Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa
File:                     2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa (raw, json)
Hash identifier:          OxorGWVgac2AUKEjh0XivGDQerhjl3fpKP5VOau3K4U=
Subject key identifier:   A6:9E:AF:8A:79:07:DB:87:16:82:96:22:BE:50:A3:38:29:31:94:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4008D44C36DBB388D940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.81.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:40:08:d4:4c:36:db:b3:88:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5c00baca-f256-481a-a2c9-1234d5faae5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:dd:ac:c6:72:24:27:8e:52:18:96:b2:12:
                    ca:85:c6:6b:3b:b1:9d:7d:8d:0a:41:95:31:53:e0:
                    66:62:e2:3c:a0:e0:3b:6e:5e:4c:2f:bd:b2:0f:72:
                    15:0a:d1:8b:1d:0c:59:65:ca:aa:e5:e9:d7:d0:fd:
                    f6:6d:4d:ab:42:95:78:4d:c2:65:95:35:ea:d0:aa:
                    ac:04:7b:d1:48:4d:e1:b2:91:0f:93:32:37:ee:f0:
                    29:05:a1:ab:70:34:96:07:e3:6f:b0:82:97:d6:58:
                    6c:64:8c:69:2f:9d:5d:d3:c1:f3:a7:3d:f0:66:c0:
                    fe:0f:da:b0:4a:7b:1c:1b:ee:c3:38:29:5a:c1:02:
                    98:00:af:eb:ae:fc:49:b5:b0:9a:2c:ac:56:b4:71:
                    24:fc:cd:3f:5d:d7:d0:4b:73:6f:90:ff:ac:81:5f:
                    16:3d:f1:87:4f:23:fe:cc:bb:00:94:97:86:7f:c4:
                    bf:fb:71:ed:93:f8:f4:5b:f3:d1:63:45:61:79:c0:
                    45:00:1a:68:01:66:c5:d6:f3:89:6d:71:ec:8f:1e:
                    e6:8a:8d:39:65:71:b6:20:7b:9f:91:ac:4e:f7:94:
                    a6:65:0a:30:20:1e:fe:c9:c5:ef:b5:cf:1e:f0:6f:
                    9a:fe:8b:5c:7c:2f:9c:c2:bf:6e:17:46:aa:9e:a4:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:AF:8A:79:07:DB:87:16:82:96:22:BE:50:A3:38:29:31:94:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:83:55:8a:f0:b8:76:89:f7:53:e9:b9:22:9c:c3:41:04:
         b0:d1:b9:32:9a:a5:d2:e6:b7:43:e3:eb:94:16:91:0a:8f:b3:
         15:09:5d:11:28:ff:b6:76:8b:24:c5:86:db:7b:01:43:6e:98:
         47:49:81:d8:cd:18:7c:0b:77:74:48:3b:b8:df:28:05:65:08:
         af:a3:c3:61:60:97:ae:61:27:02:b4:b7:10:64:bf:47:ce:08:
         1c:ab:bc:ad:5d:f4:33:90:63:3a:48:a6:a1:2f:f4:fe:35:37:
         56:b0:7f:94:5b:d4:5e:12:a7:e4:53:07:26:b2:6f:35:f6:f2:
         57:76:cf:38:8f:9a:92:60:ae:08:b3:b1:ea:07:ad:59:ed:ec:
         89:76:c2:f2:17:1e:0d:4c:77:8e:bc:a1:ad:e6:b6:c4:c7:e2:
         53:8d:0e:f2:70:24:6f:0c:dd:b3:c8:c0:a9:f0:26:27:02:f7:
         b7:bf:ce:b3:a2:b2:9c:80:99:e9:2c:64:0f:17:1a:0e:94:d5:
         d4:3a:c8:25:4a:35:2f:77:ff:6d:cc:07:d8:a3:cb:60:64:1e:
         0b:36:26:3c:6d:c9:5c:a7:15:b6:01:23:46:8b:35:b1:c2:74:
         8c:98:90:2d:c9:ce:00:cd:75:63:91:d0:76:24:66:5b:c7:2f:
         e0:31:be:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkAI1Ew227OI2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NWMwMGJhY2EtZjI1Ni00ODFhLWEyYzktMTIzNGQ1ZmFhZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJHdrMZyJCeOUhiWshLKhcZrO7GdfY0KQZUx
U+BmYuI8oOA7bl5ML72yD3IVCtGLHQxZZcqq5enX0P32bU2rQpV4TcJllTXq0Kqs
BHvRSE3hspEPkzI37vApBaGrcDSWB+NvsIKX1lhsZIxpL51d08Hzpz3wZsD+D9qw
SnscG+7DOClawQKYAK/rrvxJtbCaLKxWtHEk/M0/XdfQS3NvkP+sgV8WPfGHTyP+
zLsAlJeGf8S/+3Htk/j0W/PRY0VhecBFABpoAWbF1vOJbXHsjx7mio05ZXG2IHuf
kaxO95SmZQowIB7+ycXvtc8e8G+a/otcfC+cwr9uF0aqnqSP0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaer4p5B9uHFoKWIr5QozgpMZRuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmVhMjZmZmItNmQyYi0z
YmU1LTgyNjAtODQ4M2UwNmE4OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlFGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCBg1WK8Lh2ifdT6bkinMNBBLDRuTKapdLmt0Pj65QWkQqPsxUJXREo
/7Z2iyTFhtt7AUNumEdJgdjNGHwLd3RIO7jfKAVlCK+jw2Fgl65hJwK0txBkv0fO
CByrvK1d9DOQYzpIpqEv9P41N1awf5Rb1F4Sp+RTByaybzX28ld2zziPmpJgrgiz
seoHrVnt7Il2wvIXHg1Md468oa3mtsTH4lONDvJwJG8M3bPIwKnwJicC97e/zrOi
spyAmeksZA8XGg6U1dQ6yCVKNS93/23MB9ijy2BkHgs2JjxtyVynFbYBI0aLNbHC
dIyYkC3JzgDNdWOR0HYkZlvHL+Axvk8=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:41 2025 by rpki-client