Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e082c78-d260-38aa-b9cb-58ef8abf2f42.roa
File:                     2e082c78-d260-38aa-b9cb-58ef8abf2f42.roa (raw, json)
Hash identifier:          mtJKwYaJ51BnWSKtMhF4wSEGE0Bg7fl0uGPa0xckN98=
Subject key identifier:   00:4F:C1:B9:AA:DB:F6:8F:A5:30:4D:C7:41:F5:D2:E2:2E:20:C8:DA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FD63B2B49A1DF04CA7E200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e082c78-d260-38aa-b9cb-58ef8abf2f42.roa
Signing time:             Wed 05 Feb 2025 11:23:18 +0000
ROA not before:           Wed 05 Feb 2025 11:23:18 +0000
ROA not after:            Tue 06 May 2025 10:23:18 +0000
asID:                     30036
IP address blocks:        173.19.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:63:b2:b4:9a:1d:f0:4c:a7:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:23:18 2025 GMT
            Not After : May  6 10:23:18 2025 GMT
        Subject: CN=97458146-0071-44e8-afb7-139229f8c378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:3b:8f:d0:f9:0b:42:e8:77:da:fd:96:4f:
                    d9:81:57:55:33:25:31:d5:94:c9:6d:c9:b8:eb:fb:
                    3b:58:d8:3b:c4:e8:41:10:9b:c6:7b:14:7d:71:03:
                    a8:f3:86:9e:ef:57:37:2a:02:75:79:a1:bc:98:c2:
                    74:d2:a3:1c:d7:9c:00:86:66:39:9f:aa:dc:83:73:
                    59:e2:60:b5:0b:72:61:94:56:86:63:7a:04:1b:57:
                    88:b4:77:32:da:12:f3:d9:d6:c1:aa:21:94:ee:52:
                    8c:0f:1f:da:56:b9:85:25:6a:81:8f:25:e4:90:ec:
                    e1:c2:49:b3:8d:ec:57:84:79:fe:71:43:55:57:74:
                    be:c4:14:84:ae:ff:68:f3:2d:4b:9b:d6:6f:70:f3:
                    f6:e6:0c:68:b3:c2:00:b6:f4:ae:89:db:4e:82:61:
                    c8:bf:a5:78:0c:db:35:80:29:97:61:d9:a3:a5:37:
                    fc:d2:b6:b1:cc:47:d8:3c:86:0c:3f:29:75:81:51:
                    79:0d:a4:15:1e:be:92:e4:71:a7:bc:ce:0a:4f:af:
                    d2:ad:aa:0a:bd:68:a3:5a:ab:ad:6e:ef:18:13:f5:
                    5f:a9:09:df:88:56:32:bf:17:02:e0:c7:9d:db:a6:
                    76:af:39:f3:ec:aa:37:58:e1:c4:b5:ce:62:90:f5:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:C1:B9:AA:DB:F6:8F:A5:30:4D:C7:41:F5:D2:E2:2E:20:C8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e082c78-d260-38aa-b9cb-58ef8abf2f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:6d:93:4a:e0:70:3a:bd:da:b5:06:a8:9c:2f:60:07:6d:
         b1:b4:9e:2d:fe:72:3c:5f:e9:97:17:d1:56:63:47:73:52:19:
         c7:bf:69:a8:30:87:7a:26:7e:fe:0a:f5:7d:08:71:a8:18:38:
         fd:ab:c2:fa:7d:db:40:25:2f:80:ff:5b:26:fc:29:5b:34:b4:
         1b:0b:85:af:80:4d:75:bb:a6:6f:0c:39:0c:e5:6b:b1:8f:fc:
         0e:da:8c:35:cd:b4:60:e7:23:8f:2f:6d:1c:fa:63:dd:e7:07:
         94:c4:ff:e8:87:95:c5:c1:4a:4a:e7:72:b8:22:8a:e5:b9:4b:
         46:86:3b:b4:14:ac:4b:c8:c1:46:c2:32:cc:59:b6:d4:7b:dd:
         11:98:3e:54:37:40:00:af:3d:5a:29:68:cd:dc:49:73:d0:bd:
         95:bd:47:f6:0d:38:4b:bd:40:c4:8f:bc:ba:e3:ed:90:85:3f:
         60:a2:08:a8:45:d9:99:6f:ce:ed:76:cb:6d:4d:0b:cc:fd:79:
         6f:56:82:99:6a:70:55:bd:66:5f:b6:69:a6:a5:bb:55:3a:97:
         96:5c:3b:98:80:be:3a:3f:7e:f4:41:2e:4f:57:46:b8:52:fb:
         b3:96:56:11:9b:36:58:16:a6:c6:32:e7:8a:c2:86:4b:08:23:
         07:2e:63:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/WOytJod8Eyn4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMjMxOFoXDTI1MDUwNjEwMjMxOFowLzEtMCsGA1UEAxMk
OTc0NTgxNDYtMDA3MS00NGU4LWFmYjctMTM5MjI5ZjhjMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZM7j9D5C0Lod9r9lk/ZgVdVMyUx1ZTJbcm4
6/s7WNg7xOhBEJvGexR9cQOo84ae71c3KgJ1eaG8mMJ00qMc15wAhmY5n6rcg3NZ
4mC1C3JhlFaGY3oEG1eItHcy2hLz2dbBqiGU7lKMDx/aVrmFJWqBjyXkkOzhwkmz
jexXhHn+cUNVV3S+xBSErv9o8y1Lm9ZvcPP25gxos8IAtvSuidtOgmHIv6V4DNs1
gCmXYdmjpTf80raxzEfYPIYMPyl1gVF5DaQVHr6S5HGnvM4KT6/SraoKvWijWqut
bu8YE/VfqQnfiFYyvxcC4Med26Z2rznz7Ko3WOHEtc5ikPXo/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABPwbmq2/aPpTBNx0H10uIuIMjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmUwODJjNzgtZDI2MC0z
OGFhLWI5Y2ItNThlZjhhYmYyZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPibZNK4HA6vdq1BqicL2AHbbG0ni3+cjxf6ZcX0VZjR3NSGce/aagw
h3omfv4K9X0IcagYOP2rwvp920AlL4D/Wyb8KVs0tBsLha+ATXW7pm8MOQzla7GP
/A7ajDXNtGDnI48vbRz6Y93nB5TE/+iHlcXBSkrncrgiiuW5S0aGO7QUrEvIwUbC
MsxZttR73RGYPlQ3QACvPVopaM3cSXPQvZW9R/YNOEu9QMSPvLrj7ZCFP2CiCKhF
2Zlvzu12y21NC8z9eW9WgplqcFW9Zl+2aaalu1U6l5ZcO5iAvjo/fvRBLk9XRrhS
+7OWVhGbNlgWpsYy54rChksIIwcuY0Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:10 2025 by rpki-client