Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1a4900-72e0-359d-97b5-19eb74747b7e.roa
File:                     1a1a4900-72e0-359d-97b5-19eb74747b7e.roa (raw, json)
Hash identifier:          LJrOCsf3zSSAJ7P1lUVHVZPd5Ru3LGN1raEnPUf9zok=
Subject key identifier:   B8:17:16:5F:0D:DC:49:07:4D:09:2B:61:DE:94:8D:8C:C9:49:01:85
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D982D961355AD12B2159DDFE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1a4900-72e0-359d-97b5-19eb74747b7e.roa
Signing time:             Wed 22 Apr 2026 20:16:18 +0000
ROA not before:           Wed 22 Apr 2026 20:16:18 +0000
ROA not after:            Tue 21 Jul 2026 20:16:18 +0000
asID:                     19905
IP address blocks:        50.80.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:2d:96:13:55:ad:12:b2:15:9d:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 20:16:18 2026 GMT
            Not After : Jul 21 20:16:18 2026 GMT
        Subject: CN=e7acf381-ef1c-46cd-8116-0e4da44a9bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:8c:16:7b:68:fe:cf:66:f6:4b:55:40:e4:
                    71:bf:3a:98:9a:47:d3:98:f5:3c:b7:c1:98:0a:6f:
                    16:77:84:da:2a:81:7c:d9:2b:4f:f8:06:5d:a5:a7:
                    9a:c7:9c:77:f8:f6:28:14:8b:f0:98:5f:e2:c7:32:
                    b6:36:74:46:a6:f9:3d:30:83:24:65:57:eb:99:6b:
                    69:c5:46:8c:ce:89:57:f6:d6:bb:8e:9d:f2:e6:e1:
                    35:21:b0:fe:1b:02:c3:44:3d:e5:fa:38:fe:ad:37:
                    f3:05:09:8a:5b:95:f2:43:9b:ed:71:8c:17:39:36:
                    cf:d0:13:ab:b5:44:c0:03:71:da:1e:62:bc:24:e1:
                    39:63:19:2d:7f:c5:b6:54:70:fc:18:c9:5c:0b:44:
                    34:f9:af:de:40:a4:20:2b:2f:05:93:76:f4:78:16:
                    69:ce:d5:9a:f5:0e:8d:b2:85:00:cd:c3:cc:bf:75:
                    21:07:d0:6c:c1:ac:b0:20:ee:db:22:af:ca:12:e7:
                    89:11:c7:77:66:6c:af:38:5b:73:02:2a:a4:03:7a:
                    29:6d:d5:cc:8c:91:7c:ad:21:42:42:24:23:fb:fa:
                    63:1c:56:fb:85:12:67:24:31:70:92:75:b7:58:da:
                    a3:ab:d4:72:3e:38:28:b0:c6:8a:b7:bf:fa:da:af:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:17:16:5F:0D:DC:49:07:4D:09:2B:61:DE:94:8D:8C:C9:49:01:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1a4900-72e0-359d-97b5-19eb74747b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:37:d2:b5:d9:a5:15:ee:0d:bf:66:d1:3f:7c:f8:d0:f9:56:
         71:6c:ba:b9:67:6e:c8:ba:67:cc:de:72:26:73:46:e1:41:ff:
         31:2e:50:33:c5:a5:4f:75:95:c4:b1:7b:b2:b8:b6:30:30:6a:
         ba:c4:af:ff:33:fa:ba:00:5a:58:34:aa:df:ff:6b:cf:5d:7d:
         0b:f8:e3:72:5f:a6:9c:25:97:19:bb:1c:14:73:e8:b4:af:18:
         da:13:3a:d4:7c:64:e2:fa:b3:33:91:97:74:f1:79:b0:a7:99:
         81:1d:54:f7:63:5a:38:d1:f2:7f:6f:7e:0a:05:5b:3b:26:ed:
         66:dc:41:97:b2:e0:ab:b5:58:89:ce:e4:6f:2d:31:ee:d5:b3:
         6f:d2:91:b9:bf:df:cd:46:65:43:ab:2f:0e:2a:d5:06:ac:f9:
         37:8f:44:bd:31:bf:f9:30:e7:05:87:a8:f6:de:68:94:dc:b9:
         73:72:d6:75:55:56:47:5e:ab:e0:c8:05:34:a9:cd:33:1c:45:
         10:60:53:cc:a5:9b:53:86:ac:4c:4a:89:83:f0:45:f5:8f:32:
         9c:5c:b7:36:b9:dc:df:30:b7:ac:04:cd:7e:76:6b:ec:46:c9:
         bc:05:b4:9c:50:a2:64:9f:70:ba:6e:af:7b:c1:51:e7:c3:a8:
         cf:83:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:25:58 2026 by rpki-client