Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fd4b089-8e00-3e8d-86ab-df84c771608a.roa
File:                     8fd4b089-8e00-3e8d-86ab-df84c771608a.roa (raw, json)
Hash identifier:          4u/sxmFNxdE8MAiqx6VqFNfz07YFzVbGjKLh35d7QRU=
Subject key identifier:   F3:06:06:14:29:62:90:81:77:CC:A2:FC:BF:E5:B4:38:16:54:B0:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B434C536CDE16E458EE3DE5E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fd4b089-8e00-3e8d-86ab-df84c771608a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        50.80.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:53:6c:de:16:e4:58:ee:3d:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f39f3472-56e6-4313-b6db-684e695440ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:4d:82:1a:40:11:b8:bc:77:c6:cf:01:c1:
                    f2:c3:f3:94:f5:d1:40:61:09:4c:db:1e:de:66:bb:
                    3e:3b:3d:53:ce:9c:dd:cf:f1:13:ab:40:25:1f:23:
                    74:a7:fe:40:f4:1e:87:83:1c:f6:48:0d:64:4b:04:
                    e5:ed:43:a2:50:56:a6:6f:83:c2:46:7c:c5:46:52:
                    0c:15:59:93:8f:b7:b2:34:07:b7:5b:9c:46:f8:77:
                    28:5e:73:eb:ab:96:0b:e1:6d:1b:1d:54:69:a0:05:
                    12:53:2d:cc:ac:54:42:b9:8b:0e:4b:be:db:3e:a0:
                    29:71:8f:29:a2:1b:17:6e:93:f2:7d:20:f2:55:d4:
                    64:3e:cd:12:db:2d:fa:79:10:76:18:36:76:ae:fc:
                    b5:10:35:af:e7:d4:56:f4:f8:92:d7:87:e3:81:01:
                    39:e8:74:8d:5c:1c:04:70:b0:96:84:0f:a4:36:63:
                    93:4f:84:f8:c4:00:66:86:c2:b6:dd:28:45:b3:6a:
                    8c:fe:f0:09:8f:41:00:02:d0:0a:cc:20:1c:a0:75:
                    a0:35:fb:78:69:3c:b0:6c:ff:85:72:11:54:7e:37:
                    d2:e1:7d:9c:8a:c7:2a:2d:6c:29:8d:09:27:20:98:
                    d5:c9:76:d2:7d:38:43:4f:d0:5c:f5:ba:1c:e4:ad:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:06:14:29:62:90:81:77:CC:A2:FC:BF:E5:B4:38:16:54:B0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fd4b089-8e00-3e8d-86ab-df84c771608a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:a9:d7:27:85:ff:a3:90:b9:ff:af:74:8a:86:b7:ff:5e:
         41:26:77:b1:d2:51:f5:be:2c:5e:b7:52:6f:4e:32:7f:73:a5:
         20:ef:82:df:15:45:27:82:37:1f:d7:1a:a7:cc:a3:fa:c6:8f:
         85:fb:ad:4e:69:bd:00:8d:56:47:e9:5c:f3:ab:13:53:4a:a3:
         85:b5:56:41:4e:70:4d:5f:22:d2:8a:7c:77:70:d1:6b:5e:33:
         ec:ff:b1:87:e1:b5:08:5f:7d:26:7d:4a:aa:e1:f1:a8:8f:c1:
         eb:7a:7e:65:26:83:50:13:0b:ac:04:ff:8f:e6:8e:8c:b9:0a:
         d2:b4:37:9c:29:8d:7d:2e:02:d2:61:67:c2:72:79:cb:4d:ad:
         bf:d9:50:ce:73:e5:dc:d6:e7:96:fd:ba:f4:0e:d4:06:52:6d:
         da:6e:61:65:c8:6a:5e:8b:f7:2b:21:c9:aa:33:b6:9a:cc:23:
         24:3c:f7:b4:13:e9:5e:f3:d7:8d:1f:47:55:22:28:3a:0d:23:
         73:10:86:34:28:ad:8f:e1:6c:22:bd:72:eb:d1:9a:75:1d:99:
         3a:74:b9:83:a3:14:c7:eb:3a:cb:65:3e:58:af:d4:36:e9:ac:
         2c:84:f3:cd:c2:2c:a2:a4:cb:be:1f:61:f6:e6:ae:57:9a:ca:
         f1:da:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:31 2025 by rpki-client