Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94fec80a-4ec6-33a3-950a-33e6b1e9d1b9.roa
File:                     94fec80a-4ec6-33a3-950a-33e6b1e9d1b9.roa (raw, json)
Hash identifier:          2VGhPAGehVjVi8jKRxq+f7p3Jk0rw1ZAchqbzFAJYmg=
Subject key identifier:   A0:8F:87:E6:84:73:30:0D:76:5D:E3:79:12:D2:BB:6E:1C:3B:C3:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C576365B0181D3DA067E2A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94fec80a-4ec6-33a3-950a-33e6b1e9d1b9.roa
Signing time:             Tue 04 Feb 2025 13:39:19 +0000
ROA not before:           Tue 04 Feb 2025 13:39:19 +0000
ROA not after:            Mon 05 May 2025 12:39:19 +0000
asID:                     30036
IP address blocks:        50.80.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:76:36:5b:01:81:d3:da:06:7e:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:39:19 2025 GMT
            Not After : May  5 12:39:19 2025 GMT
        Subject: CN=a7753bfd-d0dd-4c0c-8cdd-ab53cb811ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:1b:17:ec:d6:6e:f1:ed:95:97:cf:e8:26:
                    03:14:c1:29:3d:90:77:07:77:4d:54:14:b1:d1:1e:
                    af:c1:01:47:84:e6:aa:df:fa:ac:f5:94:47:48:11:
                    19:09:4c:ed:3e:08:2b:db:12:ac:de:08:4d:07:f8:
                    f2:33:87:70:da:ba:a6:c4:97:31:8a:8c:e8:43:76:
                    44:69:e3:d7:9d:af:64:71:54:9f:fb:89:e4:1b:17:
                    55:99:59:18:6c:85:81:7d:7d:92:e6:42:d7:2b:db:
                    a9:16:6c:78:b1:85:11:3a:5c:7d:71:bf:f2:1f:74:
                    c3:2d:48:2c:f1:da:cb:58:62:37:9d:c0:63:4c:3e:
                    a5:53:0d:7b:76:67:2d:f3:51:0f:49:41:74:1d:0b:
                    5e:c0:d7:34:28:c3:27:b2:d0:71:06:80:e1:7a:54:
                    e4:b5:32:b3:a1:6c:19:c2:5d:08:e2:70:5a:48:1b:
                    c5:31:63:b2:eb:92:75:23:54:43:f0:58:82:2d:e4:
                    e7:fa:4e:c7:f3:b0:4e:61:18:1c:76:a9:6f:7d:79:
                    69:2f:5e:d0:ab:2c:f8:13:80:2f:5e:91:eb:40:30:
                    0f:cd:56:48:e0:bd:67:93:92:10:40:9d:42:d6:a4:
                    3f:dc:48:78:ad:66:e1:ef:a7:69:dd:f6:15:a4:47:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:87:E6:84:73:30:0D:76:5D:E3:79:12:D2:BB:6E:1C:3B:C3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94fec80a-4ec6-33a3-950a-33e6b1e9d1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:ba:fd:9a:ce:0a:0f:25:87:b5:84:42:ea:e2:20:c1:e3:
         5b:77:e0:4e:46:81:e5:31:8d:3d:3a:66:44:34:d8:0f:b2:b3:
         9a:05:65:7d:04:f5:b9:00:97:f2:c5:7c:d8:0f:dd:92:da:12:
         b8:d2:a5:40:5a:13:84:e3:36:7f:f3:3e:db:0a:85:3f:c7:d4:
         7d:d6:58:f7:8d:db:5c:2a:b8:58:7b:5e:95:f0:c5:e4:b6:43:
         4e:57:2b:55:dd:61:e3:fa:a5:a2:ca:a8:53:c9:a7:2c:87:55:
         50:d7:d1:d7:4f:58:74:86:74:5f:ef:c0:e3:5e:02:e4:c9:f9:
         be:fb:73:d1:6a:58:1f:11:a9:ee:0c:d3:d5:b5:6e:03:ca:02:
         32:69:d1:ef:46:af:58:83:dd:ff:f9:59:6b:ee:24:98:be:8d:
         73:0e:3d:6f:0c:51:1b:f7:dd:12:d3:f8:17:b2:bd:dd:81:04:
         f3:ce:16:3f:20:db:4b:a5:b7:8d:8a:a2:2f:7f:ce:49:80:14:
         a2:dc:83:c4:f6:fe:30:ab:49:60:4a:3b:db:7c:16:07:2a:11:
         89:a3:25:23:a0:8a:88:e5:aa:22:ae:85:0a:9d:ca:e2:5e:23:
         b5:04:85:15:cd:c8:14:22:e9:23:2c:5e:ed:ec:cb:ea:80:03:
         44:60:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:20 2025 by rpki-client