Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b56d249d-48fc-342a-bf04-7382f25b1715.roa
File:                     b56d249d-48fc-342a-bf04-7382f25b1715.roa (raw, json)
Hash identifier:          e8wNhAIRhVNY/quXGauf2PV1t4RFJxwX7d/65ytq5+g=
Subject key identifier:   4C:A4:F2:6D:D6:C7:9E:2C:11:52:D4:05:B2:B8:3E:F3:61:D2:2C:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499DBF1F12CEF5C04241DD7B40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b56d249d-48fc-342a-bf04-7382f25b1715.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     30036
IP address blocks:        50.82.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:1f:12:ce:f5:c0:42:41:dd:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=b55ee8c5-1388-4fd1-ba97-7f33ae21e2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:a9:af:e4:83:1e:34:52:ba:75:65:00:f0:
                    aa:9c:7f:ef:14:d1:7c:e1:f3:98:8e:a5:d5:eb:83:
                    d4:3d:01:e2:d7:09:17:49:f0:21:c6:99:b0:f2:48:
                    b8:2a:e6:13:59:54:bf:30:90:61:af:ce:c2:30:f6:
                    c3:15:fa:19:77:c0:c9:ac:97:55:6e:5c:7a:ac:e0:
                    61:a8:fd:bb:42:c4:cd:cb:8a:12:c8:39:0b:bc:8d:
                    55:d0:59:30:fb:41:19:36:cc:3a:a2:64:eb:23:c9:
                    d1:0b:d5:6b:e5:93:bb:20:55:3f:b9:43:e7:06:1c:
                    fc:cb:a3:a5:fd:81:9d:e9:4e:e9:1c:db:fd:4a:2e:
                    0e:c8:34:33:bc:9d:6c:8b:fa:ab:cc:4d:9b:30:62:
                    ed:a4:54:58:16:73:8c:52:ec:92:99:8b:3d:86:87:
                    77:b5:91:ad:15:28:6e:6a:de:68:b0:36:17:0f:fe:
                    da:3a:1f:ed:7f:83:b5:15:7c:1f:65:13:cd:cf:28:
                    fa:69:10:2b:62:32:8b:a9:2c:01:b4:ff:8d:04:26:
                    76:41:18:f2:55:de:bc:91:a5:4d:ee:af:99:98:53:
                    0c:e4:9f:f1:46:96:64:df:c2:88:c5:ef:8e:1c:bf:
                    52:62:b7:05:51:0c:04:b7:ff:8f:f3:9f:e6:21:11:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A4:F2:6D:D6:C7:9E:2C:11:52:D4:05:B2:B8:3E:F3:61:D2:2C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b56d249d-48fc-342a-bf04-7382f25b1715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:0e:ab:50:01:3f:27:0a:32:c1:93:04:b2:6e:7d:ea:6a:
         89:21:84:db:c1:df:d8:5a:cc:0b:2b:f1:42:ae:6e:b3:4f:d7:
         11:87:63:fd:06:d4:f9:27:b8:20:e0:28:8a:b4:41:c3:f4:0b:
         85:ee:7b:d3:b8:78:61:be:ae:be:e5:5b:fe:1a:bc:18:43:5f:
         0d:92:4a:0e:d0:71:1f:32:42:47:91:b8:eb:e5:5c:29:79:0a:
         d6:10:ac:d8:da:90:ad:81:6a:fc:4b:c4:1f:99:57:e1:26:10:
         da:ed:ba:c4:70:7c:0f:3c:6f:5f:02:57:0f:9c:52:09:57:41:
         11:20:40:22:43:c0:56:b3:80:b3:5d:d9:80:b5:9c:65:6d:b6:
         82:ab:0b:ff:e6:f8:d8:e1:a0:1d:bd:b0:58:3e:5d:b2:6c:34:
         c6:85:71:5b:92:bf:de:f6:50:e6:90:03:4d:20:c3:1e:5a:00:
         68:c3:51:1a:44:ca:20:e4:5c:9e:d6:b7:6b:66:5b:13:4d:fd:
         b4:8d:71:18:21:de:83:79:4b:df:34:62:46:91:32:c2:24:ec:
         91:af:ee:b8:9b:2b:c1:d0:bc:46:2d:c4:cc:59:68:c9:bb:a9:
         4a:52:0b:a7:06:ee:c6:a1:63:8d:87:d0:18:d2:a9:fa:ca:f6:
         9d:9a:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:22:00 2025 by rpki-client