Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa
File:                     cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa (raw, json)
Hash identifier:          4lJm8hh1/YrKWAzQK1rA+WB/9yDtpwpjgrkR3mudego=
Subject key identifier:   92:0E:0D:1F:5C:9B:78:1D:50:04:C3:13:44:87:2C:7A:94:12:26:19
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD5065B92C979E73DB7963680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     30036
IP address blocks:        50.81.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5b:92:c9:79:e7:3d:b7:96:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=87ec273b-d8ce-4dc5-8db0-c87aeb8e564c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:c6:18:8a:8a:61:83:19:a9:9a:73:7b:82:
                    79:07:2e:27:6d:25:2c:d2:a9:09:29:68:9a:25:1a:
                    66:7d:99:c3:7a:36:af:42:8a:dd:95:ad:82:c1:19:
                    37:a0:cc:95:2e:fc:88:7a:ae:72:ab:e7:8f:2c:34:
                    e0:02:0e:00:ef:a9:eb:88:d1:62:ed:70:66:ed:0b:
                    f5:f8:a4:f4:ac:01:57:44:07:df:8e:18:96:78:dc:
                    c6:60:4d:aa:6c:c4:80:1c:83:d0:f2:0c:40:0a:68:
                    d2:94:fe:95:dd:cd:d4:d5:83:d4:9d:b7:1f:19:9d:
                    67:31:5e:57:b6:0a:94:68:72:0a:e9:57:7b:53:9f:
                    b1:af:ea:60:49:a7:85:2b:b4:57:0f:02:f7:61:e9:
                    75:48:15:56:32:5c:4c:70:be:16:dd:6b:0e:75:3a:
                    d5:56:bf:14:11:7b:8a:8c:2f:7c:eb:ff:d3:4c:24:
                    40:9f:7a:54:bc:ab:45:9f:80:b7:64:40:88:23:d1:
                    fa:d3:df:2b:8c:e5:2e:d4:62:0c:2d:e8:d0:f6:a8:
                    1f:70:07:49:b6:71:6b:5b:8a:ef:78:02:a5:ca:b6:
                    5a:00:4b:46:6c:ae:88:a2:18:73:42:a3:b9:fc:6f:
                    6a:09:13:c0:14:70:0d:9a:ac:68:b7:0f:b6:59:a1:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:0D:1F:5C:9B:78:1D:50:04:C3:13:44:87:2C:7A:94:12:26:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:73:72:43:d5:4d:73:f5:be:9b:9e:42:cb:70:ea:91:3c:42:
         c6:dc:f9:26:95:40:20:df:5e:5a:ef:c9:af:93:fd:ef:4b:18:
         8a:80:96:86:a0:1c:97:18:2f:3b:2c:93:7e:1e:87:d1:54:a3:
         b1:43:91:0e:79:29:81:63:1d:28:e9:c7:c1:07:63:7f:2f:1e:
         9f:72:7c:90:e2:ec:cd:8b:ba:67:93:6b:36:93:c8:9e:21:fd:
         05:4a:80:46:ae:b1:79:f1:f9:98:99:33:e2:80:6c:dc:0f:9e:
         cd:2c:14:ee:8f:11:2a:e9:cd:f5:01:32:4d:14:a7:db:ff:90:
         c7:e2:bd:6f:68:03:0c:73:7e:c2:df:0e:7d:60:02:63:9b:16:
         db:a1:00:25:37:27:cb:b7:31:25:7d:bd:cb:f6:bb:ec:2b:67:
         da:a5:65:b2:99:17:d5:74:a9:9a:0c:f0:5d:4f:e0:f5:06:98:
         17:94:7f:c7:19:0c:41:af:c2:6b:a3:04:a5:99:05:f6:5d:12:
         22:fd:25:5c:cc:49:36:23:2e:7b:0e:6e:d4:3b:54:a0:a3:11:
         72:38:5f:13:91:7a:60:fd:80:e6:0e:b9:55:6e:c1:ea:c3:46:
         e0:1c:33:b5:e9:03:76:f0:3f:33:f8:1e:8e:0c:ca:bf:0b:d7:
         67:0d:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:21 2025 by rpki-client