Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76eac5c4-617a-345c-bd5d-07a83d4345ab.roa
File:                     76eac5c4-617a-345c-bd5d-07a83d4345ab.roa (raw, json)
Hash identifier:          L72m0Yy3yVQrZDusLWTmQTiTRSiMZCB8OUeEwZMst9U=
Subject key identifier:   29:79:44:D1:37:AD:41:47:10:9E:8A:DE:0D:1F:F0:5E:8B:60:55:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF43BDE457B5D5A2DB25E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76eac5c4-617a-345c-bd5d-07a83d4345ab.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        50.83.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:43:bd:e4:57:b5:d5:a2:db:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=ab8f5f86-a50a-4607-b9cc-2a7e3d4130dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:c3:62:04:41:be:2a:f0:d7:ce:d1:b8:d1:
                    6e:f3:06:f1:93:0f:e8:51:e6:6f:25:d6:98:02:b2:
                    16:fd:08:ab:40:35:71:41:31:15:08:43:b4:16:c1:
                    87:a0:73:2e:cc:a7:6b:a8:e1:f2:7d:68:5e:fe:76:
                    34:5a:4e:76:c8:57:8d:9e:3d:9b:c5:61:4c:1a:60:
                    e0:48:7b:f3:74:04:e7:6c:44:8b:af:b2:57:36:fb:
                    b7:6e:eb:72:16:53:ff:ba:77:34:f0:f7:31:06:bc:
                    a5:ea:f5:5b:2a:00:85:d0:44:4d:3d:82:89:8c:27:
                    4a:a8:cf:22:c9:95:13:ba:f7:71:42:94:f5:79:ce:
                    f4:22:cb:82:11:9d:6d:49:86:75:18:8d:76:1f:1a:
                    27:a9:33:3a:3f:e0:53:d7:4c:cd:99:1c:9e:8d:28:
                    4e:86:80:98:0f:22:65:da:12:92:ba:ba:d0:8b:ad:
                    4f:ff:93:e8:a4:05:47:8c:a6:02:5a:da:b8:0e:2b:
                    5c:79:fc:8f:b0:a2:d8:15:b6:18:3c:29:9f:26:9b:
                    d4:98:a9:be:eb:60:b7:69:d8:c7:7e:81:20:3f:da:
                    c8:e6:bc:97:3a:19:cf:a1:21:5b:e1:39:e5:c0:26:
                    29:9e:30:3c:e0:20:d2:e2:b9:4d:37:2c:bc:7d:b0:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:44:D1:37:AD:41:47:10:9E:8A:DE:0D:1F:F0:5E:8B:60:55:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76eac5c4-617a-345c-bd5d-07a83d4345ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:30:3b:70:60:07:21:8e:28:60:cb:79:38:21:63:7e:d6:67:
         b3:ef:91:ad:c0:71:fa:7e:7d:60:06:6c:b7:82:e6:de:95:61:
         2d:0f:5f:96:ae:f0:37:38:80:22:e6:2a:2a:94:ea:61:f0:85:
         ba:b9:9d:c4:9c:c5:84:3a:64:45:d8:69:d8:ab:d3:e1:fc:d4:
         31:94:e6:59:33:9e:47:77:de:53:7d:23:7e:36:80:56:8f:be:
         c5:6a:a5:23:09:6f:8b:cf:40:bc:59:90:03:1f:8f:2e:2c:e8:
         29:30:9b:d7:8e:ff:7d:87:ef:20:7b:57:a9:6a:8e:6f:77:7b:
         e9:12:04:67:e2:d8:ae:eb:8d:5c:68:e9:f5:04:15:f4:79:df:
         da:7b:ce:90:51:17:89:c3:44:30:e1:6f:87:44:9f:eb:40:1a:
         d0:9e:d4:18:5c:0b:2a:f1:f8:e8:af:72:da:a0:4b:a4:98:7f:
         6d:1d:40:70:92:ea:0e:50:77:4e:92:fc:a2:8f:87:cc:7b:97:
         97:6d:eb:31:84:99:bf:1c:c2:62:67:1e:59:16:fa:fe:41:09:
         4f:7f:5d:70:7c:dd:f2:05:2a:36:11:77:86:c9:6f:14:47:52:
         9d:f7:b6:d5:02:e3:8c:46:10:92:b0:78:31:87:0c:a5:da:c8:
         b1:e6:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:55:22 2025 by rpki-client