Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ea258fe-293f-36ab-a8b6-27a2d0fc2e91.roa
File:                     5ea258fe-293f-36ab-a8b6-27a2d0fc2e91.roa (raw, json)
Hash identifier:          s1EB2L5Nzk3JGktn022puKNj7y1JUd24B1rKTFlkO/o=
Subject key identifier:   8F:3A:18:01:33:AE:9A:43:9E:C3:F8:FB:2D:72:87:FA:D8:B8:AB:81
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2606F9EE4EB967027DB6C60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ea258fe-293f-36ab-a8b6-27a2d0fc2e91.roa
Signing time:             Mon 03 Feb 2025 11:08:01 +0000
ROA not before:           Mon 03 Feb 2025 11:08:01 +0000
ROA not after:            Sun 04 May 2025 10:08:01 +0000
asID:                     30036
IP address blocks:        50.80.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:60:6f:9e:e4:eb:96:70:27:db:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:08:01 2025 GMT
            Not After : May  4 10:08:01 2025 GMT
        Subject: CN=a007a458-dc60-46d9-8f82-664654aff2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:6b:5f:43:05:0d:89:19:09:62:d7:3b:c0:
                    90:f5:32:dc:d3:9d:36:bf:e0:1c:20:46:27:a2:3c:
                    98:cc:93:62:75:79:74:48:f3:c3:24:2b:9c:9e:14:
                    d3:eb:6e:57:9f:28:b4:55:c4:11:19:f1:63:d6:fe:
                    79:10:17:c6:ab:d9:ee:31:66:95:aa:05:dd:73:fe:
                    65:a2:5d:7e:f7:d0:1b:5a:0c:7a:c2:fe:26:77:8f:
                    a2:16:a6:77:2f:e3:e9:e3:d1:5d:60:a4:38:79:ab:
                    7d:c9:b8:a0:5d:56:91:cd:25:b0:a6:ef:1e:77:de:
                    3b:a8:41:62:8a:9c:66:ba:d6:76:06:79:bb:1c:a2:
                    85:09:26:5b:30:de:2d:04:b3:ed:d2:5c:ae:06:82:
                    14:a8:7d:7d:6a:08:15:2e:cd:c9:16:26:3e:99:7a:
                    24:d7:aa:e3:3e:98:7e:a6:8a:e9:ff:8b:e2:f3:49:
                    91:29:d3:d2:5d:83:4f:06:91:a8:72:a8:f8:86:01:
                    a8:c5:37:97:1b:b6:6b:9c:73:8f:f4:0d:18:5a:ae:
                    34:a9:d2:f4:15:7b:fb:a9:6f:81:46:ea:48:bb:49:
                    fc:de:20:4d:20:03:7b:60:d0:a3:3a:b7:44:4e:d4:
                    53:ee:15:1a:4b:78:19:0f:15:d0:32:da:4a:92:e7:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:18:01:33:AE:9A:43:9E:C3:F8:FB:2D:72:87:FA:D8:B8:AB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ea258fe-293f-36ab-a8b6-27a2d0fc2e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:d7:a1:95:3b:e5:d3:e0:65:b5:6f:8f:eb:19:b5:d9:8b:
         50:43:be:ea:7a:f0:3e:da:9a:1e:3c:de:0f:99:0d:69:4a:33:
         cd:ce:e0:e1:17:60:41:4a:ee:79:f5:5c:ba:78:5d:8f:82:b3:
         fd:49:1a:99:5f:32:2f:d2:fc:4f:bc:8d:27:c7:03:96:c3:57:
         79:0b:16:4b:f0:c0:ef:35:69:9b:18:6f:d7:bb:79:fa:65:12:
         06:62:64:1d:78:2f:a3:4f:81:c3:e7:5e:69:f7:01:a6:21:59:
         a1:30:d1:db:13:6a:1f:cf:8e:9b:43:41:cd:13:dd:fd:c9:89:
         c7:52:28:ba:f3:aa:a1:26:33:d9:b0:6d:ed:8b:79:e0:68:08:
         48:ac:a8:0a:dd:28:f2:df:ba:b8:41:81:f2:ae:6f:40:07:e5:
         0a:cc:a4:4b:85:f6:40:7a:a1:33:31:72:3f:7e:7b:33:7d:d3:
         71:b3:ab:c0:4b:c3:41:bf:75:26:aa:a3:02:31:70:37:74:09:
         71:d9:ae:cb:96:68:c4:35:6a:4b:05:f2:46:ba:b2:c8:ee:bf:
         27:a8:fa:34:e9:5c:25:dd:47:a5:bc:e7:86:10:30:0a:a5:ae:
         fa:49:38:fd:f0:f9:ad:c3:b6:04:ee:b8:13:b0:13:8f:b6:20:
         60:67:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:41 2025 by rpki-client