Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa
File:                     3bd261ad-9854-3464-be0c-e0866d46b893.roa (raw, json)
Hash identifier:          UPCIotLCcIDueV4kUUwWY0qM5acFqyXmcYUyL5JCleo=
Subject key identifier:   1C:55:FC:B5:12:E4:AE:64:B7:83:A9:13:09:D0:DE:96:E4:DF:E3:94
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797315C1B136F95640E6080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        50.82.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:31:5c:1b:13:6f:95:64:0e:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=2f999ef0-9536-4949-85f2-4ff3f97263ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:a8:d7:23:e4:4b:4d:a9:91:bb:17:7e:68:
                    8d:f6:6f:44:b9:4f:f5:76:66:fa:d3:42:74:60:3a:
                    33:c2:c5:42:e8:86:06:15:4a:7a:b4:64:11:90:83:
                    c8:7f:a9:af:e3:31:30:5e:ba:af:43:2e:99:73:59:
                    e9:7f:dd:21:cb:3f:ba:7e:4c:37:f2:67:65:1d:b7:
                    1f:98:8e:40:66:33:2b:8f:30:7c:d0:f7:be:df:e7:
                    98:d4:c3:57:c5:f5:ff:24:7a:42:de:9f:c5:da:55:
                    8a:85:04:24:3b:a0:03:0c:81:9f:0a:c2:b3:08:d3:
                    8a:c2:54:77:5f:07:59:82:18:07:59:c4:68:40:5a:
                    c9:e4:12:2f:08:38:40:dd:22:99:2d:95:5a:84:12:
                    3d:8a:b0:6b:ff:33:f7:00:e5:86:b7:05:09:4f:7e:
                    45:df:84:4b:7e:91:47:97:c3:db:92:09:7f:f4:d8:
                    ee:ff:f8:18:03:82:2e:08:1b:e0:6f:ce:e6:6e:e9:
                    e2:3b:aa:10:f7:d3:ff:f3:42:b8:b8:b3:8e:31:85:
                    37:d9:ac:d8:2d:4f:aa:d5:3f:fe:dc:b9:3c:04:67:
                    91:f8:40:e5:98:67:32:e9:e3:ef:21:7e:bf:c3:f2:
                    5d:61:a2:76:b2:9f:36:0b:9b:8a:77:bd:f2:2b:c8:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:55:FC:B5:12:E4:AE:64:B7:83:A9:13:09:D0:DE:96:E4:DF:E3:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:32:06:02:50:f3:63:15:cf:ce:3d:f0:18:ad:2e:94:b6:75:
         93:78:f4:bc:7d:cf:5a:ad:41:97:52:bf:b9:6c:0a:d2:5d:07:
         30:2e:86:cd:92:41:3a:de:fc:14:a6:f5:50:1e:aa:8f:4c:26:
         e1:be:1f:20:80:4d:d5:e6:95:ac:2f:ea:7c:4b:10:01:5b:7d:
         10:5d:6c:53:e2:74:5f:87:c4:dc:8f:23:ec:39:b7:87:e8:5f:
         7a:88:a3:62:00:21:40:87:35:b0:9f:9f:69:57:ab:4e:a6:75:
         87:a5:d9:f8:73:6f:be:ff:2d:67:e5:b3:f5:8c:5e:1a:97:d7:
         39:0f:3b:8b:2d:de:1e:c5:6e:34:db:83:68:9d:a1:da:5b:f1:
         48:a1:f0:d4:88:ae:5c:46:9c:5c:1f:65:e4:28:2e:7c:b7:2e:
         e4:fd:ff:e3:59:d5:a5:d3:1d:a7:2e:44:41:a4:5d:15:a4:b2:
         a1:ab:83:ce:ae:87:26:db:1e:ce:63:07:66:0b:d3:a9:e1:e6:
         82:3d:70:9e:cc:7a:42:9d:31:67:c9:70:d6:31:4e:17:22:c9:
         ce:21:3c:62:4b:8e:17:0b:de:ea:c8:78:31:44:f8:86:ad:25:
         45:28:e4:60:8c:98:bc:27:55:d5:72:36:7c:b3:19:73:9d:2a:
         49:94:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:49 2025 by rpki-client