Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a80c05d-ba87-3ddd-92ff-64fffa33df92.roa
File:                     3a80c05d-ba87-3ddd-92ff-64fffa33df92.roa (raw, json)
Hash identifier:          InHGTNeKaB8Z8P7/ektPF8grcjUwREaVlIzomygX8yw=
Subject key identifier:   58:AC:39:A0:D7:FB:E5:45:90:82:F5:0E:E4:0D:14:E1:A1:4C:F4:01
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F1A3F77360133BE60800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a80c05d-ba87-3ddd-92ff-64fffa33df92.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        50.82.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f1:a3:f7:73:60:13:3b:e6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=df25de75-5507-4a1f-b533-b628a2a30892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:19:42:26:ac:06:99:c1:e6:67:e0:54:a7:
                    63:f6:99:f8:41:48:27:fb:77:96:a3:14:cc:50:20:
                    b8:b1:c0:ab:5f:cd:7d:18:fd:d1:b0:1a:5a:f9:1f:
                    11:e4:8d:6c:63:ea:d5:7e:e6:5b:75:34:5e:65:1e:
                    c6:2c:64:3c:3d:74:ed:57:eb:e4:c3:d4:dc:c3:2f:
                    2a:57:be:c0:8e:12:b8:6b:94:a7:dd:a7:ef:ff:af:
                    7e:65:95:c0:8e:0b:26:89:7a:f7:47:f5:8a:26:20:
                    39:3b:3a:c1:36:47:65:de:f4:1c:7b:04:0a:6c:d9:
                    d0:9c:fc:e6:dd:ea:bc:5e:f6:be:0c:14:21:10:41:
                    49:e4:0a:78:fa:37:e3:80:cb:80:0a:fc:ac:fa:d0:
                    89:35:45:a1:f7:32:cd:7e:c3:8d:bc:a6:36:e1:74:
                    a5:2d:9e:6a:4e:de:3a:77:97:99:62:5d:e7:23:c7:
                    3c:42:b4:00:ad:ba:77:7c:54:57:91:c8:6f:19:ec:
                    24:4a:20:0e:34:7a:a4:bc:f4:dd:6d:b3:3b:d1:c6:
                    b0:d2:80:9d:27:f2:28:c3:9c:b5:37:e3:7e:98:32:
                    7e:59:16:ec:92:20:c6:b4:2e:52:80:83:5a:2b:8d:
                    5e:a3:ef:5f:dd:7d:70:9f:c9:71:ec:8d:58:92:3d:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AC:39:A0:D7:FB:E5:45:90:82:F5:0E:E4:0D:14:E1:A1:4C:F4:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a80c05d-ba87-3ddd-92ff-64fffa33df92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:7f:15:71:fa:01:18:85:54:d7:56:61:18:7a:06:3e:d1:
         e5:9a:a6:57:18:4e:38:90:84:90:a8:91:d0:15:9f:ba:39:fd:
         5b:da:ec:35:b7:9d:82:ea:1f:97:9c:bc:01:98:29:7f:9c:d4:
         87:bb:05:71:65:6c:16:df:d4:94:2d:4f:18:99:3e:66:af:fe:
         0d:5f:f5:ee:6a:c6:dc:cf:7c:73:0f:86:eb:7d:1d:c5:b3:ba:
         97:09:3a:08:cc:51:48:39:7a:7f:d1:6b:d5:9d:68:84:00:a7:
         33:66:bc:71:be:11:69:e1:fc:cf:fe:ad:a7:a2:8d:e9:4b:8e:
         96:ab:d4:96:6b:4c:8d:d2:46:c0:b3:0d:b7:9c:c6:1d:3f:ce:
         c1:6c:19:78:45:77:5f:ac:18:99:d9:e1:f6:9d:00:fc:dd:90:
         47:67:96:f3:bb:20:95:2c:1e:2d:75:35:0a:5d:55:8b:66:f2:
         b0:79:09:9d:f2:62:d6:70:3a:70:22:d4:18:82:f4:7c:af:7d:
         a8:f3:aa:a9:0c:a5:aa:a0:80:87:e4:d4:e7:c9:c2:e3:7c:6a:
         dd:1e:94:30:31:5c:43:24:aa:71:b7:e6:06:6b:c0:5b:09:84:
         fb:d6:fd:77:d2:7c:30:aa:86:cc:87:26:25:a2:f4:78:88:7c:
         92:34:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:28 2025 by rpki-client