Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6acb10a2-a46c-3e0a-b1b0-55a1909d95fe.roa
File:                     6acb10a2-a46c-3e0a-b1b0-55a1909d95fe.roa (raw, json)
Hash identifier:          0/mPC83C2ghExkPOCLWPqMg8XgWzRYWZFHTmJEaeUGg=
Subject key identifier:   FB:D7:04:07:2F:A4:84:F2:95:C0:11:D4:BD:33:AE:BA:62:D6:3C:58
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5C6CB14030B1A23541C27CA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6acb10a2-a46c-3e0a-b1b0-55a1909d95fe.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        50.82.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b1:40:30:b1:a2:35:41:c2:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=9a28e2f6-fbce-43a6-8d61-d7bcf9dcd720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:dc:1e:de:36:28:47:1d:97:9f:09:0e:7a:
                    12:29:2f:63:2c:84:c8:99:d9:4b:31:c0:2e:3b:b3:
                    22:09:3e:73:34:f7:19:d0:07:64:57:93:d1:ed:15:
                    c8:db:86:63:ff:1a:78:d0:6e:33:1c:af:76:5a:a9:
                    77:99:3f:61:db:fb:a0:15:5c:82:ac:3e:b1:a2:2c:
                    68:28:c4:5a:55:f4:93:ee:a6:f9:e1:00:e3:ed:48:
                    5d:62:6f:56:93:54:b6:83:f3:09:a5:02:32:ee:f1:
                    41:bf:79:e8:cf:59:73:e1:ee:0b:d3:0c:c1:8b:fe:
                    c4:67:12:1b:73:5c:e7:30:bc:93:91:ee:ac:54:4c:
                    52:02:c7:56:b2:c4:c0:cf:3d:12:b2:d4:fc:a9:9b:
                    68:a6:db:81:d5:da:08:3d:4f:e0:b9:0a:ec:5f:3a:
                    bd:0a:9a:0b:6e:17:3a:6d:3e:4e:5d:db:fe:93:ba:
                    2e:10:b7:5c:15:68:33:04:d9:af:37:b4:fc:50:76:
                    cc:f4:50:0c:45:4a:61:84:1a:ec:a0:6a:b9:69:de:
                    aa:23:56:b5:8c:8c:d4:83:ec:3b:01:37:68:98:06:
                    24:e9:2f:fe:36:dd:84:d0:89:5f:e6:b0:05:83:16:
                    ed:c9:55:08:d9:a5:1e:2f:e0:e8:50:6b:a6:e3:b3:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:04:07:2F:A4:84:F2:95:C0:11:D4:BD:33:AE:BA:62:D6:3C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6acb10a2-a46c-3e0a-b1b0-55a1909d95fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:81:f1:f3:9a:4b:bb:64:5f:37:1c:8c:8a:7e:c1:17:cd:19:
         76:d0:2b:48:f6:39:2d:a9:10:9e:ed:a0:9e:d5:18:b5:c4:99:
         87:ae:ac:2f:ff:d2:85:b7:55:d9:52:f7:2f:cd:6b:d2:4c:fa:
         d0:7b:b1:be:4e:59:b4:3e:99:df:02:03:ab:d0:50:ae:1f:e0:
         9c:d7:0c:9d:1e:53:d0:83:51:ea:65:18:ec:1e:d1:36:1e:e8:
         c3:7a:06:54:f5:86:ca:f6:6f:2e:19:a0:84:83:62:29:56:44:
         f0:80:ec:86:0c:05:c2:2d:dd:f6:60:a8:37:97:a7:16:6d:b5:
         29:99:b7:0c:5a:d8:67:75:99:15:f3:16:53:7a:35:9d:2a:83:
         d4:dd:f4:87:bb:83:7e:e4:30:cb:84:16:4c:61:ee:d7:b1:50:
         6d:ef:45:b6:a4:dd:47:0c:1b:36:bc:86:21:c4:ab:9b:a1:b3:
         9e:3a:74:88:1b:dc:f6:5d:37:ca:16:e0:d0:48:17:9a:73:79:
         31:24:9c:6d:44:7b:f4:4b:88:94:40:ea:0b:72:ca:24:d8:9d:
         4c:b6:8f:41:0c:ab:87:ff:04:cd:22:aa:8a:e9:e0:a8:30:22:
         07:7a:e0:aa:d0:5a:b3:40:f1:69:bb:04:da:90:ec:7c:79:b7:
         cd:78:59:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLFAMLGiNUHCfKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
OWEyOGUyZjYtZmJjZS00M2E2LThkNjEtZDdiY2Y5ZGNkNzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6TcHt42KEcdl58JDnoSKS9jLITImdlLMcAu
O7MiCT5zNPcZ0AdkV5PR7RXI24Zj/xp40G4zHK92Wql3mT9h2/ugFVyCrD6xoixo
KMRaVfST7qb54QDj7UhdYm9Wk1S2g/MJpQIy7vFBv3noz1lz4e4L0wzBi/7EZxIb
c1znMLyTke6sVExSAsdWssTAzz0SstT8qZtoptuB1doIPU/guQrsXzq9CpoLbhc6
bT5OXdv+k7ouELdcFWgzBNmvN7T8UHbM9FAMRUphhBrsoGq5ad6qI1a1jIzUg+w7
ATdomAYk6S/+Nt2E0Ilf5rAFgxbtyVUI2aUeL+DoUGum47NfKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvXBAcvpITylcAR1L0zrrpi1jxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmFjYjEwYTItYTQ2Yy0z
ZTBhLWIxYjAtNTVhMTkwOWQ5NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlIhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSB8fOaS7tkXzccjIp+wRfNGXbQK0j2OS2pEJ7toJ7VGLXEmYeurC//
0oW3VdlS9y/Na9JM+tB7sb5OWbQ+md8CA6vQUK4f4JzXDJ0eU9CDUeplGOwe0TYe
6MN6BlT1hsr2by4ZoISDYilWRPCA7IYMBcIt3fZgqDeXpxZttSmZtwxa2Gd1mRXz
FlN6NZ0qg9Td9Ie7g37kMMuEFkxh7texUG3vRbak3UcMGza8hiHEq5uhs546dIgb
3PZdN8oW4NBIF5pzeTEknG1Ee/RLiJRA6gtyyiTYnUy2j0EMq4f/BM0iqorp4Kgw
Igd64KrQWrNA8Wm7BNqQ7Hx5t814WXA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:46:01 2025 by rpki-client