Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa701ac2-8937-386d-b1d7-6762baf4edb5.roa
File:                     aa701ac2-8937-386d-b1d7-6762baf4edb5.roa (raw, json)
Hash identifier:          Ctik6C1rLz0qU4eGyapJZ3wObcke84a4STVtpFBnzm4=
Subject key identifier:   EB:4D:D5:A7:B7:A4:AB:8F:7C:AB:D2:99:46:C8:51:D1:5F:D0:AE:97
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848D9AB48986268DD8B225C9780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa701ac2-8937-386d-b1d7-6762baf4edb5.roa
Signing time:             Tue 11 Feb 2025 19:22:25 +0000
ROA not before:           Tue 11 Feb 2025 19:22:25 +0000
ROA not after:            Mon 12 May 2025 18:22:25 +0000
asID:                     30036
IP address blocks:        50.81.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:ab:48:98:62:68:dd:8b:22:5c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 11 19:22:25 2025 GMT
            Not After : May 12 18:22:25 2025 GMT
        Subject: CN=7cae54b2-f71f-4fc0-8ff0-733545ff24d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:08:55:43:a2:7c:be:98:e8:4c:c0:41:05:
                    03:7f:06:4c:5f:b1:7a:16:b9:f4:5f:df:f8:55:43:
                    13:06:0c:9d:83:87:29:25:f3:64:f6:c9:a8:55:7a:
                    9e:e8:e4:a3:44:6e:bd:2d:ec:92:1e:c5:29:90:74:
                    d4:e2:a6:d4:01:65:8f:fc:e5:59:1e:c5:1c:e3:2a:
                    3a:4d:d6:99:24:7b:66:5d:01:8e:ea:41:4f:e2:ef:
                    e0:27:5d:a1:65:79:52:fa:92:bc:84:e2:f9:bf:de:
                    8f:44:8d:95:c0:f8:3e:54:b3:fb:f7:11:fd:d2:7a:
                    0a:55:a8:e6:a7:ec:70:dc:e8:bb:b5:8e:da:f7:80:
                    56:3b:25:14:a8:9a:1c:0a:a3:6f:a3:5a:6a:38:53:
                    32:b8:a0:83:85:17:78:f1:5c:26:ea:4b:2b:8e:28:
                    9f:8a:13:f8:aa:ac:48:40:5d:5c:41:51:d6:d3:0a:
                    a1:9a:cf:db:a3:30:40:30:4b:2a:d1:89:35:5f:20:
                    5e:f8:b8:98:be:d5:18:44:09:cb:3f:d4:87:25:d2:
                    da:68:72:b0:98:75:c4:28:a9:86:03:37:02:06:36:
                    8e:e3:7e:02:ea:a3:64:8a:cc:23:f0:b4:24:f8:e5:
                    e2:ca:14:80:b8:74:aa:7e:a4:3d:d1:af:9e:2d:3a:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:D5:A7:B7:A4:AB:8F:7C:AB:D2:99:46:C8:51:D1:5F:D0:AE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa701ac2-8937-386d-b1d7-6762baf4edb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:2f:ae:37:11:1f:76:ea:97:44:91:98:f1:e7:17:9d:54:
         ba:70:41:02:6b:5d:f6:b3:a7:11:0c:6b:a2:b6:7d:63:16:28:
         56:38:1c:a9:91:75:45:7a:35:20:f3:23:42:26:62:d4:66:ed:
         7e:a2:be:e1:3c:8c:4b:29:91:73:06:8b:8d:01:98:30:84:2a:
         80:d5:89:cf:9b:1f:d8:32:94:4e:f8:e4:19:fa:0d:f6:16:f9:
         a7:7f:9f:3b:5b:60:44:4f:21:1e:cd:f0:00:8f:66:d7:ea:80:
         58:1b:0d:8e:49:98:53:59:f0:69:c1:40:c8:e4:a5:6e:ed:55:
         f7:76:79:c5:1f:0d:d5:00:b2:a3:4b:72:a9:2e:88:70:44:6c:
         b8:26:9b:58:e4:fd:c4:09:78:be:73:e5:54:72:de:23:09:3b:
         22:b7:36:38:0d:8f:ad:83:01:6f:55:3b:da:d1:18:9d:83:64:
         2d:c0:21:37:04:77:60:bc:1c:ae:77:23:58:39:d1:b5:08:0c:
         62:97:c1:3c:30:0f:fc:73:bb:8d:e9:87:40:24:0b:57:ef:85:
         ac:09:64:a7:87:ff:5a:ee:b7:ea:56:c1:f1:dd:ec:d7:c8:8e:
         20:00:3f:12:89:82:0e:4d:51:a9:58:8e:ed:9e:c1:af:b6:fe:
         8a:32:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:59 2025 by rpki-client