Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/389bfbe8-2968-3068-a06f-d4a2c6a8d425.roa
File:                     389bfbe8-2968-3068-a06f-d4a2c6a8d425.roa (raw, json)
Hash identifier:          CiMobMB5RmqaY7hT+niOddfFeT2dUyiRNzw0ouPDXxA=
Subject key identifier:   11:F6:F1:BF:CE:9D:D7:C8:39:7B:ED:76:57:64:88:7A:8A:26:BC:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B3C51B5CC2E421C5D57CF6500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/389bfbe8-2968-3068-a06f-d4a2c6a8d425.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     30036
IP address blocks:        50.81.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b5:cc:2e:42:1c:5d:57:cf:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=befa8a13-c57b-4475-bffa-8d2708366e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:ca:05:d6:fd:11:7d:3f:dd:e0:30:aa:46:
                    d2:05:cf:52:3f:ec:d7:81:f3:a1:f0:1f:f7:f6:16:
                    b3:ac:b3:1c:a8:1e:c6:10:51:23:37:82:2c:d5:16:
                    22:93:21:d6:21:63:b2:45:69:ad:e4:69:cb:84:f9:
                    1c:42:69:e3:00:50:93:7d:c7:fe:b3:67:cb:85:13:
                    de:2a:06:6e:a3:60:ef:11:e8:5a:de:b0:72:c0:cc:
                    16:32:96:7a:3a:67:fb:9c:36:1b:04:7a:26:ea:d4:
                    ae:fe:5c:28:1e:c3:e2:9d:1e:f7:77:70:85:2f:c6:
                    5b:2e:8f:98:46:c2:42:60:2d:43:23:0d:65:82:ae:
                    7a:88:a4:71:72:fd:78:b1:bc:c0:b2:fb:46:ab:69:
                    1a:6d:b6:ff:d2:4f:46:29:58:41:40:b8:e7:c9:8b:
                    95:dd:87:9d:44:d3:85:de:7b:94:22:ca:0e:16:e0:
                    06:76:ca:fb:2b:53:fa:75:1b:6f:de:a9:b5:41:30:
                    5c:52:1a:ba:03:74:d9:f4:a6:8d:b6:a5:a0:fe:26:
                    74:9e:f5:8f:bd:33:d6:18:80:a3:8b:0f:0f:24:ce:
                    73:a7:db:7f:0d:f3:82:9c:f4:5b:cb:26:e1:6b:7f:
                    97:0b:30:5a:8f:b9:e4:c1:75:36:dd:96:41:15:5d:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:F1:BF:CE:9D:D7:C8:39:7B:ED:76:57:64:88:7A:8A:26:BC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/389bfbe8-2968-3068-a06f-d4a2c6a8d425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:b7:7c:ce:b0:bf:5f:cf:7f:42:4d:54:6d:20:7e:6d:1c:
         87:8b:a7:aa:38:75:38:f7:4e:f6:e1:eb:a4:75:d7:7c:0f:85:
         be:21:07:0f:7a:81:1a:6f:04:2f:de:34:14:4a:d6:1f:46:13:
         1e:80:c7:d6:16:3c:e2:2a:c4:c6:6d:8a:5f:2c:ee:5f:f5:b4:
         5f:c1:b1:f5:c9:16:e8:b0:06:fb:22:15:ff:5a:ec:b2:01:5d:
         21:76:74:8f:f3:e9:d2:71:04:73:54:36:04:89:73:3e:4d:c6:
         6b:86:4f:93:1b:7b:52:79:bc:da:7b:22:40:49:7a:1d:60:b1:
         a5:15:07:89:b2:c0:98:36:f4:4a:5f:d6:6d:52:7f:da:ba:06:
         e9:51:d3:6c:08:db:c9:5c:6c:43:71:6b:c8:99:3b:a3:46:e3:
         e8:cb:d1:6a:ef:bc:e9:db:f0:ee:94:57:8b:42:0a:1f:6a:73:
         1a:31:e1:aa:88:9c:36:07:c8:74:d7:e5:0f:d3:b1:10:c6:d4:
         54:31:2f:60:37:0f:d7:5c:a7:d3:4e:dd:61:96:25:b2:a8:f4:
         09:58:33:b3:9d:a4:cc:1a:63:f7:cd:14:0b:75:1f:b4:b2:52:
         d3:93:2c:02:b5:98:56:0e:44:4a:a9:b2:6d:e1:03:0e:90:b9:
         a7:40:0c:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbXMLkIcXVfPZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk
YmVmYThhMTMtYzU3Yi00NDc1LWJmZmEtOGQyNzA4MzY2ZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNHKBdb9EX0/3eAwqkbSBc9SP+zXgfOh8B/3
9hazrLMcqB7GEFEjN4Is1RYikyHWIWOyRWmt5GnLhPkcQmnjAFCTfcf+s2fLhRPe
KgZuo2DvEeha3rBywMwWMpZ6Omf7nDYbBHom6tSu/lwoHsPinR73d3CFL8ZbLo+Y
RsJCYC1DIw1lgq56iKRxcv14sbzAsvtGq2kabbb/0k9GKVhBQLjnyYuV3YedRNOF
3nuUIsoOFuAGdsr7K1P6dRtv3qm1QTBcUhq6A3TZ9KaNtqWg/iZ0nvWPvTPWGICj
iw8PJM5zp9t/DfOCnPRbyybha3+XCzBaj7nkwXU23ZZBFV3qywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBH28b/OndfIOXvtdldkiHqKJryGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzg5YmZiZTgtMjk2OC0z
MDY4LWEwNmYtZDRhMmM2YThkNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWyt3zOsL9fz39CTVRtIH5tHIeLp6o4dTj3Tvbh66R113wPhb4hBw96
gRpvBC/eNBRK1h9GEx6Ax9YWPOIqxMZtil8s7l/1tF/BsfXJFuiwBvsiFf9a7LIB
XSF2dI/z6dJxBHNUNgSJcz5NxmuGT5Mbe1J5vNp7IkBJeh1gsaUVB4mywJg29Epf
1m1Sf9q6BulR02wI28lcbENxa8iZO6NG4+jL0WrvvOnb8O6UV4tCCh9qcxox4aqI
nDYHyHTX5Q/TsRDG1FQxL2A3D9dcp9NO3WGWJbKo9AlYM7OdpMwaY/fNFAt1H7Sy
UtOTLAK1mFYOREqpsm3hAw6QuadADCo=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:17 2025 by rpki-client