Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa
File:                     cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa (raw, json)
Hash identifier:          2tTR+6oIOk4b4LGEJkIUVLFxBPBBYW44xSvLF3AxKqM=
Subject key identifier:   76:57:16:D3:30:63:2D:DF:66:69:B0:C1:EC:BC:2D:A4:67:78:61:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62023A12A1A329AF7A7E3900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        50.80.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3a:12:a1:a3:29:af:7a:7e:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b0903ffe-d2c2-424e-8afb-092e4a09de2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:b8:c2:6c:9d:79:af:a4:44:fe:4c:7e:61:
                    ab:bd:62:2d:c9:25:a7:3e:a0:79:99:b6:a6:03:82:
                    7f:bf:17:47:14:bd:35:b2:2d:26:1d:8d:29:c9:0a:
                    d5:42:90:f1:5e:a0:3e:d6:88:f5:3e:03:9f:38:80:
                    a0:6e:d7:6f:4d:e0:82:0f:b9:7e:d6:47:b8:9c:aa:
                    cf:90:1b:fe:1c:ae:ba:32:6e:2c:86:96:cd:21:3d:
                    ff:ed:1f:81:16:3b:87:e7:18:20:ba:c1:f7:2b:2e:
                    53:af:bd:b7:c0:27:a4:50:bb:45:f3:99:d6:e6:c7:
                    14:3e:ad:48:c6:24:b5:9c:14:70:87:ca:a1:5c:82:
                    2f:84:ee:bb:29:2f:0a:4d:29:f5:66:2a:8c:04:50:
                    d2:83:51:85:8d:79:de:a6:9f:98:bf:66:24:00:31:
                    eb:24:3c:be:41:2b:50:59:e4:85:6a:be:21:b2:59:
                    27:97:57:91:86:8b:18:7e:8a:fe:9f:3d:2c:60:ff:
                    8f:d1:77:98:a5:1e:65:33:d6:6a:15:c6:b8:fa:84:
                    87:97:8f:dc:3f:bb:fa:d4:2c:ef:be:0d:58:b1:2f:
                    fa:4c:54:11:7b:af:36:e1:d2:ad:a1:45:fb:9c:f3:
                    42:c3:aa:8b:fc:45:00:b2:0a:a0:9a:f5:2a:53:f2:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:57:16:D3:30:63:2D:DF:66:69:B0:C1:EC:BC:2D:A4:67:78:61:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:e6:fb:36:b4:12:d2:ce:7d:99:d5:ec:7d:71:1b:57:79:
         64:41:93:fb:02:75:78:a9:a2:a6:12:8b:cc:e9:cd:8c:87:f4:
         d3:44:45:b6:57:4a:5b:93:84:48:b6:0e:4b:26:86:94:c9:43:
         07:12:73:42:9e:f5:b1:5e:96:95:25:a5:2a:cb:f2:d0:d2:c1:
         2e:16:f9:64:6d:85:e5:91:01:a4:b4:d0:ba:9e:bc:cd:2b:09:
         d5:9a:1b:54:55:bf:01:6f:10:4d:93:8d:bf:e1:83:32:ef:29:
         f4:bd:92:9e:d4:a4:89:00:5c:d1:a8:8a:26:8f:2e:8f:39:05:
         bf:a8:92:41:f3:0e:67:a7:2e:cd:aa:24:02:08:d5:e4:80:1a:
         80:94:12:23:01:f5:6e:74:57:9d:c6:4b:4c:f8:10:50:32:a0:
         35:28:03:10:fb:86:9c:64:8b:09:cd:78:f8:15:d8:d0:4c:c3:
         da:37:b6:e5:5f:e3:0f:45:72:55:5b:20:a7:ce:84:21:47:0b:
         31:cd:7d:b4:5b:6e:92:34:71:42:db:0e:06:24:57:4c:2f:d0:
         2f:07:ff:f2:b4:f8:eb:bd:da:36:0d:bd:7e:99:d8:42:34:c4:
         87:ab:ce:c2:c2:76:af:f1:96:bb:43:6c:b1:b8:72:f9:21:03:
         57:3e:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:46 2025 by rpki-client