Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d606b071-4be5-32c0-b62b-672c67ac5f1a.roa
File:                     d606b071-4be5-32c0-b62b-672c67ac5f1a.roa (raw, json)
Hash identifier:          xvZnTihNZ8idgCpzQ2WowbOFUgfM8o+hGIqcWA6Tboo=
Subject key identifier:   98:56:7B:8E:9F:87:97:28:DF:EA:72:90:7C:B3:9C:89:15:04:2E:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC90E0244C45A114CBA38E
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d606b071-4be5-32c0-b62b-672c67ac5f1a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.83.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:90:e0:24:4c:45:a1:14:cb:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=92f00c9c-f7e6-4ad2-a932-6ae32df9b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:37:a5:50:3e:11:b9:4f:68:36:69:16:08:
                    e5:c1:aa:65:66:ae:c5:19:96:c8:dc:28:29:e0:09:
                    d6:0f:f2:ec:da:2f:e7:85:2f:75:11:6f:43:b6:3f:
                    c7:37:0a:df:a4:90:10:cf:74:88:14:da:76:c5:34:
                    f6:a9:42:8a:d0:35:40:09:c6:f1:e5:3e:80:8a:4e:
                    66:7a:c1:3f:17:30:be:7c:7f:7b:95:1e:07:64:cf:
                    52:6d:79:23:0a:c5:46:81:34:d1:21:d1:3c:6d:4c:
                    15:5d:6f:cf:39:71:24:24:66:a7:43:82:18:7d:95:
                    56:a1:a3:3d:61:f2:f2:12:4f:30:c8:99:89:4c:97:
                    17:d5:55:cb:2d:ac:13:32:f4:09:05:83:37:ef:84:
                    d0:ed:13:4b:40:74:06:c2:47:80:9f:d7:3c:f0:c2:
                    5c:14:7a:55:e3:2c:fe:a6:0f:91:de:b7:34:17:2a:
                    01:65:f2:52:20:d6:b7:73:42:a3:26:c2:35:5e:ab:
                    c1:67:77:06:44:43:28:86:25:04:d3:2d:ed:10:d2:
                    ea:c0:4d:32:a0:d0:19:a8:a0:21:2f:e9:2d:72:fb:
                    80:c8:e6:a4:8a:d9:c3:8e:d8:b6:de:9a:cd:03:8f:
                    09:a2:be:37:99:e8:dd:ad:60:36:54:93:68:ff:03:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:7B:8E:9F:87:97:28:DF:EA:72:90:7C:B3:9C:89:15:04:2E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d606b071-4be5-32c0-b62b-672c67ac5f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:35:42:a9:c0:65:f1:9d:0b:be:45:6b:62:a2:96:c1:dd:
         0d:4e:21:c1:dd:36:cc:b3:b1:ee:70:4a:98:94:34:4f:76:6a:
         67:a8:64:d6:c2:f7:17:cc:e6:18:0d:e0:73:eb:72:68:9f:c1:
         4c:89:f3:6e:75:26:3a:88:8a:35:cd:b3:e2:bf:5a:0c:61:e3:
         c0:42:f2:b0:7b:ab:43:bc:ef:e8:0d:5f:d6:f8:b7:02:69:75:
         51:c6:5a:8f:90:33:84:ca:9c:1c:79:a8:be:c2:36:6d:e6:f5:
         6e:84:72:89:99:a2:dc:c3:04:11:bd:3d:a9:4f:69:94:b9:e5:
         43:17:73:ca:b2:e0:5a:48:b7:a1:71:44:9b:5b:ef:f1:87:74:
         c8:d3:11:3d:38:01:e4:2b:c1:35:83:8d:75:aa:4b:28:52:60:
         a4:1d:11:4a:c5:6b:a0:34:f9:31:72:45:ee:86:b8:d4:23:fd:
         60:7e:e4:0b:53:27:e4:59:96:5e:04:3a:e2:e2:6c:7f:96:3c:
         bf:75:22:be:0a:da:66:0c:00:93:21:af:6b:6f:24:e2:f6:02:
         bc:2f:52:b0:0a:20:d3:6b:5e:3c:bb:37:58:44:e5:24:bb:d1:
         84:e8:dc:cd:a5:f6:5c:d6:b4:6f:ed:48:37:35:60:70:4d:c7:
         e3:fd:fb:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzJDgJExFoRTLo44wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTJmMDBjOWMtZjdlNi00YWQyLWE5MzItNmFlMzJkZjliNTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRE3pVA+EblPaDZpFgjlwaplZq7FGZbI3Cgp
4AnWD/Ls2i/nhS91EW9Dtj/HNwrfpJAQz3SIFNp2xTT2qUKK0DVACcbx5T6Aik5m
esE/FzC+fH97lR4HZM9SbXkjCsVGgTTRIdE8bUwVXW/POXEkJGanQ4IYfZVWoaM9
YfLyEk8wyJmJTJcX1VXLLawTMvQJBYM374TQ7RNLQHQGwkeAn9c88MJcFHpV4yz+
pg+R3rc0FyoBZfJSINa3c0KjJsI1XqvBZ3cGREMohiUE0y3tENLqwE0yoNAZqKAh
L+ktcvuAyOakitnDjti23prNA48Jor43mejdrWA2VJNo/wPKswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhWe46fh5co3+pykHyznIkVBC7PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDYwNmIwNzEtNGJlNS0z
MmMwLWI2MmItNjcyYzY3YWM1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMlPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9eNUKpwGXxnQu+RWtiopbB3Q1OIcHdNsyzse5wSpiUNE92ameoZNbC
9xfM5hgN4HPrcmifwUyJ8251JjqIijXNs+K/Wgxh48BC8rB7q0O87+gNX9b4twJp
dVHGWo+QM4TKnBx5qL7CNm3m9W6EcomZotzDBBG9PalPaZS55UMXc8qy4FpIt6Fx
RJtb7/GHdMjTET04AeQrwTWDjXWqSyhSYKQdEUrFa6A0+TFyRe6GuNQj/WB+5AtT
J+RZll4EOuLibH+WPL91Ir4K2mYMAJMhr2tvJOL2ArwvUrAKINNrXjy7N1hE5SS7
0YTo3M2l9lzWtG/tSDc1YHBNx+P9+/A=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:12 2025 by rpki-client