Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2570961-2dd8-37ee-baac-542e620befcd.roa
File:                     c2570961-2dd8-37ee-baac-542e620befcd.roa (raw, json)
Hash identifier:          22cCdgXozDyRXCLVbriDHLafbks8uJmdWFMd1oHzYWQ=
Subject key identifier:   4D:0E:C5:95:53:D9:31:EC:D7:37:CD:65:C7:4A:BA:69:6C:96:C1:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57E62BEB4160439BC42D580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2570961-2dd8-37ee-baac-542e620befcd.roa
Signing time:             Tue 04 Feb 2025 13:55:47 +0000
ROA not before:           Tue 04 Feb 2025 13:55:47 +0000
ROA not after:            Mon 05 May 2025 12:55:47 +0000
asID:                     30036
IP address blocks:        50.81.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7e:62:be:b4:16:04:39:bc:42:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:55:47 2025 GMT
            Not After : May  5 12:55:47 2025 GMT
        Subject: CN=105b3b79-7e42-4af1-95f8-2483f5b104c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:76:ec:d3:90:92:d3:69:c4:9a:ff:4e:78:
                    17:d3:62:92:b2:8e:46:7e:b2:eb:56:37:87:45:c6:
                    88:b8:7a:ec:78:fe:13:61:e0:25:3b:c3:ea:c2:81:
                    7e:8f:5f:9d:96:56:25:88:d2:35:47:d7:64:65:8b:
                    51:bc:e1:04:9d:b0:4b:84:85:99:d4:8b:f0:98:ee:
                    04:c7:7b:f7:c2:b6:72:95:17:90:6a:10:f8:c8:3b:
                    ad:6e:c1:3d:40:01:e0:0d:f9:44:21:a4:c9:09:c8:
                    bf:fb:75:31:6c:81:5a:ed:01:cd:28:b2:34:3a:5b:
                    be:ac:0e:62:50:77:cd:6c:65:54:d3:28:55:04:50:
                    67:bc:8a:d6:1a:da:a9:b6:11:80:25:15:61:bc:04:
                    23:42:3a:ca:6c:03:fa:3e:3e:fe:4f:d8:55:e0:94:
                    7a:ff:fa:93:79:f5:71:22:17:65:f8:d2:98:af:a6:
                    99:7b:85:c0:29:aa:86:c7:a7:c3:ab:72:b1:95:d2:
                    6c:8f:38:64:85:40:e4:bc:4a:8b:ab:96:ba:7e:6a:
                    92:72:d2:f0:34:05:a1:75:ad:fc:73:59:c8:e5:25:
                    dd:a6:33:45:92:39:ba:80:18:12:f6:73:1f:0c:f2:
                    d0:d7:5f:e2:48:8d:49:03:fa:3c:06:1e:3f:df:3c:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0E:C5:95:53:D9:31:EC:D7:37:CD:65:C7:4A:BA:69:6C:96:C1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2570961-2dd8-37ee-baac-542e620befcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:18:4b:df:84:dc:10:10:62:05:a3:31:8a:a7:78:18:8f:f0:
         ba:5d:df:c7:ee:e6:4e:ae:f1:80:d5:60:db:c8:1b:1f:3d:5c:
         df:dd:a1:cb:1d:ce:26:87:2f:8f:0e:8b:59:ff:ed:c6:06:d4:
         86:00:03:98:70:ac:10:11:5f:a3:da:de:ae:53:92:ef:e8:25:
         4e:1d:08:6e:67:ca:0f:47:b0:74:66:fb:0c:d8:2c:52:c4:ac:
         57:a5:40:83:72:a2:d3:6a:d0:a1:ed:cd:7c:9d:6b:aa:8d:8b:
         69:52:05:4c:1c:13:7c:d7:a9:6f:95:1f:5e:27:de:54:f2:b9:
         07:83:66:32:79:70:dd:e0:1b:c1:22:d8:44:b7:56:eb:f7:10:
         29:dc:28:f0:26:fb:94:b2:54:ea:32:2e:d7:f8:00:e3:7b:ce:
         25:1d:d4:5f:79:0c:c2:a6:40:e6:ac:7d:87:4c:1c:e3:d8:d5:
         27:45:98:2e:63:e8:69:89:10:67:85:94:e6:40:4a:44:80:b1:
         55:6f:d6:ec:66:fc:d6:21:e0:f4:39:7e:fc:33:14:e0:c5:3b:
         67:e1:70:9f:21:14:9f:93:cc:d5:ce:68:8a:6e:b2:27:15:d4:
         b1:b2:30:1f:56:1c:40:47:eb:e9:21:d4:2a:34:e4:f6:1b:bb:
         9b:c0:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:13 2025 by rpki-client