Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153f0f32-9f0b-33f0-b046-05c6ce941b97.roa
File:                     153f0f32-9f0b-33f0-b046-05c6ce941b97.roa (raw, json)
Hash identifier:          q5nO2W+E6t6nlJ0g25COINbtZb+ayPx1/wlHxsglb20=
Subject key identifier:   07:86:DA:80:75:00:21:1A:79:AE:AC:EE:01:6D:CE:D4:33:3E:A1:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6631E79644275F84C83F9400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153f0f32-9f0b-33f0-b046-05c6ce941b97.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        50.80.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:e7:96:44:27:5f:84:c8:3f:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=3cfadb2d-ea4d-4f58-a4df-916b04b7b493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:f4:22:91:98:8d:a4:f6:d1:e1:9d:49:03:
                    c1:96:e8:e6:96:8d:8c:a2:1c:8c:6d:29:22:ec:eb:
                    2c:df:47:07:61:9a:28:2b:42:44:1a:2f:da:6c:6e:
                    6d:e8:71:d5:f7:1b:f2:a5:72:12:30:71:a3:8b:63:
                    ea:a8:45:0f:97:c2:d8:cb:1e:fb:5d:14:a3:35:05:
                    85:59:2f:52:c6:f1:66:60:5b:d6:b8:af:36:bd:60:
                    bc:2b:ad:01:dd:3e:88:bf:6b:2d:05:29:8d:12:17:
                    95:37:8b:63:a1:8b:17:17:70:65:51:0b:68:76:9e:
                    6f:68:60:7a:4d:bc:c9:9e:eb:ad:72:fd:9f:a7:a0:
                    50:41:33:5f:c7:2f:36:50:65:5e:e7:b5:bc:bf:de:
                    bc:07:b9:b8:20:fd:0c:9e:ce:f5:6b:aa:36:23:90:
                    4a:8a:f8:62:0e:1a:c3:32:54:13:1a:21:e5:4d:84:
                    5d:fd:d1:6f:a0:69:1d:50:00:ca:d9:d0:94:07:02:
                    9d:5d:9e:1b:44:2e:85:09:d4:db:ca:2d:dd:1b:b4:
                    57:ba:90:a7:55:8d:25:2b:c5:00:30:91:e3:30:85:
                    82:15:2d:f3:ed:18:10:5b:8b:ac:87:bc:7f:cf:e6:
                    89:d5:22:a5:a8:70:31:e4:48:c7:7c:8a:c9:46:a5:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:86:DA:80:75:00:21:1A:79:AE:AC:EE:01:6D:CE:D4:33:3E:A1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153f0f32-9f0b-33f0-b046-05c6ce941b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:45:1e:05:1a:00:32:9c:f3:bb:65:ce:71:1e:07:c6:61:
         65:60:1e:ad:d3:e2:85:48:9b:d3:53:19:fa:73:b3:76:f0:f2:
         26:a5:1c:5f:60:ca:83:7b:f5:5f:81:92:73:8c:aa:82:38:db:
         7b:74:cc:b9:19:9c:c3:30:c7:7a:31:17:d6:02:25:01:3a:c5:
         7b:91:4a:30:b7:08:e6:88:16:e7:4f:29:d3:64:3c:5d:40:78:
         3b:53:10:65:91:34:e8:01:c5:d6:26:09:f8:d6:b8:08:9c:23:
         2b:46:15:60:b2:a5:bf:e3:a2:f8:87:27:38:b7:e5:a3:fd:8a:
         e1:63:70:07:73:2b:84:18:94:fd:cb:d2:2f:e2:ea:9c:9d:54:
         1d:df:2c:8b:98:96:2f:9d:9b:1b:49:a5:21:67:09:3b:e8:89:
         0f:6b:d2:9f:95:d9:07:38:9f:1c:fe:1f:d7:d5:4a:64:9f:9e:
         49:f9:e0:f4:fd:ca:b9:eb:03:91:3c:46:51:6d:aa:0a:7b:d4:
         f2:36:3a:81:24:7e:83:55:83:9b:94:c3:28:32:58:3d:b5:62:
         64:bb:69:22:80:45:16:e1:b3:54:e3:cb:c4:84:dd:7a:46:2a:
         f7:27:6f:69:19:e5:86:3f:e7:64:e5:52:a0:b9:8e:c1:fe:ae:
         1f:e2:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:22 2025 by rpki-client