Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9ec1d73-c3ff-387f-9ff9-ada21154e800.roa
File:                     f9ec1d73-c3ff-387f-9ff9-ada21154e800.roa (raw, json)
Hash identifier:          bat7MF9xzHtPfITZOetGR2rZYAx+ySJYlLt4hKRY2k4=
Subject key identifier:   56:3D:E0:0A:D7:9A:95:15:DF:C4:EC:E2:81:33:74:61:FD:A0:EF:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCA343C5903DDF0EAE9300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9ec1d73-c3ff-387f-9ff9-ada21154e800.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.82.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a3:43:c5:90:3d:df:0e:ae:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=909c719b-6db5-47ad-8e04-6b43e83e72a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:09:0a:00:65:84:d8:06:30:42:f6:65:85:
                    26:7b:04:da:33:22:d8:99:92:55:5a:ca:5f:aa:0b:
                    55:fb:a5:44:d4:51:ab:5a:21:a3:a1:86:5f:fd:68:
                    65:7c:bc:14:3d:2a:93:5a:50:5f:9f:d6:c0:fe:35:
                    d9:14:c1:49:9a:95:ac:03:63:61:93:36:e1:85:2e:
                    15:f7:40:ae:a1:c4:57:32:fa:57:bd:30:44:b1:70:
                    96:e6:e4:c4:33:c1:5c:b1:fe:c3:04:f2:8d:ae:22:
                    cf:94:29:48:c5:dd:08:42:a6:b0:bd:ee:46:ba:c6:
                    8e:0c:8f:35:3a:84:4a:09:b2:81:2a:49:2b:d9:53:
                    d9:f4:f1:a7:b3:f2:c2:6c:b4:39:f5:5c:0a:0f:d7:
                    bb:52:b3:1d:de:08:9e:1c:00:5d:c8:c9:56:7f:a7:
                    23:7d:42:bd:62:df:71:a3:d1:a3:41:57:bd:71:3d:
                    02:35:12:85:b7:fe:8e:e0:2e:7c:04:f9:98:80:4c:
                    98:1e:7e:d8:18:31:11:57:ad:fb:71:d8:81:eb:da:
                    ff:d6:5d:03:3b:f8:8e:d1:bf:1f:7e:43:e2:99:fd:
                    ec:a5:a9:93:b4:3a:87:4d:d4:f1:7d:28:d9:56:63:
                    a8:ed:a4:84:ba:a6:09:e8:72:94:3d:ba:6b:b1:93:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3D:E0:0A:D7:9A:95:15:DF:C4:EC:E2:81:33:74:61:FD:A0:EF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9ec1d73-c3ff-387f-9ff9-ada21154e800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:04:41:86:4f:ce:cb:f5:7c:57:44:2c:24:43:15:13:7b:e4:
         fd:73:e4:73:7b:06:79:a7:4a:2c:f9:90:90:a6:ab:d4:0e:d8:
         f8:c1:85:24:bd:ed:74:38:38:66:0f:3b:4b:d7:8d:c5:b9:df:
         e9:0d:e4:7b:11:c9:da:ba:78:da:05:e0:f6:7c:b9:98:44:2b:
         5c:14:95:97:36:9e:71:ff:86:fa:05:8a:e9:b0:42:bb:6d:13:
         b8:97:a3:30:00:24:4a:88:5e:67:ee:ac:13:6f:e9:1f:d1:3f:
         4b:91:1c:e2:f4:df:8d:09:6f:29:24:90:6a:94:f3:7e:23:58:
         59:a0:61:66:46:3f:81:d2:78:e1:f1:b8:a5:6a:52:7a:72:e7:
         0a:f3:08:23:a6:ee:51:5c:84:b7:2f:85:08:46:f1:61:1c:9e:
         3d:21:f7:64:ca:d5:ce:e0:c5:65:ba:18:ed:e3:f6:c9:03:02:
         50:37:70:55:cb:8a:9a:e8:13:dc:96:b8:5d:73:3a:52:2d:7d:
         fb:ef:29:9c:a7:11:04:91:38:29:e0:43:0d:df:d5:21:69:40:
         59:2f:03:b6:f2:57:c7:60:fa:e6:b5:e1:c9:47:4b:df:9f:37:
         01:24:4d:70:3f:ad:86:42:7f:76:db:e0:df:ca:2f:e2:de:54:
         49:e7:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:00 2025 by rpki-client