Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/866f17b3-2866-3fe7-b281-df3b2f7ab35e.roa
File:                     866f17b3-2866-3fe7-b281-df3b2f7ab35e.roa (raw, json)
Hash identifier:          sl3xuDbajXH3RGUNu03jAs3MOpkUDBbtGrIwEQkITgo=
Subject key identifier:   9A:44:0E:34:57:51:66:46:25:CA:1D:CF:D0:D1:6B:E4:00:87:04:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79C9D31366C0B42A2DBA6600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/866f17b3-2866-3fe7-b281-df3b2f7ab35e.roa
Signing time:             Fri 10 Oct 2025 13:27:10 +0000
ROA not before:           Fri 10 Oct 2025 13:27:10 +0000
ROA not after:            Thu 08 Jan 2026 14:27:10 +0000
asID:                     19905
IP address blocks:        50.83.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:c9:d3:13:66:c0:b4:2a:2d:ba:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:27:10 2025 GMT
            Not After : Jan  8 14:27:10 2026 GMT
        Subject: CN=a57e96e9-f347-4ab2-b5ce-99249f0aabbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:a6:94:ed:22:6d:f1:8b:a9:ea:a7:df:4f:
                    79:eb:5b:a2:5a:5e:09:ec:cc:96:13:62:fe:78:e6:
                    fa:1e:6a:5c:14:62:8b:0a:1c:b0:ea:b4:a0:84:eb:
                    ec:f0:d2:8b:a9:91:2e:38:03:eb:e3:eb:37:17:08:
                    f2:63:ac:51:2e:2e:ab:ca:6d:9a:c5:c5:26:f1:68:
                    5e:8b:82:f8:85:4b:2b:fb:a2:dd:1e:50:b8:c9:04:
                    2b:7c:e2:72:05:62:1f:bd:8a:94:35:91:a5:93:84:
                    37:6b:c0:0a:66:25:3b:aa:ad:34:d6:75:65:43:e0:
                    e6:0b:2b:fd:a6:35:9a:32:69:6e:22:ed:1b:a9:b5:
                    f9:85:57:6a:bb:e3:64:43:96:3e:6d:da:57:54:ee:
                    4d:22:e7:62:19:83:12:43:83:83:08:62:ca:5e:46:
                    8a:92:20:ae:e0:df:18:f6:8f:cf:90:50:8c:d4:7d:
                    b7:8c:94:d4:ec:22:d1:23:c3:7e:3e:45:ad:40:28:
                    c0:34:68:14:bc:bd:3d:5c:ec:4d:fc:17:e7:e8:83:
                    8a:46:5a:55:8a:fe:7d:87:f9:4f:5e:dc:4a:52:31:
                    12:23:f4:b3:70:62:68:e7:d9:c3:e0:0a:e8:f8:ba:
                    ce:24:8a:28:cd:cc:ca:80:10:8f:87:1e:ae:24:98:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:44:0E:34:57:51:66:46:25:CA:1D:CF:D0:D1:6B:E4:00:87:04:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/866f17b3-2866-3fe7-b281-df3b2f7ab35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:73:a1:9b:23:65:09:f4:84:27:74:32:ee:18:db:3f:f8:d9:
         3f:82:4a:f7:df:47:53:8c:8f:2f:5c:e7:9d:17:d2:73:b0:4a:
         18:12:fa:02:70:fa:c3:4f:5a:16:11:41:7e:64:7d:8f:3d:27:
         0e:c2:09:f3:9c:bb:b2:ec:ca:c0:86:1f:73:21:70:de:58:49:
         27:5d:96:3e:e4:92:88:49:f6:41:ac:8b:a5:3b:cd:40:83:d3:
         06:41:68:5d:0a:60:be:17:ff:6b:08:32:bb:61:2b:f5:26:11:
         83:1f:29:0c:89:bf:31:0d:b1:bd:9e:70:66:d9:70:26:50:23:
         79:b9:6c:8b:57:72:91:40:37:89:1e:51:0d:b5:4a:a1:7a:76:
         5e:71:78:f1:7b:4b:fd:3c:1f:88:2a:68:13:2c:a0:3e:1a:9a:
         3f:05:eb:d6:b2:e2:1a:31:8d:55:69:54:44:9c:1e:4f:50:ef:
         16:f0:f1:2d:3c:d8:7c:b3:c4:12:c1:c3:29:57:4c:e5:07:c8:
         28:57:cc:c8:35:33:a1:16:d9:4a:9a:cb:ee:eb:15:cf:b5:81:
         e4:86:52:28:18:6e:f7:0b:0f:c5:5b:7e:53:6f:d9:d6:cf:ca:
         53:44:a8:2d:b3:5f:d3:76:b9:27:31:cc:9c:3d:3e:cd:2d:c2:
         d7:45:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:33 2025 by rpki-client