Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa
File:                     02d05e37-ce30-363c-a68f-19a9d0b29186.roa (raw, json)
Hash identifier:          MOGdTQrNspqfrGHAIcLIyM4bya6k4Ig3j+S8U/qHJJA=
Subject key identifier:   34:7F:FE:22:26:8B:6E:A3:0C:96:5F:8A:0B:97:DB:94:58:B9:F7:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3A17ADD3A559F0F4A9A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.81.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3a:17:ad:d3:a5:59:f0:f4:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ee350be2-dfc9-4c0d-97c1-9738c77c6495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:87:6f:97:7c:8b:aa:51:2a:d7:15:95:93:
                    4b:b9:85:88:73:b9:ce:a0:df:3b:46:50:06:c7:74:
                    79:60:0b:f5:40:8e:27:b4:2e:b8:3b:fd:0a:29:cc:
                    be:41:b7:9c:53:63:c9:57:18:b9:d8:4c:49:2b:6e:
                    78:e8:d1:a4:1a:97:82:dc:da:dc:8e:dd:d6:bc:ec:
                    64:7e:a7:55:6a:3c:ed:24:65:90:59:e6:7d:79:8e:
                    65:f6:82:10:68:f3:a9:cd:d4:e9:ac:3e:4f:70:eb:
                    13:f3:51:29:a0:48:d3:c8:ff:be:a4:11:2c:fe:f9:
                    ee:52:5e:5b:1b:e7:83:37:b4:47:e5:12:52:e0:34:
                    56:cd:34:46:77:b4:f5:e2:d6:3c:6b:9d:1e:60:85:
                    e0:82:04:54:c1:d9:82:7b:90:35:09:0f:78:a9:5e:
                    99:4a:b6:83:f2:10:a3:f6:dc:07:3e:74:de:c9:0c:
                    45:52:24:90:6d:05:2f:b5:0d:bc:f7:d2:c1:c2:ab:
                    56:96:b3:0f:40:b1:6e:62:02:26:51:b5:11:c9:05:
                    e3:f0:ae:92:38:8b:11:62:f7:e4:91:1d:da:a2:f4:
                    68:5e:4f:62:3b:75:c5:97:ae:f1:20:7c:e2:73:c0:
                    cf:47:01:d6:5a:a0:93:b9:2f:31:f9:c8:28:64:15:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:FE:22:26:8B:6E:A3:0C:96:5F:8A:0B:97:DB:94:58:B9:F7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02d05e37-ce30-363c-a68f-19a9d0b29186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:7a:98:d8:78:1c:b9:b2:55:1d:93:c6:76:ff:51:5d:1d:
         c6:1f:d8:1c:66:ed:6e:a7:11:2d:aa:bd:2b:d6:8c:74:0b:3e:
         1a:af:1f:cf:5c:2b:01:3c:9f:b3:bf:f9:d4:79:1c:2d:dc:f3:
         36:99:f2:ef:9a:fd:32:f5:6e:35:9a:28:da:64:3d:ed:b8:7c:
         5a:85:7f:cb:16:22:51:5d:ad:56:e7:84:2e:a5:b2:6e:08:17:
         0c:89:50:f0:03:5b:a2:fb:3a:a4:fc:bd:f8:43:0d:e1:25:15:
         e4:de:db:84:4a:83:94:67:c7:e8:e2:27:8e:95:9c:7a:d1:d4:
         ce:6e:40:c0:b1:ea:bd:9c:1f:ab:ba:44:ab:8b:77:06:0c:08:
         6d:69:2b:ba:87:44:c6:ae:9c:e2:3e:f9:b6:19:ad:97:8d:c6:
         fa:ee:71:83:e1:8e:53:57:93:00:0d:97:05:91:c6:30:85:db:
         f1:0e:b2:1c:a3:c8:de:ed:8e:6a:da:37:20:9e:49:4a:07:a1:
         88:b9:22:af:6d:3e:8d:3a:8b:52:6b:b2:d2:66:20:b5:e9:f2:
         94:6f:6c:9a:aa:81:4f:9c:38:d2:1e:d7:43:b0:04:ce:2c:f3:
         61:6c:bc:b7:15:ab:e3:84:75:32:d8:2c:ef:91:43:7f:de:a9:
         4f:d4:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:46 2025 by rpki-client