Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3efd475d-54a0-3178-baa7-c3afba591dd6.roa
File:                     3efd475d-54a0-3178-baa7-c3afba591dd6.roa (raw, json)
Hash identifier:          0qbZrkm10c3h5EfWq+q3m8K+TWN4QOBjlUGWLcyAhFc=
Subject key identifier:   FE:42:50:46:8B:63:C4:D4:56:F4:5E:36:5E:E5:F6:AF:6B:D9:A9:5F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B19F289E3AAF598C4F96D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3efd475d-54a0-3178-baa7-c3afba591dd6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        50.80.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f2:89:e3:aa:f5:98:c4:f9:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e3897ded-6d7b-4d1e-ad54-777e584b99da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:9e:bb:24:a0:ca:a3:d2:68:61:e5:57:bc:
                    1c:5d:1e:0b:fa:14:06:c1:c5:a0:a9:28:5b:8e:5d:
                    a6:08:84:be:78:90:e0:3c:f1:c1:7f:10:01:98:c6:
                    04:76:fd:d1:a4:9c:af:a3:f6:7a:c0:84:02:f4:17:
                    06:8f:d9:0e:75:3d:4d:24:db:25:ea:a8:20:4d:55:
                    39:8f:80:02:1f:5e:ea:aa:6e:33:92:d6:57:5a:15:
                    fb:1b:53:58:aa:ab:77:88:74:d6:9f:f5:3d:4e:90:
                    cf:f0:0c:00:5c:d3:45:22:6d:23:df:69:79:0c:8f:
                    80:3c:6c:4d:2c:e2:3c:de:94:d0:04:d2:32:92:df:
                    68:8f:2b:b3:53:f4:9e:01:a1:0d:1b:5b:c5:f6:4b:
                    a6:49:d4:8e:b2:07:f9:ec:70:41:78:03:95:27:9c:
                    cb:99:06:5d:02:e6:ac:f9:3f:05:75:d1:9c:02:3e:
                    14:fe:40:1c:96:ff:b0:b7:7e:0c:e2:0b:bb:54:d1:
                    c7:e9:0d:04:8a:93:10:77:e9:a2:29:d8:86:d5:fb:
                    55:db:b1:55:a6:ed:11:cd:87:69:62:71:7d:09:a0:
                    f0:8e:9e:9a:6a:c6:e8:47:47:fa:26:50:42:1f:b1:
                    3f:98:20:20:07:4d:15:5a:9d:db:fe:98:0c:29:9a:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:42:50:46:8B:63:C4:D4:56:F4:5E:36:5E:E5:F6:AF:6B:D9:A9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3efd475d-54a0-3178-baa7-c3afba591dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:43:a7:8f:04:2e:8b:a4:a0:f7:03:8d:2c:25:dc:f0:8b:
         59:67:b8:8c:25:fa:49:da:da:cb:c3:e1:42:bb:e3:75:08:8d:
         c0:dc:a3:24:ac:8e:a2:11:fa:c2:a9:c4:c0:a7:f4:74:d9:bb:
         dc:94:e1:20:20:f7:9e:0b:64:81:cf:ff:0a:4f:d3:46:b7:e2:
         3d:75:e9:75:6b:06:95:25:b3:65:ee:d3:5e:bc:e4:28:00:92:
         1c:95:69:27:aa:bf:01:d4:8e:e2:c9:49:3e:07:f3:1c:67:09:
         f3:61:4a:7f:01:df:e4:b4:d4:e2:ce:ac:d8:54:a4:ec:13:1b:
         7a:d4:93:9a:48:50:14:73:82:e8:02:8c:ab:79:ea:c6:cc:2a:
         da:d5:39:72:49:68:3c:65:68:50:a1:e5:c0:a0:65:59:cb:80:
         34:db:e4:25:77:08:c3:5f:60:2b:e3:a6:50:54:5a:be:e2:25:
         4e:34:01:68:3e:80:57:a8:72:99:86:a9:c1:e4:d6:73:56:d0:
         3e:9b:82:ad:d2:2c:58:fd:41:a9:30:b7:a7:84:2d:c6:3e:c2:
         3d:77:c3:e9:5f:7e:f8:77:3c:81:d0:32:6e:42:a3:97:7b:5e:
         e3:8c:b6:d6:71:b8:81:d4:db:e0:46:4f:81:91:fc:02:b8:90:
         db:92:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:49 2026 by rpki-client