Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa
File:                     a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa (raw, json)
Hash identifier:          /OoJZFCy6VIEeA8q0Al1kfZlb1OosYdpxLhVvrr6KoM=
Subject key identifier:   96:17:BF:35:57:16:4B:E7:37:C1:A5:DD:F5:C1:36:85:EF:E8:E8:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC948866201F06DB678D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.83.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:94:88:66:20:1f:06:db:67:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f991a724-a619-4369-8aee-bc52a5d4c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:72:48:8a:01:18:38:58:14:28:c5:6f:d3:
                    b1:f9:4a:b2:3a:d1:64:b5:90:c5:be:e5:88:dd:b6:
                    b1:e4:39:ca:91:63:f4:2c:a8:a3:a0:2a:15:04:83:
                    34:28:b5:00:d5:2d:0e:6c:c5:05:c8:46:b0:a3:d7:
                    de:b8:d6:32:c5:71:48:79:cd:83:3e:75:b3:cf:bc:
                    0f:4d:4b:98:7d:a4:db:49:e8:30:fe:54:e2:9b:21:
                    01:1d:9b:18:49:7d:5f:c9:00:1b:94:a2:5d:28:cc:
                    6b:05:e7:b3:7d:10:9f:58:f9:0f:d9:94:02:a0:88:
                    0e:ed:56:3b:99:11:d8:f5:f4:3d:13:86:01:68:af:
                    98:98:a8:44:b5:20:34:cd:d2:41:35:95:6b:22:ec:
                    2d:fb:9d:b5:0f:c1:60:ea:3b:64:2f:5f:1c:f1:50:
                    1a:45:b5:0d:af:a8:1a:3d:27:97:c0:35:ea:49:16:
                    56:8d:98:e5:9b:4d:5f:b2:e7:bb:8d:15:62:05:20:
                    ac:d1:ff:a2:33:fc:df:89:e1:cb:f8:3f:09:8b:6d:
                    14:33:34:5c:06:24:f3:f8:9f:f1:fa:d2:84:b2:b1:
                    b3:85:04:94:a5:7e:cd:42:a0:34:7c:33:a7:a5:0f:
                    fb:e9:ff:c1:13:b3:11:fe:70:e7:ea:1b:e3:cb:d2:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:BF:35:57:16:4B:E7:37:C1:A5:DD:F5:C1:36:85:EF:E8:E8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:6c:96:88:54:66:a8:16:58:93:bc:83:da:cc:6a:14:77:
         14:53:94:e0:22:9b:95:2a:35:02:54:75:b5:90:f2:26:e5:83:
         f9:18:96:d2:5d:c7:31:81:80:c6:bf:cb:c4:50:89:0a:00:17:
         c5:0b:03:18:67:03:85:bc:f6:fe:bb:8d:15:10:e9:7e:46:94:
         16:2b:55:16:3c:a5:6e:3a:e3:a0:1b:6f:7f:32:9d:21:23:3b:
         79:cf:66:69:be:87:0f:1c:51:bb:77:93:2f:70:fd:88:7a:9d:
         40:7c:19:ce:66:4c:fe:81:6c:b2:94:ba:f2:20:ee:57:83:9a:
         7d:2e:84:98:ef:33:2f:3e:71:0c:0e:87:72:7e:c6:28:c4:9c:
         09:38:cc:1d:a2:c6:70:da:2b:dc:da:5d:78:63:45:68:0c:8f:
         27:35:b4:e1:ea:f6:9f:23:7d:0b:d1:83:68:34:89:2a:01:2e:
         be:92:83:1c:d2:0d:dd:7f:36:b2:9a:e2:3d:a3:66:97:56:23:
         45:cb:9b:4b:06:4d:0e:96:ab:21:51:5b:4e:65:33:d9:4e:04:
         66:64:32:20:a9:95:80:23:e9:93:4d:47:cc:f7:83:1f:48:bd:
         76:89:f0:e8:db:1a:d6:12:2d:9d:59:d2:80:4e:b1:09:b8:ae:
         f4:fd:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:49 2025 by rpki-client