Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa
File:                     256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa (raw, json)
Hash identifier:          nuMssGe0YOwIyRVMOCbks0Au+OqvgP+87nHcb25eUsQ=
Subject key identifier:   8F:ED:33:ED:D9:7D:59:F1:BC:1C:09:88:66:C3:2E:4D:C4:E0:5F:F3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A6213F4B7A78FB6F3E840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        50.80.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:62:13:f4:b7:a7:8f:b6:f3:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=394c4034-6aee-44c5-b8cd-f0e6a2a4292a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:cf:c1:21:c6:91:68:be:d4:56:12:91:7b:
                    2e:4f:27:4e:d2:b8:52:47:c0:e0:41:ec:3c:ea:a4:
                    61:bb:9c:4c:d6:3a:49:34:cf:84:40:54:43:5e:cf:
                    df:86:37:12:e8:87:da:9c:ce:ea:be:66:68:fe:92:
                    56:8d:ee:a3:a3:46:fb:07:d9:65:d6:f5:7a:07:05:
                    ed:7e:71:90:13:39:cb:ed:fd:8a:6f:2a:00:89:96:
                    2f:10:82:fe:30:e3:bc:8d:95:a6:32:01:c3:49:32:
                    a9:50:e7:eb:10:ce:27:38:1a:bb:2e:98:1d:3b:5b:
                    39:ed:ea:af:9a:62:55:31:d6:18:89:d8:1b:11:ad:
                    66:0e:67:1d:5d:b1:e7:85:fa:ab:22:11:3e:21:bb:
                    ad:28:c1:eb:47:00:28:72:8e:cb:8d:ef:cf:82:83:
                    9e:bb:57:af:2a:23:6c:3f:dd:47:01:40:dd:a1:44:
                    08:f7:fc:a2:d3:7c:56:c1:fa:57:d5:93:63:f9:af:
                    c5:9f:0d:54:25:75:02:53:97:c5:ef:2a:89:4e:87:
                    1c:3c:bc:39:a3:89:81:88:5d:2a:8e:b2:f3:a2:a7:
                    fa:c0:03:3c:7d:be:e3:36:ea:b9:40:5a:92:1c:c8:
                    1d:58:b1:29:ab:e7:e6:62:67:d2:15:4d:77:98:c5:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:33:ED:D9:7D:59:F1:BC:1C:09:88:66:C3:2E:4D:C4:E0:5F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/256c3c6e-8ade-3d83-a5d9-9ed75efa40bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:a2:05:41:d0:7e:76:d9:b4:ee:8f:24:f9:a7:ac:58:3b:
         a1:57:68:59:d7:4a:eb:f4:f7:07:d1:5a:e6:f1:b4:35:27:a9:
         92:f7:b7:58:9b:3d:25:d4:8c:00:1f:89:d5:c5:da:1b:d5:da:
         4b:35:64:2b:39:55:4f:75:41:25:6b:10:52:f5:91:1d:12:bd:
         52:31:6d:31:d7:18:82:ae:e3:8c:51:10:84:d6:44:78:e7:d6:
         93:36:0c:bf:4f:48:47:bd:63:86:dc:a6:f2:f3:ae:48:94:3e:
         f7:97:d4:b4:29:ae:73:14:e5:bf:40:7d:63:dc:48:b9:64:77:
         4f:a5:94:89:f0:c1:a0:3e:fe:75:0b:f2:0c:bb:0d:70:5e:3e:
         a2:15:63:8a:79:98:f8:b1:ff:8b:5c:d2:8e:a7:20:b5:7e:7a:
         4d:1c:8d:46:8a:3d:b2:76:49:0e:1e:ee:c0:57:c0:31:54:9f:
         84:34:c1:42:10:5d:9a:78:af:8a:7e:af:2b:4e:98:d5:ce:4e:
         90:70:92:43:c9:6f:23:0a:ce:a0:7d:d4:fd:f2:35:28:0a:2f:
         86:26:f0:8e:da:f5:0b:a7:3e:e6:60:28:d3:ae:c7:1b:c8:32:
         01:f7:2a:9f:87:1c:aa:76:68:da:64:b3:e1:d7:76:da:2d:5d:
         e9:8a:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:46 2026 by rpki-client