Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa
File:                     21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa (raw, json)
Hash identifier:          2WvYW8upHLgtvuR4jzMuEpEW9qvAbye6ZJC3wUY8kOY=
Subject key identifier:   98:D1:E6:70:35:BA:9D:A2:DA:3E:41:03:8C:E1:A2:7F:2A:0A:C4:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4B5F375126158455C740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.80.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4b:5f:37:51:26:15:84:55:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e4a18b97-0965-4c52-9bca-a5c17e617013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:bf:a7:35:7c:9e:43:6c:ec:76:03:a0:a4:
                    54:b3:80:40:b6:be:ac:cf:42:1b:3a:20:ee:37:9d:
                    6e:61:ca:89:92:a2:b1:89:79:d6:4f:47:36:b3:f8:
                    cd:8c:fc:29:36:68:91:f6:60:08:dd:1d:b1:d5:29:
                    a4:d7:e6:f6:b5:27:f7:31:9e:08:14:b7:db:bd:cd:
                    22:ea:cd:6f:56:4d:fa:24:ed:82:c8:75:fc:d5:eb:
                    8d:ab:73:7c:8d:a6:42:38:f9:65:68:c1:a2:dd:14:
                    79:5c:68:6d:19:c0:79:6a:4d:26:e5:39:09:45:ce:
                    27:66:b6:bd:94:c7:5e:8a:64:16:95:e5:b9:5e:25:
                    96:61:c5:e9:3e:30:13:44:35:14:96:4c:45:57:1b:
                    c3:d6:bd:0d:98:20:01:79:ba:62:54:64:37:75:05:
                    81:f2:64:8c:8b:a2:36:db:bf:a4:75:0e:4a:45:68:
                    8a:3f:4f:2d:9b:87:51:0a:f3:75:05:98:e4:60:25:
                    2a:8c:ab:04:c7:7e:3d:f9:57:43:a0:1c:69:ac:97:
                    44:61:ae:68:8a:79:81:50:86:5f:61:5b:5c:aa:89:
                    06:96:7c:bb:b1:55:96:20:db:42:ca:1d:12:6a:20:
                    b4:0a:37:16:f1:1d:04:d6:24:7b:c0:81:af:2a:67:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:E6:70:35:BA:9D:A2:DA:3E:41:03:8C:E1:A2:7F:2A:0A:C4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:85:10:fd:49:c0:a9:ec:fe:c2:5e:b9:3b:af:33:b2:81:9f:
         c6:2d:ea:80:dd:a8:4c:e0:a9:54:c6:2d:da:99:64:a9:0d:89:
         96:d2:48:2b:e0:23:0e:26:72:b1:65:2a:82:f0:64:98:b6:c9:
         6c:ab:c1:43:2c:de:ca:19:87:a4:ad:f1:96:8a:65:3c:ae:6a:
         54:ba:40:80:99:8f:2d:c8:3f:cc:e7:06:8f:3c:f2:bb:bc:b6:
         ab:52:6b:04:80:42:d2:5d:de:5e:77:fb:7e:30:bc:f4:f6:15:
         e7:83:c2:b7:24:8c:bc:f3:59:29:8b:2b:85:54:43:cf:5f:72:
         67:39:2e:2e:8e:fc:f0:13:7f:4a:81:6d:1a:3f:a2:9b:5a:89:
         6b:99:3c:b3:ce:a7:ee:2d:be:b0:d3:31:86:ef:dd:8a:8d:19:
         b8:df:8b:b0:ad:43:71:b5:a8:25:e8:59:b8:be:e8:31:b7:4a:
         d7:e4:2b:48:bb:0b:98:78:c2:a8:06:b4:5d:20:39:0c:dd:a2:
         e7:ab:89:69:b1:62:f9:a2:ac:cb:03:a0:ad:53:b2:bb:2b:cf:
         13:ca:4d:ab:f3:45:e5:96:b8:ea:dd:96:a3:4d:47:64:8c:ea:
         91:25:69:8e:bf:0a:53:72:18:50:47:3a:f4:d8:db:71:ef:60:
         17:46:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:43 2025 by rpki-client