Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bbaee56-3a80-3a6f-8d4b-b16b060a3dd2.roa
File:                     3bbaee56-3a80-3a6f-8d4b-b16b060a3dd2.roa (raw, json)
Hash identifier:          vF7oWHDcpO5Kqf2GJzBptFNir2N+NxWWFQAehEqNnaM=
Subject key identifier:   14:97:11:68:DE:92:35:CE:0F:A6:8A:F4:E3:54:B7:3C:60:EB:31:19
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED6FC7DADF147268457029D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bbaee56-3a80-3a6f-8d4b-b16b060a3dd2.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.82.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:7d:ad:f1:47:26:84:57:02:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=6d514a8d-7490-4449-8d9d-3efe880c80e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:61:6c:24:47:08:96:2d:7f:4c:65:85:b0:
                    00:90:4e:80:75:32:56:01:21:6b:d3:66:96:1f:c6:
                    77:ef:f1:03:9a:c2:6d:9f:fe:99:4a:a3:3d:44:65:
                    43:5d:75:cc:f9:72:3d:72:e6:6d:c6:28:06:ca:4f:
                    ad:6d:bd:12:ef:0d:5a:73:73:17:13:b6:54:88:e3:
                    c3:90:26:44:c5:35:75:27:cc:0e:b3:9a:bd:b4:2e:
                    a4:1f:86:32:ad:c9:96:ef:97:63:e9:69:e7:4e:9a:
                    ec:b1:83:20:9f:5c:4a:99:bc:41:72:f5:fa:04:00:
                    60:13:ab:15:a5:ab:9a:c9:18:5b:1f:96:27:2a:7c:
                    8b:55:52:0c:82:30:ab:27:07:19:51:9b:b8:a9:30:
                    b2:27:41:33:39:24:d4:ce:ef:79:88:e9:17:7d:f6:
                    4d:6c:70:91:43:1c:bf:95:1c:e9:77:c2:bb:58:4f:
                    6f:6e:06:81:c9:39:7a:81:c3:c0:ef:33:1d:fb:2b:
                    72:fa:fd:d6:17:bd:6d:d4:59:8b:b0:97:3e:cd:03:
                    a7:31:d3:44:b7:64:00:da:8a:ae:0e:92:c9:8f:52:
                    eb:8e:92:06:f3:6f:40:cf:d2:20:a8:31:78:57:05:
                    57:0b:44:07:66:41:23:42:9d:6a:06:d7:5c:93:07:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:97:11:68:DE:92:35:CE:0F:A6:8A:F4:E3:54:B7:3C:60:EB:31:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bbaee56-3a80-3a6f-8d4b-b16b060a3dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:4c:b4:87:07:34:b3:22:5e:d9:59:31:46:53:a2:2c:2b:
         17:ed:e1:95:ea:1a:ee:18:15:b5:cc:19:78:01:34:84:82:22:
         14:7e:f5:97:d8:7a:42:e4:e4:c2:9f:9a:74:d5:06:ec:4a:34:
         af:26:d2:9c:c2:05:ba:6a:e3:ba:ac:82:57:45:5b:6a:b7:8a:
         05:b5:c1:38:20:7c:59:07:19:3b:b3:a5:12:c1:ff:dd:0d:50:
         eb:57:90:dc:cd:f8:35:a6:05:b2:21:ec:0c:9e:3e:51:ea:c7:
         03:7c:70:54:62:c9:66:17:66:e7:53:30:52:47:1b:43:7e:57:
         be:14:2d:e2:fe:67:62:e8:a1:ac:4e:52:53:cc:06:eb:07:26:
         24:b2:f5:06:d2:04:da:45:3c:53:10:95:ce:79:53:8e:6b:f7:
         92:f6:d6:48:22:87:45:61:02:30:eb:1e:35:c9:c4:07:f9:92:
         f3:69:45:a4:c8:5d:9f:ad:7c:d4:9b:95:93:31:b1:85:bf:05:
         a5:ce:1b:90:78:8c:4d:19:3e:14:e0:9e:6f:ce:18:23:35:10:
         71:3b:83:2a:80:e4:0e:08:2a:b7:14:e2:ac:a4:9a:b4:fa:16:
         01:af:48:b7:ad:37:16:38:13:6e:9c:5c:dc:f8:8c:ed:43:fd:
         de:0b:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:52 2026 by rpki-client