Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32de7e9-c8e2-3f71-907c-945ab50121c1.roa
File:                     d32de7e9-c8e2-3f71-907c-945ab50121c1.roa (raw, json)
Hash identifier:          m8BniyOap8qMufn/9MZp32lu4SlEP1OIg3IWKSCtF28=
Subject key identifier:   A4:FF:1A:45:85:05:84:69:FA:F9:6E:86:CD:6B:D7:B1:0E:70:D5:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62021AB6A7A1E7D86C873E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32de7e9-c8e2-3f71-907c-945ab50121c1.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        50.82.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1a:b6:a7:a1:e7:d8:6c:87:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=a573a131-ace8-4c1e-9b81-bf9bab11c664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:6c:08:7d:13:3e:8b:48:01:e5:d4:9e:33:
                    70:81:af:2c:89:7b:1b:72:bc:97:76:6a:56:4b:6a:
                    8b:d9:b8:d1:be:ce:2c:10:ae:90:e5:70:e0:be:44:
                    f0:67:d3:d2:82:43:05:2e:ed:56:d5:89:fc:9e:cd:
                    e4:64:b1:64:4c:af:b9:60:49:1b:a5:16:ab:be:22:
                    dc:27:81:66:c9:be:fd:01:7c:c8:49:dd:3f:f7:de:
                    6c:c1:11:e9:79:ed:83:f6:8f:ea:b7:fd:74:9e:4d:
                    83:2b:88:2d:6b:e8:eb:40:2d:e6:c8:e9:c7:7e:c2:
                    5f:0f:1e:7d:e2:eb:54:bd:e8:ab:ed:09:16:c5:08:
                    60:7c:a4:2f:f1:a4:99:d5:18:b1:25:3b:7b:b3:1e:
                    5c:9c:8b:ee:b8:b0:26:33:3b:9d:6b:53:90:89:9f:
                    20:cd:d2:24:75:58:7e:bd:c6:ff:0d:8b:bd:c0:ec:
                    e5:46:8e:19:b4:34:51:c6:07:c3:a6:35:d4:ad:f6:
                    18:c5:c2:1c:d4:37:e9:8a:2d:04:a0:d1:3f:10:1c:
                    9e:24:14:79:ad:13:80:dc:62:b1:85:93:c6:f8:50:
                    21:54:a3:82:a4:9a:83:aa:d6:9f:79:08:75:24:24:
                    52:16:46:0c:47:77:38:0c:41:41:7f:ba:c3:bb:10:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FF:1A:45:85:05:84:69:FA:F9:6E:86:CD:6B:D7:B1:0E:70:D5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32de7e9-c8e2-3f71-907c-945ab50121c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:b8:63:4d:10:e3:41:f7:b7:8b:d1:8b:c0:b3:6b:54:b7:
         7f:8b:12:d4:94:e3:09:8a:28:61:6d:0c:b7:76:79:09:b9:5b:
         02:af:5b:c9:06:13:d0:69:88:d2:1f:d9:2b:06:7f:3a:b8:cf:
         90:65:7d:3d:bf:a9:c8:0f:30:c3:e7:d3:53:ff:68:44:25:3a:
         fc:d5:17:be:fa:60:af:f6:49:42:65:06:c7:b5:52:53:5c:bd:
         f2:89:43:8c:cc:b1:88:4b:ed:02:7b:74:3a:a5:69:50:5e:7e:
         b8:e4:1d:22:2b:8f:70:13:c5:d9:01:43:3c:37:ed:b1:7d:89:
         c9:c7:39:53:8d:60:b7:76:f7:ff:a8:90:37:11:5a:8f:d4:cb:
         43:76:be:ef:3a:14:58:ae:9b:b6:52:88:c9:7e:7b:c3:ac:db:
         fb:a4:5c:c4:b6:c0:c6:b1:b1:80:63:5c:c8:3d:cb:6d:13:bf:
         ba:1c:70:74:c5:6d:2a:60:ac:11:d4:91:22:a5:03:58:2a:71:
         ab:1d:1a:8c:00:42:97:8a:ae:e7:6d:92:16:1b:c1:f3:d2:4c:
         2d:49:7b:c4:0e:c9:b2:f6:3c:2d:32:8d:20:fb:ea:24:45:0c:
         79:ad:5a:50:f3:37:57:4c:88:41:c2:e9:31:35:d0:c1:4f:38:
         16:20:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:01 2025 by rpki-client