89:ce:35:50:bc:7c:b8:c6:7d:33:
         50:cc:b8:8b:70:19:ab:6b:2a:f9:d3:f3:4a:40:06:34:76:9d:
         28:21:c7:1b:9e:1b:06:09:27:f5:33:7a:c4:6c:92:72:38:c8:
         5a:3d:35:4e:5a:78:36:9a:11:83:78:76:e2:dd:de:eb:70:f1:
         e7:2d:bd:36:22:d1:f6:cb:7e:66:85:8b:a1:a4:e2:aa:92:96:
         ae:a6:1e:d2:c7:66:ca:66:2a:52:59:52:64:01:f5:c4:bb:55:
         5e:9d:c2:fb:d4:4b:ed:92:29:8c:9d:61:f1:ed:87:d5:7a:7d:
         53:fa:93:79:24:94:80:a2:9b:6f:57:b0:3e:8b:f5:3d:4b:39:
         4a:49:c9:d0:7c:7e:ac:d6:ba:1b:12:f4:f7:15:ac:ca:67:dd:
         be:75:71:64:81:9d:63:b6:1d:97:6e:89:85:59:58:57:d4:c3:
         f3:d6:b2:08:d0:9e:f4:86:39:fd:71:57:b0:f5:35:bc:02:0b:
         b4:18:ed:a8:22:f1:42:2c:23:25:ed:22:47:97:d2:ab:62:7c:
         b3:b6:10:cf:fc:9b:d8:ba:46:1e:79:9e:ec:2d:de:61:26:35:
         e3:0d:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:30:48 2025 by rpki-client