Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5aac6e46-27c6-31a0-8d0b-c891ce637c8b.roa
File:                     5aac6e46-27c6-31a0-8d0b-c891ce637c8b.roa (raw, json)
Hash identifier:          MuNcK/Ty5kK2x4Nua5TkSJ5nLnUklNsjszar8GQOCAw=
Subject key identifier:   79:0D:B5:BC:ED:54:8D:07:23:E1:F6:9E:39:96:59:19:38:D3:60:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C260DD49402F10BF4277B300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5aac6e46-27c6-31a0-8d0b-c891ce637c8b.roa
Signing time:             Mon 03 Feb 2025 11:08:53 +0000
ROA not before:           Mon 03 Feb 2025 11:08:53 +0000
ROA not after:            Sun 04 May 2025 10:08:53 +0000
asID:                     30036
IP address blocks:        50.81.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:60:dd:49:40:2f:10:bf:42:77:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:08:53 2025 GMT
            Not After : May  4 10:08:53 2025 GMT
        Subject: CN=39a9d45a-0c70-4732-9d94-c962b3386be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:bc:e5:8e:ca:50:11:4e:57:5c:0e:6d:9c:
                    fa:5d:d7:cb:2b:74:0a:09:ce:e0:13:2f:1c:5e:a2:
                    35:bb:6d:c3:a8:7a:e9:84:96:1d:86:26:62:21:38:
                    53:37:bf:9a:c4:aa:72:ac:29:21:2f:7e:fe:2b:e7:
                    1f:aa:70:ae:3a:04:86:56:d9:e3:fe:d7:10:ce:7d:
                    d4:96:54:e2:8d:7e:81:28:ad:7d:24:3a:01:b0:6a:
                    7c:e2:d8:75:45:3b:b9:8a:62:27:51:ef:1d:e9:36:
                    b6:08:64:cc:33:25:7a:27:85:50:62:68:de:d6:16:
                    48:52:8b:2b:af:fd:f2:8b:f2:c3:ae:10:54:d1:3d:
                    68:58:4b:fd:3a:60:27:a8:67:2a:4c:5e:74:66:0a:
                    e7:34:ae:73:66:74:9c:b2:58:17:df:f3:90:be:d5:
                    aa:14:6e:1e:41:af:86:4e:d4:f8:95:93:11:b7:92:
                    45:c5:b5:b3:9d:b3:61:f8:93:09:43:64:ba:15:5b:
                    87:0f:ef:e8:d1:12:e0:93:a3:ce:76:2c:2e:a5:8b:
                    74:80:4f:9f:27:2f:a0:28:d6:cf:d5:28:e6:05:cb:
                    0d:2c:79:ed:57:0a:ad:0f:27:26:82:3e:fa:bb:67:
                    fb:ec:46:84:b6:ea:71:3c:e2:34:93:63:8d:bb:c4:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:B5:BC:ED:54:8D:07:23:E1:F6:9E:39:96:59:19:38:D3:60:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5aac6e46-27c6-31a0-8d0b-c891ce637c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:ed:be:3f:2e:7a:0c:f8:bf:1d:ac:c7:6f:25:b4:8a:c2:
         f2:90:90:a1:5a:4c:1c:83:94:36:b6:a6:db:f9:f0:9a:5c:cb:
         f9:5a:04:1c:16:26:ef:3c:b4:b8:2b:bf:5b:d6:0e:57:4a:d4:
         de:37:eb:1b:de:93:cb:21:ef:88:e0:9e:1f:c4:6f:73:36:00:
         e9:ca:c6:c0:65:49:62:10:bf:83:3d:46:18:f3:f1:d2:9d:f6:
         32:bc:6e:0d:fa:76:48:55:20:70:51:90:e9:11:12:4a:5d:7d:
         11:36:5d:47:61:5e:a8:36:6b:ad:33:ae:6b:f8:0b:7e:93:50:
         65:46:6c:4a:8f:f6:06:5d:8b:36:5b:65:b9:62:52:9c:6a:a9:
         a8:6e:0d:c2:fb:ea:4f:f6:43:fb:a3:f3:cf:12:75:07:53:cf:
         e6:77:13:30:fe:f7:af:22:85:37:19:63:a6:32:92:a9:8f:d1:
         d6:2e:82:7f:23:d2:b3:f2:fa:48:f5:02:72:1b:09:d1:f2:d3:
         09:92:41:59:60:d1:d7:4e:7c:c6:6a:3b:d5:62:79:60:c0:07:
         97:aa:eb:82:78:e1:d0:3f:56:0e:01:4b:12:fd:e0:9d:e0:38:
         25:47:4e:c8:16:fe:f0:af:85:65:e6:fb:ef:ab:dd:46:76:fb:
         a5:6c:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:41 2025 by rpki-client