Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64f6435d-5e8e-3d9c-8ba9-b33f0ea12479.roa
File:                     64f6435d-5e8e-3d9c-8ba9-b33f0ea12479.roa (raw, json)
Hash identifier:          p1UfT6K22nEf5Tug3kEzZF5jqv7/sfzqG5F7ud0lKEM=
Subject key identifier:   9D:B9:8D:0C:C9:A4:6C:B6:D9:97:B0:A9:92:F1:C7:7A:11:EE:DE:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B235B99B6528691BA4B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64f6435d-5e8e-3d9c-8ba9-b33f0ea12479.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        50.81.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:23:5b:99:b6:52:86:91:ba:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=12866cae-3b99-4b63-9da6-33b3ed3fec0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:1a:be:09:e4:e0:b6:15:b9:eb:8d:a0:7f:
                    7f:26:78:75:20:ef:6d:ba:b5:70:e3:f2:42:f0:6a:
                    0e:80:bf:5c:61:2b:a3:f6:53:28:09:a7:97:65:a7:
                    42:50:68:75:48:0b:db:20:f0:4a:8e:2c:e5:6d:21:
                    e6:39:a8:84:02:34:3a:19:39:81:fa:6b:db:83:55:
                    02:2a:e3:c2:b8:2e:7f:1f:1f:64:9f:60:2f:19:97:
                    d0:e9:53:cd:1b:57:01:87:1c:e4:96:a6:dd:b3:be:
                    dc:c5:f1:61:b8:7d:cd:55:b2:ff:8f:e9:4c:8d:d9:
                    48:dd:3d:57:fd:cd:5c:9d:60:48:69:4d:7f:22:49:
                    5f:0b:9a:dd:e9:d7:f4:f6:0a:b3:65:dd:11:d4:8b:
                    e1:17:54:f2:42:d0:fd:5f:5a:d7:b9:cc:b0:a3:f8:
                    b6:74:b1:39:e1:62:55:0b:0a:cc:09:f0:66:76:3b:
                    85:d3:28:5e:94:0f:ca:28:76:21:22:8b:73:5d:e0:
                    24:5e:97:5f:b0:87:30:61:e6:3c:f8:bc:90:33:f0:
                    59:81:8a:3f:a3:e9:d9:53:e4:6d:2f:fa:01:30:cb:
                    94:ab:f4:28:9f:4f:27:ed:38:bc:d7:ed:0c:1a:7e:
                    f1:2f:bc:c0:2a:96:66:9e:95:a9:8d:a3:ce:b0:df:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B9:8D:0C:C9:A4:6C:B6:D9:97:B0:A9:92:F1:C7:7A:11:EE:DE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64f6435d-5e8e-3d9c-8ba9-b33f0ea12479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:4f:97:d1:4f:9a:69:b3:58:ba:c1:c0:6e:f1:27:8b:17:
         25:94:92:56:b5:28:9d:71:92:e6:6b:ba:9c:64:2b:7b:59:46:
         ac:8f:3e:b9:cf:64:40:9e:73:84:91:fc:f6:e0:79:6e:fb:7f:
         71:a0:2f:15:2a:0a:ab:6e:a5:96:11:b5:b8:32:b8:42:b9:94:
         6f:63:6d:f1:5f:7a:0a:73:3a:22:dd:9b:83:ef:3c:84:5d:01:
         d0:0d:e1:91:65:c3:23:b4:0c:2e:44:2d:21:c3:36:a8:7f:a6:
         df:93:cf:43:a5:12:37:b9:22:69:3e:ba:8c:86:71:c0:d5:1e:
         3c:94:b8:16:de:c1:f4:5f:31:19:31:8b:6a:71:ba:96:d2:a5:
         e3:65:42:47:a6:e1:31:fb:2f:50:9b:b8:e1:2f:fc:cd:0d:5b:
         fe:01:b8:7d:e4:9f:40:3a:e3:bb:22:0a:f1:39:73:d5:17:a0:
         c3:a2:41:2e:58:42:0e:8c:d2:ce:8f:c8:71:bf:4d:f3:b0:07:
         fd:21:ee:dc:3a:68:fb:f2:19:55:6f:24:7c:70:34:d7:a6:81:
         48:b0:d6:e9:85:e8:bd:ed:c0:23:bb:a8:4d:5b:92:37:91:b9:
         7c:b0:38:3e:b3:1f:66:04:24:80:28:78:e9:5f:f3:12:2c:63:
         e1:26:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:29:58 2026 by rpki-client