Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d816ded-0c6f-3f25-bfeb-39d8f3af4b82.roa
File:                     3d816ded-0c6f-3f25-bfeb-39d8f3af4b82.roa (raw, json)
Hash identifier:          QJtU88wbhChZRE7dnKdVbdZ2pkhzkB6FKHRlbzFjES0=
Subject key identifier:   69:33:27:0A:AC:DF:73:22:7E:CD:0F:C5:A3:8B:E4:BD:DD:52:32:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5FC8022DE2B3652E0BADD040
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d816ded-0c6f-3f25-bfeb-39d8f3af4b82.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        50.80.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:02:2d:e2:b3:65:2e:0b:ad:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=defcfecc-9b16-4375-bc50-5e3ebe8172a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:6c:9c:1d:a6:27:6c:a8:c8:6b:b0:1b:d6:
                    ac:59:ce:20:dd:79:ba:23:5e:b5:2f:2a:c3:15:e5:
                    eb:b5:2d:3e:8d:cf:b6:e7:88:84:bc:86:6e:4b:69:
                    2b:2b:f4:a8:29:8f:67:e9:27:c6:27:64:f1:51:aa:
                    0a:72:f1:43:60:b6:17:16:00:01:56:4d:c7:44:c6:
                    d7:1f:35:d8:cc:cf:ec:c1:90:e7:fd:77:93:af:18:
                    62:4c:36:53:b0:40:5a:61:ae:ec:f1:9a:e9:36:4f:
                    14:1c:d2:1e:d8:dc:b2:3e:36:b8:f8:9c:14:dc:eb:
                    0e:cd:7b:80:73:ca:f4:fe:a0:d6:5f:3e:a7:61:aa:
                    6e:61:7a:64:bc:d8:ba:2b:ee:7d:88:64:79:df:74:
                    ca:a8:17:c1:f0:6f:dd:de:3f:85:d1:16:e8:58:94:
                    02:9d:73:3d:21:b4:fb:95:05:25:18:71:64:36:ce:
                    ec:50:43:ae:c5:ca:03:89:af:a4:4f:bc:f5:16:02:
                    71:bb:2c:34:99:19:f6:f3:53:b8:3b:55:af:38:d6:
                    92:b2:cc:a6:4a:9c:60:74:df:0d:eb:fd:f8:7c:df:
                    de:46:41:08:26:b6:0e:7b:6f:26:21:69:5d:8b:97:
                    f9:1b:a9:0e:66:4d:29:6f:35:e4:df:c8:c5:05:fc:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:33:27:0A:AC:DF:73:22:7E:CD:0F:C5:A3:8B:E4:BD:DD:52:32:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d816ded-0c6f-3f25-bfeb-39d8f3af4b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:50:bc:23:da:7a:45:b9:57:6b:0f:63:16:00:39:18:80:
         81:06:f2:37:cf:95:e2:0c:f8:fb:91:bb:50:8b:ed:84:a6:68:
         b2:af:a7:c6:35:75:cf:5c:26:bb:e9:ce:27:85:e0:5b:a3:ae:
         04:c4:cd:b2:98:40:f4:a1:17:44:a6:95:25:39:3f:15:42:1b:
         84:16:e2:ef:07:91:17:e1:bd:87:2b:bd:f0:dc:02:0d:d0:22:
         83:3c:5a:b2:ba:c8:66:e2:48:21:56:47:56:e0:5a:f0:0f:7f:
         95:77:8f:ff:17:a7:3a:18:bb:54:7d:ce:ad:49:4e:2d:c9:71:
         4b:75:19:4a:11:8e:98:44:76:55:21:1e:fe:14:14:71:6e:b6:
         9d:1a:88:4c:23:d6:b8:59:6f:b3:f9:83:87:3d:35:e8:4f:ba:
         08:d5:8c:86:26:ab:e3:13:a8:6e:c5:d2:70:99:2d:3f:a9:43:
         fc:ae:cf:8d:d2:9f:41:f7:cf:87:a5:9c:8a:b2:11:00:05:15:
         53:e8:20:8d:ca:06:c7:92:ac:05:3d:0c:2b:40:b9:25:45:0f:
         6c:47:af:c0:4e:67:a7:b1:72:15:5d:3e:4c:e6:fe:2d:12:94:
         34:60:ae:d0:13:91:91:4f:26:06:0d:43:b0:37:5b:7c:57:3d:
         2d:46:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:27:04 2026 by rpki-client