Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa894c46-40ee-3ecf-a17c-d072cb958aa4.roa
File:                     fa894c46-40ee-3ecf-a17c-d072cb958aa4.roa (raw, json)
Hash identifier:          kmfJ5Q0fm0alzh7R7vIoJpry+j9qi8rD0zKOIAesfno=
Subject key identifier:   0B:A8:AE:A8:58:B2:5E:4E:A5:F4:49:0C:D5:02:F7:93:5E:42:A5:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCB1EE5C04AA6D71B18F40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa894c46-40ee-3ecf-a17c-d072cb958aa4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        50.83.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b1:ee:5c:04:aa:6d:71:b1:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b4f4faa6-ce72-4a3d-bb3c-57a39dd75879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:93:7c:e7:bf:65:da:7a:28:36:96:6d:a5:
                    d2:18:b8:5b:b0:38:27:0f:2e:4f:de:9c:64:6f:7c:
                    ca:8a:41:ff:f3:f6:f3:c9:7a:d8:9f:96:0c:63:ee:
                    41:5b:68:0a:3c:06:c2:f1:5a:16:d1:d6:d9:e7:60:
                    40:63:a2:b4:e3:4c:cd:c9:58:66:35:ab:ec:4b:fc:
                    81:09:15:7a:c9:af:4c:10:e7:cc:71:4d:00:df:b2:
                    f0:db:8e:d6:4e:4a:de:36:78:16:15:a2:79:49:af:
                    75:35:14:ca:6e:a5:d2:0c:f6:90:9f:9a:6c:69:5c:
                    f4:e1:2c:c6:ea:74:f2:c4:d9:c0:fc:9c:44:68:d6:
                    35:ac:3f:ee:8b:02:4b:8b:6d:1f:a6:ef:fd:86:89:
                    a0:25:9a:11:c9:8f:55:82:a1:07:3f:2c:f8:2d:b7:
                    a6:56:e5:fb:1b:4d:3b:6a:ff:ce:cb:69:e5:30:dc:
                    07:85:fc:ea:ed:e5:28:72:eb:af:44:cd:22:11:48:
                    65:7f:8c:fe:94:b3:86:67:68:e2:85:7e:a2:0d:99:
                    d0:5d:3b:cf:21:88:f4:f2:fa:9f:76:9f:73:2f:6c:
                    2f:d0:bf:e8:64:0f:66:9e:24:65:49:13:3d:4f:c6:
                    88:8b:75:2a:82:a6:9d:d2:03:72:04:d1:fa:5b:81:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:AE:A8:58:B2:5E:4E:A5:F4:49:0C:D5:02:F7:93:5E:42:A5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa894c46-40ee-3ecf-a17c-d072cb958aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:99:28:69:ee:3c:97:1f:9b:49:b6:61:23:f9:61:e0:e4:3c:
         2f:20:03:46:b2:67:b9:24:55:d2:87:22:5f:6d:c6:59:65:52:
         54:7a:ce:17:15:07:02:19:28:57:9a:21:e2:97:35:6a:17:6e:
         70:68:26:06:78:05:2b:10:0c:db:b4:fb:8b:92:2d:d6:bd:5c:
         bf:75:e1:cd:28:fc:98:6d:0a:2f:3a:d7:18:d8:d8:8a:c1:21:
         cb:2c:0a:72:26:44:ce:5b:29:c4:b3:f9:86:d6:67:bd:f3:31:
         29:fb:75:48:66:90:31:92:38:f3:df:f7:da:ed:ed:b7:27:8d:
         93:c1:44:d6:5c:82:40:dc:14:ff:9c:e4:d6:e4:cb:3b:b0:a1:
         83:94:0c:7a:74:e8:df:8f:6f:2b:97:32:bb:5f:9b:d9:5a:99:
         19:26:82:02:90:a7:12:ea:51:2f:0a:b8:b3:1c:eb:16:af:00:
         8f:e7:29:6f:ab:84:24:ba:23:d3:c3:0c:ff:16:9f:9c:08:ef:
         94:ec:88:2e:c4:98:de:42:21:07:93:0b:aa:7e:f2:d9:e7:1e:
         aa:74:97:60:44:bf:e1:fa:b3:d3:d4:1e:f5:fc:9b:60:85:be:
         c0:c5:0e:20:2e:58:f9:dc:a5:85:35:db:e6:4e:0c:1b:98:a9:
         6f:f0:c2:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLHuXASqbXGxj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YjRmNGZhYTYtY2U3Mi00YTNkLWJiM2MtNTdhMzlkZDc1ODc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LGTfOe/Zdp6KDaWbaXSGLhbsDgnDy5P3pxk
b3zKikH/8/bzyXrYn5YMY+5BW2gKPAbC8VoW0dbZ52BAY6K040zNyVhmNavsS/yB
CRV6ya9MEOfMcU0A37Lw247WTkreNngWFaJ5Sa91NRTKbqXSDPaQn5psaVz04SzG
6nTyxNnA/JxEaNY1rD/uiwJLi20fpu/9homgJZoRyY9VgqEHPyz4LbemVuX7G007
av/Oy2nlMNwHhfzq7eUocuuvRM0iEUhlf4z+lLOGZ2jihX6iDZnQXTvPIYj08vqf
dp9zL2wv0L/oZA9mniRlSRM9T8aIi3Uqgqad0gNyBNH6W4H+DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuorqhYsl5OpfRJDNUC95NeQqUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmE4OTRjNDYtNDBlZS0z
ZWNmLWExN2MtZDA3MmNiOTU4YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlObMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiZKGnuPJcfm0m2YSP5YeDkPC8gA0ayZ7kkVdKHIl9txlllUlR6zhcV
BwIZKFeaIeKXNWoXbnBoJgZ4BSsQDNu0+4uSLda9XL914c0o/JhtCi861xjY2IrB
IcssCnImRM5bKcSz+YbWZ73zMSn7dUhmkDGSOPPf99rt7bcnjZPBRNZcgkDcFP+c
5NbkyzuwoYOUDHp06N+PbyuXMrtfm9lamRkmggKQpxLqUS8KuLMc6xavAI/nKW+r
hCS6I9PDDP8Wn5wI75TsiC7EmN5CIQeTC6p+8tnnHqp0l2BEv+H6s9PUHvX8m2CF
vsDFDiAuWPncpYU12+ZODBuYqW/wwqs=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:12 2025 by rpki-client