Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99b9f2c3-e4c5-3950-a110-ec637abdd8fb.roa
File:                     99b9f2c3-e4c5-3950-a110-ec637abdd8fb.roa (raw, json)
Hash identifier:          D8oV0WrmJSIPzhVYfO/X5Qic/yJsvi6iy86xwxItJMs=
Subject key identifier:   FD:A3:2B:40:BC:CA:52:07:A7:A2:DA:B2:CC:DE:3C:17:04:6E:60:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4F746B730D5EBEA9D100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99b9f2c3-e4c5-3950-a110-ec637abdd8fb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.81.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4f:74:6b:73:0d:5e:be:a9:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c1df02d8-03ed-48df-b6e1-d10bb943ae58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:e8:97:17:06:e9:02:e9:ec:f8:7e:a8:80:
                    5b:19:aa:56:8b:d1:7c:df:00:51:4b:2a:98:69:e0:
                    e6:e3:41:09:da:33:92:1e:8c:c1:23:ee:4f:ba:9a:
                    91:70:cb:5e:40:fc:40:64:15:f5:ea:08:53:1c:bc:
                    ca:06:4d:27:76:40:3e:d4:a0:75:e3:76:22:91:9b:
                    c5:ef:2f:f9:ca:a2:1b:99:62:58:91:70:07:df:b1:
                    15:33:21:2f:bd:f1:34:0a:02:6f:dc:2b:8b:88:f6:
                    59:85:2a:80:61:18:d7:11:91:f0:6a:1d:ad:a5:48:
                    9b:43:0c:8d:57:e7:c3:2e:3b:6d:ed:41:39:03:81:
                    20:82:3d:4b:e8:a1:a7:54:0b:1c:90:fd:e5:1a:00:
                    72:5b:9c:21:01:06:89:42:b7:7f:c8:47:50:9e:99:
                    b6:cb:bb:a2:7b:73:0d:15:d5:c4:49:fb:2b:83:f1:
                    28:9d:47:c8:69:55:cf:04:74:3f:18:65:32:cd:a5:
                    54:82:c6:36:ca:50:a2:e6:78:a6:c4:06:50:ee:b5:
                    93:33:98:a3:2a:2b:92:f1:f1:80:63:99:e6:a2:c8:
                    79:d2:48:51:b8:d2:30:0a:1a:fc:6e:88:9b:1d:d4:
                    61:87:b6:38:12:ac:75:2a:c4:e3:c9:e6:9e:5a:c1:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A3:2B:40:BC:CA:52:07:A7:A2:DA:B2:CC:DE:3C:17:04:6E:60:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99b9f2c3-e4c5-3950-a110-ec637abdd8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:e8:96:c5:74:0e:d7:9c:02:69:96:df:7f:24:52:12:2b:
         5b:c2:36:6c:7c:e3:4b:d5:66:8d:b0:99:c3:7b:65:96:3b:a5:
         64:d9:cc:ed:b8:0d:35:40:c2:64:15:2f:86:9a:89:d5:6c:73:
         a6:93:d9:fd:99:ed:bf:9e:20:ca:2d:5b:7c:49:19:a7:84:20:
         ae:69:36:53:04:ec:29:af:99:85:bb:32:30:3d:c2:fa:9c:a1:
         ec:8f:f8:9d:d9:03:cf:ce:f7:dd:02:7c:95:c1:dd:bb:42:b3:
         39:94:62:d4:d9:f9:0a:e9:de:9c:e4:ae:e8:ad:19:fa:55:0a:
         ba:05:9f:ef:84:76:b4:b6:01:ba:be:7f:e2:57:3e:d0:97:5f:
         58:17:aa:72:38:35:26:8d:1f:6b:45:da:ed:de:13:d8:6b:86:
         6b:50:2d:ff:b4:d0:86:92:e8:3b:3b:ba:f5:f7:76:b0:50:5a:
         6f:92:b5:7d:92:56:01:97:17:dd:fe:90:9f:eb:00:de:b2:d8:
         6e:15:36:a6:f8:f9:b1:94:72:bf:75:c2:77:a5:36:b1:2e:b3:
         9a:98:f5:96:fd:d5:4a:7f:a8:66:df:0a:a4:ce:3e:6c:47:46:
         37:e7:f4:70:1f:81:d5:89:f2:b1:50:d3:4d:5a:cf:7c:1f:4b:
         dc:14:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:43 2025 by rpki-client