Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f01dcb5-285c-3229-a003-ffa3fee9d54e.roa
File:                     7f01dcb5-285c-3229-a003-ffa3fee9d54e.roa (raw, json)
Hash identifier:          QFPjDdQzJtDzSLNkvUj0M64dWlzDM9Yb9WEarnYmnUU=
Subject key identifier:   F9:1E:67:D8:86:84:43:4B:68:55:CF:EB:FB:61:3C:8C:D2:7B:4D:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C53337FF22D51481DED3BF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f01dcb5-285c-3229-a003-ffa3fee9d54e.roa
Signing time:             Tue 04 Feb 2025 11:24:20 +0000
ROA not before:           Tue 04 Feb 2025 11:24:20 +0000
ROA not after:            Mon 05 May 2025 10:24:20 +0000
asID:                     30036
IP address blocks:        50.83.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:37:ff:22:d5:14:81:de:d3:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:24:20 2025 GMT
            Not After : May  5 10:24:20 2025 GMT
        Subject: CN=99ef9d68-92db-4085-a78a-285ab9f077c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:c3:a2:f1:72:81:20:65:dd:bc:ca:b2:86:
                    55:e7:65:42:7c:dc:64:09:6a:ec:1b:27:04:3b:5e:
                    7c:d9:65:5a:e4:73:14:e0:db:98:52:30:92:07:46:
                    fa:d7:98:06:d9:fa:01:ef:93:f9:4d:42:b7:c9:b6:
                    64:5e:36:3e:d9:ec:fa:bb:a5:b4:39:2b:e9:6b:1e:
                    57:8f:6c:0d:7d:d0:21:60:1c:ba:fd:9c:49:32:20:
                    b8:6f:db:8c:cc:b8:42:c0:bb:e9:12:4f:08:7a:9b:
                    90:bc:44:a4:89:9c:cf:f3:20:03:62:08:43:50:d9:
                    5c:d5:97:26:ec:75:14:ec:34:37:c7:2c:e8:c5:8c:
                    6a:e1:e8:e1:fe:df:f3:f8:90:43:6e:2f:37:44:75:
                    22:d6:f3:25:f8:ca:0c:d8:7e:18:ed:7f:f8:cb:62:
                    18:a4:82:6e:cf:83:c1:aa:e2:32:7d:33:f4:40:98:
                    cd:7e:36:3c:d2:7c:ae:86:2b:53:e2:f6:76:e2:41:
                    a2:8c:30:3b:94:71:04:59:be:d1:a0:89:a1:f7:3a:
                    2d:f2:64:bc:60:6f:19:30:e6:6c:da:48:d8:71:16:
                    1f:32:d0:0d:5b:be:ea:96:31:dd:a9:f3:a5:39:72:
                    e8:ff:f6:13:2c:33:99:c1:f9:b0:78:92:4e:54:8b:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1E:67:D8:86:84:43:4B:68:55:CF:EB:FB:61:3C:8C:D2:7B:4D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f01dcb5-285c-3229-a003-ffa3fee9d54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:5a:22:37:2b:75:25:b8:be:7c:10:bd:83:49:86:e2:20:
         85:0d:da:32:d5:44:b7:24:88:2b:b9:37:59:ad:01:f9:03:14:
         63:bd:83:25:41:e7:63:9e:27:9d:b0:5c:5c:42:58:a4:e5:75:
         b7:18:9e:9b:82:09:23:3c:c1:cb:07:95:44:7b:e2:bb:a4:f4:
         0b:b4:43:ea:ab:d8:53:61:a7:9a:ce:60:5a:b5:8e:2d:87:38:
         86:58:a3:62:74:2d:ce:24:61:07:4d:17:62:7d:a3:44:2e:a8:
         34:5f:ce:79:c9:d6:98:fc:c3:7e:6b:cd:a5:30:de:84:53:df:
         78:08:f4:19:ad:5c:b9:3d:25:1c:3e:c0:07:c2:b6:93:7b:2f:
         8f:75:93:9e:0c:cd:e3:4e:3c:52:fb:2b:44:9a:2e:70:8d:99:
         94:77:4d:e9:5f:f0:87:ce:1c:88:4e:bc:00:19:c4:ce:54:e2:
         e2:58:23:33:7d:37:17:6f:dc:e4:70:0a:a6:e6:1d:1a:85:79:
         e2:14:65:f3:4b:ca:94:8c:4f:ee:83:53:41:eb:93:41:8b:5c:
         b3:fc:82:57:cf:1f:4a:36:ed:b8:1d:09:40:a8:1a:d5:07:dc:
         e2:51:15:d8:55:9d:4f:2f:9d:fd:cc:c1:85:9e:5e:41:24:bc:
         8b:16:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:55 2025 by rpki-client