Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a3a5faa-45b0-30a0-ab53-d5d3889654e7.roa
File:                     2a3a5faa-45b0-30a0-ab53-d5d3889654e7.roa (raw, json)
Hash identifier:          gzm8Znzqx1NfHi1YUw3y2uYjfW21t7a8LQCqoHZo4Q4=
Subject key identifier:   50:74:DD:69:82:B9:E3:F5:1A:B0:1E:55:45:7B:03:B7:51:BA:67:17
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B004C3042A1D171361D9903C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a3a5faa-45b0-30a0-ab53-d5d3889654e7.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        50.81.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:30:42:a1:d1:71:36:1d:99:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=386ce4b9-0b83-45b6-9b81-31ad2a3de43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:2c:25:5d:c9:d8:d9:8d:8f:5a:25:c3:57:
                    74:4b:b1:d9:1e:43:68:27:5d:46:35:f1:0a:c5:9a:
                    d3:12:6a:77:43:e3:29:1a:ab:76:62:81:ba:29:db:
                    8b:16:b4:d5:f0:ea:fc:b8:9a:41:e7:bd:33:65:22:
                    7c:d9:60:b6:68:6d:d7:66:78:db:23:d4:a6:ee:ff:
                    2f:52:71:30:81:f3:d1:84:3f:e8:98:53:0f:92:f2:
                    d8:c7:02:59:c8:71:fe:0e:e1:26:57:e8:07:e7:67:
                    0f:bb:cd:1f:c9:20:2f:1e:65:e1:12:4e:32:6b:a8:
                    3e:e8:6c:b4:16:23:a0:6e:10:0a:ba:77:b2:51:20:
                    0e:d3:64:12:fa:1b:8d:f0:25:e4:48:67:ce:e4:94:
                    7d:09:89:53:ad:9e:0f:a3:89:ce:a3:44:73:c8:69:
                    71:5f:df:f5:ab:4f:6b:48:8a:e2:a3:59:3c:93:a4:
                    24:3f:17:4f:40:72:61:f7:15:c8:f7:c8:35:f8:72:
                    1b:20:d4:a7:55:f1:4d:0b:b5:40:11:7a:41:8d:1b:
                    21:3d:69:af:18:fd:91:c3:7e:65:05:27:73:d5:0d:
                    ff:6c:fa:f9:21:a3:25:d7:66:cf:73:9d:5c:97:26:
                    06:1f:69:a9:9e:b9:5e:1e:e7:53:cc:d4:28:a6:16:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:DD:69:82:B9:E3:F5:1A:B0:1E:55:45:7B:03:B7:51:BA:67:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a3a5faa-45b0-30a0-ab53-d5d3889654e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:79:de:98:3d:ad:63:8c:ae:62:1f:c4:39:24:19:31:d2:
         01:cf:96:f4:51:37:a7:48:de:b3:2d:29:00:24:96:58:06:66:
         9b:5a:c8:07:64:ea:b2:db:a2:e9:cd:5d:f3:d8:e2:9a:b8:c0:
         da:43:93:0f:6f:f7:c5:46:7e:48:f5:cd:d7:25:e0:5b:55:21:
         9a:9f:3d:f3:10:b0:9d:4a:72:07:fa:41:4a:9b:a6:24:0e:3c:
         1b:d5:65:55:47:58:c5:1f:9c:a2:c6:23:f8:d4:d4:b5:9c:af:
         0d:ef:46:7a:95:98:b8:29:0a:fd:59:a8:6d:b3:10:c4:83:af:
         7e:5e:b7:da:74:e9:0b:3a:c4:ff:c1:f4:0d:38:e9:17:e3:7f:
         b2:d7:10:bf:e3:7f:db:92:4c:41:cc:eb:fd:5f:4e:fa:90:eb:
         8d:1c:71:b1:88:ba:ab:03:6d:85:78:39:19:f9:42:76:3e:09:
         a3:04:c9:d9:5b:c5:1d:cb:ca:39:3b:f3:96:59:65:47:4b:77:
         15:d7:eb:22:10:f0:43:c8:11:4a:28:e9:c8:eb:98:9a:7b:65:
         a7:91:a6:9f:76:a1:12:9d:2d:28:d5:24:8e:5f:cc:ab:3f:76:
         08:4e:59:25:e5:22:b0:df:29:59:a1:38:3b:05:58:71:41:df:
         a3:59:d6:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATDBCodFxNh2ZA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
Mzg2Y2U0YjktMGI4My00NWI2LTliODEtMzFhZDJhM2RlNDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/UsJV3J2NmNj1olw1d0S7HZHkNoJ11GNfEK
xZrTEmp3Q+MpGqt2YoG6KduLFrTV8Or8uJpB570zZSJ82WC2aG3XZnjbI9Sm7v8v
UnEwgfPRhD/omFMPkvLYxwJZyHH+DuEmV+gH52cPu80fySAvHmXhEk4ya6g+6Gy0
FiOgbhAKuneyUSAO02QS+huN8CXkSGfO5JR9CYlTrZ4Po4nOo0RzyGlxX9/1q09r
SIrio1k8k6QkPxdPQHJh9xXI98g1+HIbINSnVfFNC7VAEXpBjRshPWmvGP2Rw35l
BSdz1Q3/bPr5IaMl12bPc51clyYGH2mpnrleHudTzNQophbK3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFB03WmCueP1GrAeVUV7A7dRumcXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmEzYTVmYWEtNDViMC0z
MGEwLWFiNTMtZDVkMzg4OTY1NGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlFbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2ded6YPa1jjK5iH8Q5JBkx0gHPlvRRN6dI3rMtKQAkllgGZptayAdk
6rLbounNXfPY4pq4wNpDkw9v98VGfkj1zdcl4FtVIZqfPfMQsJ1Kcgf6QUqbpiQO
PBvVZVVHWMUfnKLGI/jU1LWcrw3vRnqVmLgpCv1ZqG2zEMSDr35et9p06Qs6xP/B
9A046Rfjf7LXEL/jf9uSTEHM6/1fTvqQ640ccbGIuqsDbYV4ORn5QnY+CaMEydlb
xR3Lyjk785ZZZUdLdxXX6yIQ8EPIEUoo6cjrmJp7ZaeRpp92oRKdLSjVJI5fzKs/
dghOWSXlIrDfKVmhODsFWHFB36NZ1sQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:22 2025 by rpki-client