Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37e3e86a-1fdd-3abd-8a99-da3b834a8fdc.roa
File:                     37e3e86a-1fdd-3abd-8a99-da3b834a8fdc.roa (raw, json)
Hash identifier:          DfeuD/n8Ke35kVegSPWNNmRfYfMwfLP1SWxAD5SRpzg=
Subject key identifier:   85:94:1C:1A:B4:50:E7:D2:9F:DB:7E:77:D1:CA:9E:29:5F:04:6A:05
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B4AC315118C298FE1CA17A0A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37e3e86a-1fdd-3abd-8a99-da3b834a8fdc.roa
Signing time:             Tue 23 Sep 2025 17:10:35 +0000
ROA not before:           Tue 23 Sep 2025 17:10:35 +0000
ROA not after:            Mon 22 Dec 2025 18:10:35 +0000
asID:                     19905
IP address blocks:        50.82.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:c3:15:11:8c:29:8f:e1:ca:17:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 23 17:10:35 2025 GMT
            Not After : Dec 22 18:10:35 2025 GMT
        Subject: CN=8095bc3e-3fb4-4f37-bfb9-3431997ed282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:b1:d8:24:43:fa:47:90:3d:15:f0:a4:a8:
                    ac:53:bf:92:36:21:bb:2f:ad:a3:5b:a3:f6:8f:d5:
                    01:06:9a:ab:79:06:1f:46:96:72:00:6b:dc:f6:e1:
                    54:87:1b:84:4b:6b:ab:c0:07:e8:4e:8d:66:02:a3:
                    63:a5:91:31:98:cc:b4:47:33:9b:09:1c:fc:5c:04:
                    59:c6:75:90:ea:fc:6a:5e:1c:83:6c:f9:bf:9f:6a:
                    e0:06:9b:25:ef:e3:7d:3b:2a:46:3e:00:75:6c:91:
                    20:48:6a:2a:89:31:f2:15:9c:ca:39:04:5c:71:51:
                    c9:7c:7e:f6:19:17:1b:de:5f:b3:8e:55:0d:1d:d2:
                    c9:28:95:15:39:8c:47:ce:20:a8:be:a6:5e:95:b2:
                    a3:13:59:e8:4e:a7:10:b5:c3:e1:11:6e:42:a1:b3:
                    3b:25:93:83:4a:21:a1:5a:4f:f2:41:f4:c2:d8:78:
                    bb:28:93:05:91:8f:b3:fe:9b:b3:b7:8b:95:86:de:
                    5c:49:3c:12:ad:f1:25:45:58:01:9e:38:65:da:4b:
                    61:54:4e:6a:b9:04:a1:9c:64:5d:02:9b:c3:12:29:
                    33:ec:fb:da:75:a6:2e:ea:25:8a:51:0f:52:af:25:
                    99:23:bc:d3:26:e0:8c:e1:71:63:35:bc:87:80:21:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:94:1C:1A:B4:50:E7:D2:9F:DB:7E:77:D1:CA:9E:29:5F:04:6A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37e3e86a-1fdd-3abd-8a99-da3b834a8fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:71:35:e2:f9:bb:a0:e5:4f:a4:fa:e5:23:ea:f1:a9:d4:47:
         6e:28:21:d3:1b:60:33:30:5c:2d:f5:96:16:aa:7a:17:de:8b:
         04:e8:ee:78:87:48:b1:45:6a:0d:18:cf:cc:00:30:54:bf:ce:
         e6:02:26:63:45:e2:d8:2a:a5:b4:92:ac:fc:8a:45:88:d8:58:
         25:85:68:ff:fe:08:8e:0b:31:7b:d4:43:a7:9b:17:37:40:14:
         a1:a5:f1:8b:fa:46:7d:aa:38:65:95:6f:56:2f:f0:b6:79:2c:
         cb:cb:0a:e2:e5:da:0e:aa:30:6d:48:80:af:44:34:76:75:5e:
         c6:ba:d8:61:83:7c:20:61:9a:e8:43:8b:45:09:db:01:6d:c6:
         d8:11:c4:9a:a9:90:7c:03:96:96:a9:b9:fe:b2:77:62:f3:3c:
         3e:f0:72:74:7b:26:ea:17:5e:bc:62:9c:77:fb:36:ca:d7:0b:
         3a:ba:ac:8d:10:8f:29:f9:1b:da:2e:5e:bd:d5:33:e0:23:a3:
         43:74:13:f7:f2:f7:35:59:73:73:d7:08:3e:cf:f6:be:23:64:
         c4:26:a2:d1:7c:f8:d0:62:81:74:11:f6:62:e2:98:20:08:8b:
         96:27:08:a4:7a:62:ce:a5:c6:26:81:cb:fa:fa:59:0e:1e:d4:
         db:c1:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:40 2025 by rpki-client