Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/521e3059-b3e4-3004-9072-618d530697e5.roa
File:                     521e3059-b3e4-3004-9072-618d530697e5.roa (raw, json)
Hash identifier:          UR56L0qZghneEm6uvBs9mKxu8/4myfVVOsLypLQM35E=
Subject key identifier:   10:2C:FE:06:67:41:79:70:CF:5D:25:44:C9:2E:45:32:D6:07:4B:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F58CD677DA0F0E547D9021A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/521e3059-b3e4-3004-9072-618d530697e5.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        50.81.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:67:7d:a0:f0:e5:47:d9:02:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=495c0a75-c6fc-4ee4-a90f-fd8cca6af027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:ef:cf:3c:68:6e:47:da:40:f9:37:37:70:
                    d3:be:d1:10:7c:8a:5b:38:f0:0a:c3:70:aa:02:4a:
                    7f:77:5a:36:d2:b0:15:b3:b8:59:4f:c2:da:4f:ec:
                    ce:ff:2e:90:1b:e6:8a:e1:d4:6c:f3:e7:e9:44:50:
                    79:3a:33:a8:80:1b:a6:61:21:ce:c1:03:74:4b:8c:
                    64:79:09:03:6d:e6:44:3b:9e:aa:04:11:0e:34:f9:
                    ac:2f:c3:4d:02:85:40:c3:0b:ef:2d:83:65:7b:d6:
                    eb:9b:c7:f1:17:3c:13:d4:05:95:56:c2:fa:dd:70:
                    1e:65:14:39:5a:06:e7:89:13:93:10:15:d7:7b:11:
                    45:bd:96:d6:22:62:52:67:9d:6c:8f:a1:74:f9:5c:
                    ef:fc:e7:e1:7e:00:2b:3a:bd:3c:66:31:96:f9:f4:
                    30:41:e4:64:f1:94:45:87:33:39:fe:21:b5:32:11:
                    6c:ba:a6:81:0a:45:61:d2:6c:62:2c:80:f1:fa:15:
                    f1:b4:47:78:a3:7a:a6:3e:e5:36:a1:8a:66:f3:ab:
                    e1:55:e6:a0:f1:e2:f7:71:bd:f3:87:06:7c:bb:60:
                    2b:9e:9e:4c:47:0c:11:fc:5e:6b:5d:b0:9c:56:c1:
                    09:7d:b4:58:ec:ac:ac:cf:1e:70:6f:e2:fe:57:9b:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:FE:06:67:41:79:70:CF:5D:25:44:C9:2E:45:32:D6:07:4B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/521e3059-b3e4-3004-9072-618d530697e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:74:b9:3b:1a:a5:71:06:70:98:32:39:68:13:c2:cd:82:7e:
         ea:4b:9a:4e:88:fe:a4:94:b7:29:b0:57:c8:8a:a9:3c:a7:6d:
         49:6f:ce:c7:32:32:db:e5:c3:80:84:b4:2c:28:66:48:a2:64:
         dd:a7:9a:80:85:00:94:cd:40:22:50:a1:bf:1d:4d:70:0c:ef:
         d6:4a:98:01:1d:6e:3d:e2:7c:84:e0:be:0b:34:88:d2:ae:c8:
         67:3e:51:d9:99:85:bc:12:2c:50:24:cd:fd:31:d9:7f:b5:27:
         93:70:5c:e5:b0:f1:e2:6f:fa:ed:04:2b:2f:dd:4a:ac:fb:cd:
         1b:8f:42:5a:9d:a6:5b:c3:fb:ed:37:6b:c1:e1:d9:4e:fd:e5:
         23:6d:ed:a8:d8:a1:7e:a5:e2:55:0d:28:30:17:f9:ff:8c:3b:
         dc:d9:da:d7:f6:9c:42:f7:29:f4:39:3c:6a:ed:0e:a1:da:20:
         e4:f4:6b:26:19:46:a0:9f:6d:97:ea:6c:0c:4a:3e:e5:f9:51:
         21:9d:71:be:7e:e6:d6:fb:91:2b:f2:be:2b:a4:14:9a:8a:f9:
         08:58:2c:0c:39:40:8f:75:30:60:30:1e:95:27:e0:62:c5:59:
         e9:76:47:dc:7f:31:8b:b9:d7:04:ff:b8:ca:18:da:a1:10:03:
         d8:56:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:59:15 2026 by rpki-client