Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa
File:                     67448b30-8bea-3578-b96c-3a5ea4df1a10.roa (raw, json)
Hash identifier:          gERDWRjQNpIrmN/yVPaEI00FXsECAPd4recE1SNZASA=
Subject key identifier:   8A:4D:FD:4A:42:D5:EF:47:44:CC:2B:F4:15:53:00:ED:8F:F5:31:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797EB92D3361A2C2F087800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        50.82.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:eb:92:d3:36:1a:2c:2f:08:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=61f2bdcd-ae32-4b21-aadc-9702b027127c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:5d:55:e8:c8:c3:e4:85:df:db:94:8c:46:
                    37:1a:c7:1d:30:b1:ab:bd:0b:33:54:f2:e3:ca:5d:
                    32:5e:a2:dd:aa:4f:aa:f6:42:af:4b:73:64:c3:cc:
                    a5:d5:d2:c1:86:44:e0:7c:87:cc:c8:68:55:04:63:
                    6b:d7:4f:49:97:8d:5c:d5:4d:72:38:fc:ac:ac:72:
                    76:e6:e2:a0:79:d6:fb:9b:d4:de:06:d4:c7:06:49:
                    18:70:7a:04:fc:2b:aa:0e:4a:15:ff:bf:70:2a:83:
                    dc:9e:24:4f:98:b3:65:0c:1f:7c:88:9e:68:bf:af:
                    ee:14:46:65:56:88:e1:c8:cb:d6:da:46:93:c7:38:
                    0b:1d:7b:4c:9e:1b:37:e4:c8:4e:45:89:c0:fb:24:
                    43:d1:15:e6:e1:a1:ec:24:02:82:da:a9:89:78:73:
                    d4:ec:45:66:f1:fe:7d:52:3d:76:29:1c:30:fa:e1:
                    a7:64:4b:2a:e8:e6:9e:a9:82:bc:ce:3b:76:c2:eb:
                    5e:7c:b3:be:a1:bd:5d:8a:c1:57:be:45:77:cb:e0:
                    f1:df:1e:30:4b:08:ea:7a:79:74:9d:33:57:0d:1f:
                    5b:e6:e0:99:84:bf:4c:26:2b:cb:bf:8b:ae:96:6e:
                    a1:9e:5d:f9:c3:98:36:37:8e:9f:0c:c5:1d:d2:27:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:FD:4A:42:D5:EF:47:44:CC:2B:F4:15:53:00:ED:8F:F5:31:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67448b30-8bea-3578-b96c-3a5ea4df1a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a6:7d:1e:7b:db:b4:2b:31:db:b7:c5:9f:62:5a:2f:85:33:
         14:69:e5:c0:0b:d6:af:3c:b2:1e:e9:c8:9e:4c:fa:fc:4c:1d:
         27:29:63:d7:25:e4:f6:b9:7b:36:f9:09:24:7a:ca:44:c1:73:
         4a:7d:09:3b:41:59:e1:18:99:08:7d:c2:56:b3:ba:7b:a5:5d:
         a9:07:72:bd:1e:0d:4a:4d:8a:38:20:3a:29:fa:03:a9:08:e8:
         7e:05:33:08:5f:a7:20:2c:8e:7b:fc:0c:8a:fb:7a:98:b7:41:
         12:00:ca:e9:c5:76:ef:18:16:ae:9f:2d:8e:11:7e:fe:0a:50:
         f6:10:eb:40:95:5d:ec:0e:29:0e:d5:86:65:f6:85:06:bc:01:
         78:5b:5d:5e:0e:76:a9:b0:10:d0:d2:fb:1f:cc:8d:40:c4:3b:
         a9:4a:09:66:ca:f0:01:93:8b:7c:02:5c:2d:e5:46:38:41:21:
         7a:0b:fa:6d:c4:05:82:d4:8f:4b:74:87:76:3b:a1:cc:62:fe:
         a0:2e:21:ee:2f:0f:61:bf:43:03:e5:fe:db:3a:c1:b5:ae:a3:
         34:b4:47:46:b1:9d:18:18:db:56:85:9d:1a:98:bb:e5:e3:bb:
         7a:11:b8:33:c7:f7:ac:aa:b4:e9:f0:85:e6:17:33:63:6d:87:
         98:5b:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:37 2025 by rpki-client