Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50e09b7e-344b-3b0f-b6cf-1d7ff1b21638.roa
File:                     50e09b7e-344b-3b0f-b6cf-1d7ff1b21638.roa (raw, json)
Hash identifier:          qLq9Tv3KI3+W/3a3sjbn29/R9LR5cJs2agZVfJgyYjU=
Subject key identifier:   23:AE:05:D4:62:86:03:6B:D5:76:29:EC:40:78:B7:C2:B8:D5:56:13
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB77025925FE0A20B1FA4AF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50e09b7e-344b-3b0f-b6cf-1d7ff1b21638.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        173.28.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:25:92:5f:e0:a2:0b:1f:a4:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=8b7f5020-fb48-401f-9153-77274f22e1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:56:80:cc:20:9d:56:c6:bc:89:fb:aa:32:
                    72:f9:70:68:e1:8d:fa:db:b1:87:7e:ec:72:0a:7b:
                    ec:75:6a:c0:e5:0b:d4:1b:af:6c:72:8f:cd:5f:f6:
                    8a:fb:4a:bd:4c:b3:85:6d:ec:85:8a:8d:45:ba:72:
                    e4:1f:ef:a1:22:c1:a0:0b:20:9c:c6:9c:10:4f:f6:
                    04:d4:a7:39:f7:50:a9:9b:ed:83:3b:ff:c5:b4:3b:
                    ee:d1:4f:cb:80:e8:45:60:29:ee:43:16:63:61:7e:
                    d7:4a:9c:75:b5:13:e6:8a:1a:e7:98:85:8a:86:06:
                    e0:2e:d8:16:e4:02:3d:62:f6:f1:df:54:7b:3a:5f:
                    57:98:61:18:f4:58:d5:e3:c9:12:28:6b:c8:d3:03:
                    4e:ec:f3:5d:da:d1:7f:de:2c:66:47:d2:9b:60:89:
                    b6:d7:a5:ab:31:f0:80:3e:0d:0e:5a:5e:2a:4d:47:
                    92:7d:05:7d:b6:c0:10:b1:3c:ca:e4:0d:e9:f2:17:
                    d0:82:8c:4f:ff:1d:da:d0:43:b4:49:c6:dd:f5:88:
                    52:fe:13:e9:2e:a2:af:30:4e:2f:74:17:cd:70:48:
                    ff:59:c7:cd:bf:c8:5a:6a:47:24:7b:d1:20:fd:cc:
                    cf:17:f0:7d:9b:00:d8:1f:5b:ca:9e:9f:9b:2a:43:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AE:05:D4:62:86:03:6B:D5:76:29:EC:40:78:B7:C2:B8:D5:56:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50e09b7e-344b-3b0f-b6cf-1d7ff1b21638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:d5:e4:32:ad:b3:d7:27:18:0f:30:a5:31:fe:6a:a5:35:
         e5:db:bc:56:6a:6d:d5:74:64:e5:dc:0f:42:dc:b0:22:5b:a4:
         f6:fc:22:a0:bc:ad:e2:e1:18:61:d7:ea:3d:56:09:bb:b2:9a:
         00:5c:e6:a9:bf:8f:f7:bb:3b:3f:20:b4:02:ec:7d:6c:78:95:
         68:01:96:89:53:e9:a0:34:10:be:e9:de:87:fb:de:25:3c:48:
         23:50:38:d9:05:d6:44:91:2b:68:aa:3d:ae:fc:45:eb:20:d3:
         cc:96:75:2a:40:6e:9f:7b:76:de:86:a4:21:b9:16:ef:86:d2:
         d5:1e:33:f1:00:cb:1b:ad:68:de:67:ed:17:84:ba:45:0f:f1:
         a7:1f:65:2c:b9:bc:8a:2f:ba:d7:6d:f6:04:a0:47:9c:7f:65:
         3d:8a:42:c6:cc:55:7a:57:7f:f5:a5:79:d3:77:c4:b3:a0:4b:
         fa:23:6c:39:28:fc:48:c9:8f:9c:b9:42:2a:d9:fc:8a:91:ee:
         3f:77:a8:2f:dd:6a:3d:c8:be:09:4f:d6:f0:b0:88:9c:83:14:
         32:97:7f:11:76:ca:cf:7f:1d:ae:51:05:8b:53:86:88:cd:31:
         b6:5b:42:db:0f:b7:ce:d6:00:a4:39:9d:c6:9b:e1:2b:2b:47:
         21:f4:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:25:37 2026 by rpki-client