Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6db24c4-a9ce-3555-b8b2-7e7ad53167a4.roa
File:                     f6db24c4-a9ce-3555-b8b2-7e7ad53167a4.roa (raw, json)
Hash identifier:          xrfKWI8RG8leKqmDYnTqxhmJ2XWawZt2TB9K0OZrdVs=
Subject key identifier:   E5:B3:EF:04:E3:D4:CC:D0:1C:1D:E4:60:EB:2B:73:20:AA:C0:16:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B679736DC7B2ED3D5A0879400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6db24c4-a9ce-3555-b8b2-7e7ad53167a4.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        50.80.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:36:dc:7b:2e:d3:d5:a0:87:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=b207b07f-6477-487e-abec-ab0d342fe360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:c2:80:7f:1a:f2:b1:b1:42:77:4d:48:f5:
                    10:95:4d:8b:5e:ac:49:47:51:9b:13:bd:9e:da:96:
                    cd:88:4c:f4:ba:bb:df:32:58:33:d6:66:d0:29:62:
                    3e:69:13:11:87:f6:01:68:06:ff:f4:3f:13:bc:3c:
                    d9:86:fb:5a:0c:5e:34:ef:c7:f0:1f:aa:1d:c7:1c:
                    94:56:aa:48:da:6d:32:75:e4:8e:b5:db:1c:0f:57:
                    ad:c9:b1:f5:e0:b3:0e:66:d4:1c:c9:2a:91:57:74:
                    ac:b8:e4:06:93:47:50:40:ae:a9:65:42:24:31:98:
                    5e:3d:b7:1e:55:21:7d:48:52:bc:dd:5c:b0:be:00:
                    a8:b4:d1:ee:2c:ce:4c:07:a6:c0:a8:08:36:fe:0f:
                    c1:63:77:93:70:25:b0:cc:75:b3:4d:55:6f:f0:57:
                    0c:93:3d:36:46:11:24:d7:dc:90:45:46:1e:d3:db:
                    50:a3:da:71:82:b8:2f:0e:69:44:cf:ff:b7:3f:00:
                    dc:d4:d4:97:f7:94:1e:f9:5a:a1:67:c2:8f:48:6e:
                    fc:f4:93:07:a1:35:1a:af:72:e5:a9:ec:bf:7e:72:
                    10:e3:a0:cc:a7:32:11:1e:9b:6f:94:b1:41:8c:56:
                    be:67:72:e2:61:fa:1a:dc:2d:b8:3e:ce:aa:5c:51:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B3:EF:04:E3:D4:CC:D0:1C:1D:E4:60:EB:2B:73:20:AA:C0:16:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6db24c4-a9ce-3555-b8b2-7e7ad53167a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:ca:6e:4f:5c:31:67:e9:21:50:d5:90:1e:8d:3a:f6:f1:
         d1:a3:b7:16:40:4b:d7:9b:76:68:ff:40:50:f9:0a:41:79:a6:
         07:aa:ce:c5:b4:d9:63:0b:5f:96:a3:1d:c0:67:83:af:f0:d9:
         15:75:e0:f8:3b:3e:93:53:6e:2c:82:db:7e:cb:2d:71:15:54:
         50:b3:7d:05:b9:4c:e4:3f:5b:4a:8a:49:7f:ee:8d:8e:33:57:
         a5:8b:00:04:1a:2a:29:15:1f:2e:f3:a7:f4:11:da:85:0c:4c:
         e8:fc:d6:e0:63:35:2e:76:74:fa:b5:d2:2e:7d:52:bb:64:c0:
         3e:f0:44:54:ee:de:85:f2:e5:37:fe:ed:8c:41:c2:c0:85:75:
         96:9c:7a:38:ff:ad:76:f7:12:6d:c8:9d:83:24:f1:1d:96:b3:
         49:7f:be:a4:2f:82:57:ee:88:da:86:2e:8d:75:36:1d:61:ba:
         2b:21:12:b3:16:98:c1:e6:a7:d4:9a:10:c7:f6:d0:2e:cc:7a:
         88:32:b8:73:94:48:80:fc:5d:8d:fd:c7:72:34:4b:e2:54:f2:
         c4:be:48:36:d0:a8:5a:61:2e:d1:a1:97:52:ea:66:e5:05:34:
         e4:ea:10:89:57:36:36:e7:38:0c:f9:e0:a9:12:ea:21:bd:6e:
         ee:44:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:51 2025 by rpki-client