Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa
File:                     5d7e4afe-cd32-3f55-b430-42a6b619dace.roa (raw, json)
Hash identifier:          VU4jQJJFwW2iVTSgu8dPOvCRLcRB8T7hp9eE3S6pAOY=
Subject key identifier:   0B:43:85:D0:B7:EE:25:BE:EE:1A:63:BB:7F:DD:01:F0:13:F5:A6:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC866AB911F67B16EA5CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.81.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:86:6a:b9:11:f6:7b:16:ea:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b3015e65-1fb7-49fc-b819-a15a8d37d9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:ab:96:3a:9a:28:06:67:7d:83:57:17:7a:
                    50:8f:0c:0b:ec:1b:5e:fa:84:af:bf:1a:59:9e:a7:
                    d1:a7:4f:3f:46:00:54:7f:d5:fe:51:f9:2d:be:4f:
                    9e:da:1d:08:89:bc:17:a6:a5:06:50:58:6c:b2:af:
                    45:b5:60:cd:61:ff:1b:06:fe:77:51:7b:a0:31:5e:
                    2d:0c:32:6a:df:6c:59:86:7c:ed:1a:95:b8:7f:b7:
                    ea:79:32:0a:83:2f:72:b9:0c:b5:40:08:66:38:94:
                    6e:7c:9e:ea:f0:7f:ec:13:39:6a:21:d2:97:c4:59:
                    29:42:35:39:42:7a:01:7c:ee:22:71:e0:3d:cc:96:
                    63:f1:97:4f:ee:13:cd:f3:d2:15:3d:a9:f2:fd:21:
                    32:6f:6e:51:8a:e3:17:b7:36:52:39:1a:90:10:a4:
                    33:c7:8b:ac:da:bb:c7:dc:65:2e:c2:a0:0b:0e:3c:
                    9d:1c:36:58:69:2a:5f:ec:c6:2c:97:d9:10:d7:56:
                    90:2a:3f:79:af:95:aa:76:f9:bb:bb:77:81:32:c1:
                    e1:99:e1:bc:18:25:22:9c:c7:a4:71:c0:a8:09:af:
                    d9:68:84:0c:eb:dc:02:38:39:45:fd:89:88:f3:a3:
                    45:7f:99:d2:a3:ba:b5:eb:c9:4c:c1:77:9a:df:6a:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:85:D0:B7:EE:25:BE:EE:1A:63:BB:7F:DD:01:F0:13:F5:A6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d7e4afe-cd32-3f55-b430-42a6b619dace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:1f:35:f4:f6:c5:56:68:06:89:88:e7:93:9a:22:ab:72:
         1e:b6:cb:b0:bf:df:7a:d3:fd:4b:a9:68:d1:40:f9:8e:69:d1:
         3e:c1:c3:ea:a9:be:0f:0e:b4:36:5a:b5:55:20:b4:fa:ac:9f:
         43:4c:5b:75:9f:e9:d6:8e:d4:92:d8:29:0e:33:05:3a:73:f9:
         77:77:21:d0:de:17:ce:34:46:e7:40:63:6a:60:ed:4f:4d:8a:
         38:90:30:da:4b:bf:bd:a0:d9:fc:02:f3:2e:f7:7c:f9:15:67:
         e3:18:67:88:93:64:0a:7f:01:fb:f8:ac:9c:eb:5f:e9:ac:03:
         24:fc:b5:dc:91:34:5e:19:36:a9:48:40:fb:da:cf:dd:b1:38:
         e9:87:43:65:cf:31:ad:c9:40:23:a2:18:b5:4d:2b:a2:a3:82:
         19:be:80:3c:de:6d:f3:a0:3a:cd:e5:a8:1f:04:f7:1e:f9:65:
         58:1f:11:cf:ab:e2:a3:ae:e7:63:a3:49:7e:a5:fe:e4:c7:e3:
         96:cf:6a:09:3c:51:d3:bd:e3:f2:a8:d4:86:1d:ef:a7:7c:54:
         5d:cf:dd:84:d1:4f:ea:64:9a:21:71:9d:44:7b:6c:ba:5f:bc:
         87:2d:05:a9:7d:d3:00:85:50:b5:ed:fd:47:73:7c:41:cd:ed:
         bb:9c:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:59 2025 by rpki-client