Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/626737b9-2ffe-3371-9937-2351d3c9ff26.roa
File:                     626737b9-2ffe-3371-9937-2351d3c9ff26.roa (raw, json)
Hash identifier:          vYgsBRQ71eM7aIKfPUjSIvzPEO/gwc6EgVQgfgu+m48=
Subject key identifier:   FA:35:A2:65:10:8E:E3:71:AF:D3:25:ED:0F:D0:12:61:BA:68:8A:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5B0565988569341795275200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/626737b9-2ffe-3371-9937-2351d3c9ff26.roa
Signing time:             Mon 29 Sep 2025 12:57:08 +0000
ROA not before:           Mon 29 Sep 2025 12:57:08 +0000
ROA not after:            Sun 28 Dec 2025 13:57:08 +0000
asID:                     30036
IP address blocks:        50.82.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:05:65:98:85:69:34:17:95:27:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 29 12:57:08 2025 GMT
            Not After : Dec 28 13:57:08 2025 GMT
        Subject: CN=d92661be-1b1f-4284-8ff1-3b0757b6ed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:7c:88:71:b6:73:a1:9a:4f:de:21:bb:95:
                    f0:30:b2:91:3d:df:7f:52:d5:fe:83:52:68:8e:fb:
                    7a:ed:66:23:7d:b8:1b:f0:ca:33:e1:03:54:a7:cc:
                    cf:bc:15:3c:ac:96:2b:ac:65:85:66:af:b2:6b:4c:
                    4d:19:c3:9f:e9:f0:46:84:23:5b:a4:f3:a7:4d:2e:
                    02:ac:00:e6:c9:1d:0c:f0:20:1f:24:3c:a9:04:b4:
                    18:1e:87:07:ac:01:3a:0f:b9:02:ce:6a:7d:99:6d:
                    17:01:48:89:02:63:4e:35:fe:42:2f:79:99:d4:c2:
                    57:45:36:87:90:79:01:61:af:f3:4b:ba:98:80:63:
                    a9:78:db:e8:05:ca:6a:72:2d:bb:ae:37:4f:bc:30:
                    53:9a:a6:85:b3:4d:0a:f0:5d:ce:36:1e:6d:8d:9c:
                    55:30:ca:d7:8b:3c:20:bf:9a:8a:67:69:01:30:b9:
                    9c:54:55:59:47:dc:09:21:8a:b2:b1:e7:58:c9:06:
                    1c:34:58:1f:22:05:9f:d2:ed:7f:c5:21:1a:f7:8d:
                    0b:21:80:9e:3a:e3:2e:8a:c8:6e:c4:54:6c:a0:ff:
                    77:3c:6d:99:65:b9:01:f9:2c:74:92:ca:e2:cd:68:
                    de:0e:82:b4:ba:0a:39:47:74:2f:9d:ce:60:e3:30:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:A2:65:10:8E:E3:71:AF:D3:25:ED:0F:D0:12:61:BA:68:8A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/626737b9-2ffe-3371-9937-2351d3c9ff26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0b:57:f9:68:42:30:3b:b9:01:73:ae:7d:c2:a7:45:7b:53:
         57:e9:65:81:f0:f8:cb:01:fe:b6:b2:84:5f:94:ff:9f:5a:4d:
         d0:36:15:f1:cb:b3:08:a7:ab:f9:46:59:28:13:ef:9e:44:ed:
         15:7c:c7:1e:39:d4:33:62:82:d4:ed:cf:2f:2e:27:f7:b0:31:
         9d:19:6d:89:7b:37:fa:c1:15:4e:04:4c:6e:dc:3e:1d:78:c2:
         14:5e:e3:2f:66:cc:69:10:ec:39:c4:bc:73:1a:a0:5d:f6:82:
         a4:b3:14:ae:3d:02:43:2c:c9:c4:7f:50:50:f1:d4:cb:17:a0:
         cc:68:c3:5a:82:f6:d0:4c:ea:ad:46:e1:0f:4a:ad:0e:5c:94:
         51:72:d7:cb:5f:30:ad:57:fb:63:88:78:db:f9:5d:4a:d8:00:
         94:62:5b:47:2a:17:4b:f2:ec:c8:17:ef:04:39:a8:b6:72:84:
         db:82:97:5d:db:52:93:40:9b:97:22:1d:db:1b:9d:b9:6c:62:
         59:03:32:fe:35:32:e2:15:d8:c2:6d:7b:66:e6:5c:a3:34:5c:
         40:34:78:92:73:18:27:fd:60:83:6f:ca:06:29:41:e8:3d:68:
         49:dd:1d:c4:eb:94:01:4a:e5:af:d6:46:c7:6c:58:63:34:23:
         79:82:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:28 2025 by rpki-client