Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bb252ef-a693-336e-a065-80cb4503d428.roa
File:                     2bb252ef-a693-336e-a065-80cb4503d428.roa (raw, json)
Hash identifier:          9N9N8gx5HwhS+cF4OdhOUqhQa5N4AHZqmBbw6W6CSOU=
Subject key identifier:   56:23:1E:0B:F1:C3:BB:64:CE:7F:5C:E5:52:17:6B:91:BE:BE:60:38
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCBB07C2E0984F1C6EB260
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bb252ef-a693-336e-a065-80cb4503d428.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.82.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bb:07:c2:e0:98:4f:1c:6e:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=411ffb1c-842a-496e-800d-4cef150fc960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:61:ff:54:6a:07:5f:87:d7:cd:24:3f:c2:
                    e3:a3:0b:ed:ac:db:bf:39:19:a3:88:1e:a3:bf:82:
                    47:1c:04:63:d9:79:39:a0:9f:5a:8b:65:56:be:4e:
                    78:55:ad:d0:7a:10:62:3d:82:ec:25:b5:78:5a:a6:
                    ee:6b:6b:7b:81:7a:8c:b5:7a:a0:33:b5:f4:e6:81:
                    8b:9c:26:24:33:7f:68:63:e4:11:bc:d1:c8:84:1f:
                    53:01:c8:8b:55:bf:5d:45:d5:01:5c:c9:03:6a:5b:
                    b1:32:af:32:53:82:bc:1e:42:3d:e7:6a:89:8e:c0:
                    1f:01:e4:d6:1b:f9:e8:21:64:bd:46:a7:8a:21:44:
                    9c:24:78:89:55:70:d3:35:4f:63:d1:cc:d8:aa:cd:
                    ca:17:0b:d2:52:03:97:08:73:5b:a3:09:1b:1a:dc:
                    03:42:2e:a8:6d:57:7c:75:69:d4:e8:1e:c8:19:23:
                    f5:d1:89:cc:a7:0c:4e:8e:c1:02:28:88:2e:92:4c:
                    3d:12:81:53:2d:71:b5:47:6c:c8:89:62:f9:20:b1:
                    b5:4d:8a:51:1f:94:1b:43:17:bc:80:4c:38:4f:ed:
                    d8:d7:d4:92:d6:6d:9d:0d:77:90:1c:c6:40:13:49:
                    9e:af:9d:cb:65:e1:26:8e:05:ad:8b:e1:67:c4:7c:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:1E:0B:F1:C3:BB:64:CE:7F:5C:E5:52:17:6B:91:BE:BE:60:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bb252ef-a693-336e-a065-80cb4503d428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:09:1d:28:d4:71:83:94:6b:1c:3c:d6:d2:f7:7b:71:be:
         4c:14:c0:8f:e3:77:c6:fc:d5:e8:e1:fc:f8:59:a8:b9:cf:da:
         a3:e7:41:5f:3e:93:4e:63:34:6d:32:03:56:50:d4:a2:45:34:
         5c:a9:85:64:75:5d:8d:3c:b2:87:fd:c0:06:1b:6c:3d:0c:27:
         55:27:5b:04:70:65:75:de:ef:ea:2e:c0:0a:c7:dc:bf:85:6d:
         bd:34:a2:f9:0e:60:3c:5c:5e:8c:3e:c8:c5:12:4f:8e:88:be:
         79:f9:fb:4d:b2:9b:21:8e:fc:18:50:1d:10:19:70:22:19:13:
         93:5d:ca:09:76:b6:c4:17:5d:5e:7c:4f:c3:10:55:a1:71:75:
         fc:e7:a6:94:db:2f:14:1a:9d:35:bb:7d:e0:93:53:2a:d7:39:
         c7:ae:24:10:d8:6c:e2:4d:65:6d:0e:1f:de:60:fa:89:74:83:
         4c:29:84:75:e8:52:4e:81:50:6e:1b:69:30:d4:9e:7b:29:bf:
         5e:f4:76:08:d4:dc:66:92:88:e9:0b:6e:78:36:ee:17:32:25:
         aa:9e:e4:fb:4e:91:96:d3:20:31:a4:47:f7:af:04:07:30:c1:
         69:4c:cb:59:3f:a0:9d:88:c0:e6:c2:24:1a:f5:7e:e2:5c:e8:
         5f:a7:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:50 2025 by rpki-client