Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/602fba6b-284a-31ea-b5d7-4fc8fe7ac19f.roa
File:                     602fba6b-284a-31ea-b5d7-4fc8fe7ac19f.roa (raw, json)
Hash identifier:          sm6Lhopgz0SuGc69XVf9BdKV9nPPXOxe8sL0UmyRPAo=
Subject key identifier:   FE:D7:C3:9C:9C:34:1E:74:67:BC:1D:C0:54:91:C3:BD:90:5F:10:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD9364B3D111F17F6F02CDC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/602fba6b-284a-31ea-b5d7-4fc8fe7ac19f.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        50.81.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:4b:3d:11:1f:17:f6:f0:2c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=9628fff3-d181-44b4-af9b-cc0da7e45fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:04:29:95:81:67:2b:36:4c:5d:c6:17:ba:
                    7b:3a:dc:c4:e8:50:93:b3:27:fe:7a:35:d7:7a:10:
                    22:6f:fc:63:b8:c5:d1:c1:36:f4:43:20:f9:51:6f:
                    01:74:f9:b0:bd:8e:d0:7f:ac:ad:db:0d:b4:1d:0a:
                    2c:1f:8a:21:22:36:51:e1:2b:b3:af:0f:cf:b7:d6:
                    8d:bf:f3:b8:fe:03:21:7a:9c:0e:dc:d6:3a:54:f1:
                    b2:29:47:fe:32:d7:3e:87:ed:32:d6:99:09:bb:42:
                    47:44:78:10:70:40:ee:f8:5c:fe:33:4e:c8:84:cd:
                    e3:0e:67:c8:f7:1a:30:38:2a:9e:71:c6:f2:d6:48:
                    17:28:c1:76:70:f5:3f:50:5d:dd:f8:bf:a8:aa:5f:
                    69:40:8f:19:ad:15:1e:c2:8d:fd:19:1c:69:6a:35:
                    f9:1e:3e:4a:5a:b1:4d:94:ba:1d:49:ec:71:08:21:
                    f5:d6:ec:4c:7a:6f:b3:4f:a3:4b:c2:da:b3:88:ee:
                    90:c4:2f:a8:40:4e:85:7e:d1:af:02:c1:15:b6:cb:
                    83:b2:d7:8d:d9:a4:a9:51:41:8e:58:da:c1:e3:dc:
                    71:f0:42:c4:96:ee:e7:0d:19:62:d7:e9:d0:49:56:
                    8d:5e:8c:94:24:88:f9:fd:da:8f:2b:55:43:1a:b4:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D7:C3:9C:9C:34:1E:74:67:BC:1D:C0:54:91:C3:BD:90:5F:10:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/602fba6b-284a-31ea-b5d7-4fc8fe7ac19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:7a:da:e9:73:cb:c9:28:fa:d7:ec:58:ce:06:d5:a4:df:
         f2:d8:91:eb:8d:3d:8b:24:a4:69:3b:2c:6f:aa:c5:74:17:31:
         10:b6:a9:70:8b:75:ce:7f:4b:48:d9:34:53:4d:10:3c:2b:cb:
         fe:36:49:1e:06:5d:7e:a6:94:1b:0d:7d:e0:d1:6b:6c:e1:06:
         1e:25:2f:fd:2f:79:c3:b8:ec:15:89:da:db:5e:a8:92:b4:14:
         59:0c:a7:ef:a1:6b:69:92:83:a6:5a:23:64:dd:b6:b3:c2:ab:
         47:b8:69:83:77:15:69:69:85:b2:7e:98:8f:6e:11:91:1e:87:
         b9:2f:a3:c7:67:3e:19:24:c6:96:1d:19:68:88:65:7a:22:7c:
         ba:eb:90:51:09:46:92:34:89:e8:bd:3f:7c:e0:b4:60:66:60:
         8a:35:e0:30:6e:ea:9e:4e:48:12:3e:ea:30:01:16:27:5c:ee:
         03:e5:88:88:20:8c:7a:75:b5:a1:2c:7f:f9:e0:dc:a6:5b:43:
         2b:70:40:2a:10:1e:a3:62:dc:31:fb:45:a6:b1:9f:89:9f:52:
         30:6d:95:d3:b5:fe:76:df:13:e2:46:ae:aa:65:e1:48:2d:85:
         fe:17:cf:84:16:0a:6d:df:31:e0:37:c6:2c:41:3f:be:97:45:
         2f:68:2b:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNks9ER8X9vAs3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
OTYyOGZmZjMtZDE4MS00NGI0LWFmOWItY2MwZGE3ZTQ1ZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaYEKZWBZys2TF3GF7p7OtzE6FCTsyf+ejXX
ehAib/xjuMXRwTb0QyD5UW8BdPmwvY7Qf6yt2w20HQosH4ohIjZR4Suzrw/Pt9aN
v/O4/gMhepwO3NY6VPGyKUf+Mtc+h+0y1pkJu0JHRHgQcEDu+Fz+M07IhM3jDmfI
9xowOCqeccby1kgXKMF2cPU/UF3d+L+oql9pQI8ZrRUewo39GRxpajX5Hj5KWrFN
lLodSexxCCH11uxMem+zT6NLwtqziO6QxC+oQE6FftGvAsEVtsuDsteN2aSpUUGO
WNrB49xx8ELElu7nDRli1+nQSVaNXoyUJIj5/dqPK1VDGrRm/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7Xw5ycNB50Z7wdwFSRw72QXxCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjAyZmJhNmItMjg0YS0z
MWVhLWI1ZDctNGZjOGZlN2FjMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlF6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ6etrpc8vJKPrX7FjOBtWk3/LYkeuNPYskpGk7LG+qxXQXMRC2qXCL
dc5/S0jZNFNNEDwry/42SR4GXX6mlBsNfeDRa2zhBh4lL/0vecO47BWJ2tteqJK0
FFkMp++ha2mSg6ZaI2TdtrPCq0e4aYN3FWlphbJ+mI9uEZEeh7kvo8dnPhkkxpYd
GWiIZXoifLrrkFEJRpI0iei9P3zgtGBmYIo14DBu6p5OSBI+6jABFidc7gPliIgg
jHp1taEsf/ng3KZbQytwQCoQHqNi3DH7Raaxn4mfUjBtldO1/nbfE+JGrqpl4Ugt
hf4Xz4QWCm3fMeA3xixBP76XRS9oK4A=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:44 2025 by rpki-client