Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcf6f036-5334-39c8-a725-8f36f421aede.roa
File:                     fcf6f036-5334-39c8-a725-8f36f421aede.roa (raw, json)
Hash identifier:          /QCF19+tmPsI+S+69PVMW5kxFCDBwpgQKvp9fKsBFII=
Subject key identifier:   63:B0:4E:48:F2:AC:27:68:6D:67:41:E3:8F:D4:ED:D3:89:4E:EF:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A5B95A6A74EE48C2FB4034D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcf6f036-5334-39c8-a725-8f36f421aede.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     19905
IP address blocks:        50.81.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:a6:a7:4e:e4:8c:2f:b4:03:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=823b19c0-f512-48e5-b2a8-683920de5647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:02:bc:6f:1a:c6:69:6c:99:da:14:e0:ad:
                    f4:e1:22:d7:53:43:3c:af:34:d1:b7:e3:99:5c:a4:
                    81:9f:55:e7:8f:58:61:23:b7:83:4d:31:8a:0c:1f:
                    41:96:49:f0:fe:26:59:18:29:28:11:79:8e:31:02:
                    80:40:03:84:f2:45:0e:c8:49:7b:e1:98:81:c8:75:
                    ab:21:53:a2:26:d0:31:cd:ab:cf:77:72:aa:00:c3:
                    70:55:e8:66:3d:fa:eb:d1:51:59:96:c8:25:8b:65:
                    3c:0b:3e:b6:5d:b4:b9:7b:b8:b3:d1:3a:7b:b8:f6:
                    53:fd:37:82:55:d6:b9:e6:89:4c:bd:ab:29:dc:32:
                    ed:ed:ed:6a:75:f3:48:f4:ed:a0:21:39:26:13:74:
                    64:c1:eb:00:2d:2e:49:08:c2:d4:59:b2:75:00:db:
                    86:b1:87:e1:68:fd:3d:d6:07:24:f7:dd:e0:9b:0f:
                    6f:c6:6b:85:7b:f2:e7:03:46:13:41:75:96:91:1c:
                    ef:78:7d:76:54:42:b3:16:d7:f7:ec:0d:f8:54:82:
                    0e:ab:34:ab:2c:75:df:a9:8f:09:70:ab:07:57:a6:
                    af:0c:51:78:9c:90:c6:53:90:6d:c0:2b:c4:14:3d:
                    95:11:56:0f:de:8b:b0:81:69:9c:5a:11:e8:c4:b4:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:4E:48:F2:AC:27:68:6D:67:41:E3:8F:D4:ED:D3:89:4E:EF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcf6f036-5334-39c8-a725-8f36f421aede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:aa:12:f6:f1:68:b4:29:6d:65:dc:29:37:b5:c4:ed:25:
         a4:f4:0e:3e:84:8d:31:f7:85:93:54:07:65:2c:2e:92:6a:78:
         13:37:37:bf:fa:72:90:4c:13:c1:c5:9c:f4:76:a0:98:92:c0:
         b7:20:eb:b1:35:99:6e:a5:11:51:cc:b5:19:96:74:53:60:35:
         24:c9:78:e8:06:d8:4a:c0:d5:6d:61:b0:49:fe:18:83:0e:20:
         fd:ba:22:24:cd:e2:45:5f:db:00:bb:6c:f9:d7:4a:30:9c:8a:
         0a:b4:d4:1e:29:14:a6:86:1a:61:2f:34:0d:59:2d:fd:ec:66:
         cd:1c:fe:9d:ee:01:ff:21:e3:71:25:cb:b9:4b:63:20:c7:ce:
         b0:3a:af:50:57:f4:93:d4:4c:11:17:97:ed:75:d6:e1:95:e8:
         1c:fd:48:74:fa:f4:42:4e:f1:c0:85:46:7e:45:f3:36:d2:65:
         4c:2d:a2:30:60:94:d7:40:a7:a8:cd:61:8b:0c:fe:11:b8:90:
         9f:95:22:09:8e:cf:c4:12:b7:c0:f2:e8:05:8e:40:89:9d:64:
         94:94:ac:41:20:42:03:1b:6f:2c:ac:10:31:e4:9d:bb:e2:d1:
         c4:60:0c:98:e1:03:ab:63:8b:92:2a:79:e1:d5:49:90:cf:91:
         aa:7d:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:04:35 2025 by rpki-client