Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ff88d49-c26e-3974-ab4f-237289f6b95d.roa
File:                     6ff88d49-c26e-3974-ab4f-237289f6b95d.roa (raw, json)
Hash identifier:          uxtUiSbVUC6imTiF9PSJAtffln4EQDuN3l83ZqblYTs=
Subject key identifier:   51:95:2D:3A:73:54:76:37:5C:F9:83:6A:F5:9B:52:E3:72:7F:8A:FB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF544AF662DE219F11BD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ff88d49-c26e-3974-ab4f-237289f6b95d.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:54:4a:f6:62:de:21:9f:11:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=a2fdde91-70eb-4165-96dd-c26b38df96fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:17:c7:cf:1a:e2:43:da:e6:68:87:26:e7:
                    51:04:c4:ee:71:dd:9a:a8:5a:e5:92:45:b4:46:fb:
                    14:e3:ea:e4:94:b9:88:5b:6c:82:57:f6:db:71:20:
                    31:59:aa:87:86:65:f7:d5:c6:3d:b7:d6:7a:14:60:
                    c8:8e:01:4c:f4:d1:e7:df:d0:43:3a:4a:7e:f2:76:
                    3d:f9:13:66:8c:ef:01:a7:4e:a3:28:3f:6e:49:d3:
                    12:f4:99:75:8f:b6:3e:fc:99:18:77:e9:ff:43:da:
                    bd:5f:8f:40:0f:58:bf:5d:a4:26:47:fd:43:6a:7a:
                    e3:35:78:ab:a2:3f:62:40:a1:74:07:98:77:0d:88:
                    55:04:0b:b7:65:98:3e:8a:21:bc:e2:cc:8f:11:f8:
                    9e:7c:57:65:1a:7b:b1:c1:a2:87:a9:07:ea:98:39:
                    85:90:b3:7a:25:f4:49:d4:11:c8:a7:e9:3a:fd:83:
                    ff:d3:e6:b5:ae:75:af:39:09:28:b6:44:4a:e5:38:
                    72:4d:9b:cf:0d:ec:09:ac:77:26:4c:ba:c9:84:fc:
                    b1:1c:86:19:24:c2:7c:ef:b4:f9:d4:f1:93:78:6a:
                    f7:c3:d5:32:41:6b:75:f8:db:7a:a2:48:40:55:f4:
                    b8:b0:ca:9a:ec:8e:65:a7:9f:be:cf:fa:de:8a:2b:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:2D:3A:73:54:76:37:5C:F9:83:6A:F5:9B:52:E3:72:7F:8A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ff88d49-c26e-3974-ab4f-237289f6b95d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:5d:29:ff:e5:09:77:44:1f:33:87:cf:df:a3:aa:72:7b:
         00:ef:73:d0:fb:64:fc:48:f2:c1:4a:8c:b8:c1:6d:6d:fe:fe:
         2a:3c:81:ff:86:18:e4:72:a8:ab:e2:66:14:c1:f4:f0:ca:98:
         e1:85:e4:ea:83:4d:0f:ed:34:a8:1d:bd:bd:6e:ba:1a:75:a2:
         63:c5:04:53:77:4c:bb:c9:de:f1:6e:da:f1:0f:f6:e1:4e:3a:
         03:0e:d0:dd:44:54:79:7e:c8:1d:12:f6:63:77:e1:7a:c4:ca:
         cc:c0:2c:5b:77:98:f3:78:dd:75:8c:99:ff:59:ef:f2:c0:bf:
         04:81:92:af:83:c1:09:d8:2b:61:3d:d9:0e:94:a9:2f:a7:b1:
         79:c4:66:b0:c4:48:1e:54:a1:98:d6:fc:9b:99:40:44:70:da:
         67:34:57:b2:bb:d1:3b:46:ee:18:b8:34:dd:f5:e2:40:dd:57:
         6e:bc:89:ee:76:d4:98:5f:12:ce:bf:2e:4b:15:71:14:e6:ee:
         20:a8:4a:d9:82:35:79:e0:36:ee:51:dc:ae:2b:86:a4:86:1e:
         bb:19:c4:f6:80:15:0f:48:9f:62:c3:5d:58:25:f2:72:cf:ea:
         2f:24:33:2f:fc:a1:2d:99:cd:c2:44:13:63:b7:e8:88:31:b6:
         b0:2c:79:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71RK9mLeIZ8RvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
YTJmZGRlOTEtNzBlYi00MTY1LTk2ZGQtYzI2YjM4ZGY5NmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QXx88a4kPa5miHJudRBMTucd2aqFrlkkW0
RvsU4+rklLmIW2yCV/bbcSAxWaqHhmX31cY9t9Z6FGDIjgFM9NHn39BDOkp+8nY9
+RNmjO8Bp06jKD9uSdMS9Jl1j7Y+/JkYd+n/Q9q9X49AD1i/XaQmR/1DanrjNXir
oj9iQKF0B5h3DYhVBAu3ZZg+iiG84syPEfiefFdlGnuxwaKHqQfqmDmFkLN6JfRJ
1BHIp+k6/YP/0+a1rnWvOQkotkRK5ThyTZvPDewJrHcmTLrJhPyxHIYZJMJ877T5
1PGTeGr3w9UyQWt1+Nt6okhAVfS4sMqa7I5lp5++z/reiiu+ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGVLTpzVHY3XPmDavWbUuNyf4r7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmZmODhkNDktYzI2ZS0z
OTc0LWFiNGYtMjM3Mjg5ZjZiOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO4XSn/5Ql3RB8zh8/fo6pyewDvc9D7ZPxI8sFKjLjBbW3+/io8gf+G
GORyqKviZhTB9PDKmOGF5OqDTQ/tNKgdvb1uuhp1omPFBFN3TLvJ3vFu2vEP9uFO
OgMO0N1EVHl+yB0S9mN34XrEyszALFt3mPN43XWMmf9Z7/LAvwSBkq+DwQnYK2E9
2Q6UqS+nsXnEZrDESB5UoZjW/JuZQERw2mc0V7K70TtG7hi4NN314kDdV268ie52
1JhfEs6/LksVcRTm7iCoStmCNXngNu5R3K4rhqSGHrsZxPaAFQ9In2LDXVgl8nLP
6i8kMy/8oS2ZzcJEE2O36IgxtrAseUI=
-----END CERTIFICATE-----
Generated at Fri May 9 11:37:15 2025 by rpki-client