Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb4278d4-c0da-363a-b8b5-1d3156a15a22.roa
File:                     bb4278d4-c0da-363a-b8b5-1d3156a15a22.roa (raw, json)
Hash identifier:          3QazbzDqm0EjeUEIDq8XeO6HIhFRb4IC5IzH73zEMg4=
Subject key identifier:   72:5B:67:2A:61:BC:1E:FD:DA:2C:C3:1E:06:DF:D9:F5:6D:33:9B:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6172B5A3C71878497FC9FC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb4278d4-c0da-363a-b8b5-1d3156a15a22.roa
Signing time:             Wed 01 Oct 2025 20:12:14 +0000
ROA not before:           Wed 01 Oct 2025 20:12:14 +0000
ROA not after:            Tue 30 Dec 2025 21:12:14 +0000
asID:                     19905
IP address blocks:        50.83.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:72:b5:a3:c7:18:78:49:7f:c9:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 20:12:14 2025 GMT
            Not After : Dec 30 21:12:14 2025 GMT
        Subject: CN=8dda07a4-b625-4f4c-97fd-4774828aa824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:e5:da:f0:eb:28:34:3d:fe:3b:bd:e1:d4:
                    5c:f8:82:b4:28:ac:f9:bb:6d:4b:f6:f1:5d:fd:48:
                    a7:35:d6:e4:cc:1d:e1:c4:76:49:84:0b:59:65:2e:
                    a9:02:08:c6:36:9a:26:94:3c:8b:8b:0e:63:33:fe:
                    aa:59:aa:1c:0f:c3:e1:14:83:31:5f:dc:a8:e3:92:
                    eb:ca:e2:7d:04:63:0f:85:6a:e5:5d:be:5e:8d:a3:
                    c4:3b:2a:97:99:c8:0f:42:b4:92:86:cc:41:1b:e1:
                    67:e1:af:ad:11:79:7f:1a:4f:e5:0e:88:4e:8d:d8:
                    df:ad:be:2d:21:52:7b:f2:cc:59:07:a3:2e:95:20:
                    de:66:7c:06:61:46:0b:af:43:38:89:bc:f1:a4:4a:
                    94:b0:ed:07:dd:07:4c:cb:ef:5e:f3:77:cf:13:ee:
                    b9:15:9e:cc:45:ea:14:9f:7a:5d:ac:18:64:33:fe:
                    ae:61:b0:09:c9:42:e8:ab:41:84:fa:27:29:6c:2f:
                    72:ae:75:21:5d:b2:f1:d9:b2:2a:5c:d2:69:a5:f3:
                    09:1a:80:72:aa:24:31:83:a5:25:ab:ca:a4:34:26:
                    09:0e:0e:be:ba:a9:70:91:3b:b2:42:41:64:ee:4a:
                    68:3f:9e:2d:74:cf:ca:b1:8b:4e:10:c9:c8:c1:d9:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:67:2A:61:BC:1E:FD:DA:2C:C3:1E:06:DF:D9:F5:6D:33:9B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb4278d4-c0da-363a-b8b5-1d3156a15a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:2b:d4:be:b5:f2:e5:d6:60:21:da:a2:6f:33:78:49:b1:
         22:fc:66:9a:1a:6b:9b:71:34:12:6d:11:92:0f:bf:3c:2d:dc:
         d2:b9:42:7f:a3:4d:20:f3:0a:bd:bd:e8:d9:eb:a6:15:37:56:
         4a:50:de:34:46:3f:7b:1f:a1:3e:0d:8b:a0:4b:cf:4a:c6:87:
         8b:e9:d2:c3:88:b6:16:0c:f5:d6:ae:72:75:5c:7f:d1:e1:78:
         f2:c6:c1:ba:c3:7c:70:78:fb:ec:3e:8a:66:3d:54:41:77:33:
         84:97:e8:ee:14:1e:93:e8:bd:74:3f:ca:c2:40:26:18:0e:1c:
         7e:1b:4b:db:8e:11:20:8e:6d:4b:71:04:40:ea:83:18:79:b3:
         d6:b9:f5:32:d0:78:6d:9d:40:49:83:b7:14:ea:84:ae:a3:8e:
         dd:bf:9f:3d:da:4f:92:ff:20:1e:be:df:fc:9b:d5:99:e0:5a:
         48:e4:d8:3e:0d:fc:62:78:a0:a6:0e:d1:cb:34:bb:38:16:f4:
         4f:bf:63:0b:14:7a:ba:0b:50:04:6e:a1:ba:4f:b2:15:05:48:
         24:34:54:0e:e0:20:87:7c:13:08:47:68:01:6c:07:07:48:88:
         08:de:31:77:ba:13:3b:bd:b9:68:20:91:0c:c4:f6:50:de:f2:
         0d:a1:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:27 2025 by rpki-client