Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a5df3b5-80fd-3103-a6ba-ec2259980d54.roa
File:                     8a5df3b5-80fd-3103-a6ba-ec2259980d54.roa (raw, json)
Hash identifier:          kiTl6HbC8xHPKGbr3Y9jyeOG2LHZYwRkP1MJcmfHJVY=
Subject key identifier:   ED:87:BC:8C:C0:55:FA:71:36:87:60:50:7F:B9:2D:A3:3F:3D:9D:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA9C0084169A69ABDCAE3DE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a5df3b5-80fd-3103-a6ba-ec2259980d54.roa
Signing time:             Wed 29 Jul 2026 20:07:03 +0000
ROA not before:           Wed 29 Jul 2026 20:07:03 +0000
ROA not after:            Tue 27 Oct 2026 20:07:03 +0000
asID:                     19905
IP address blocks:        50.82.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:c0:08:41:69:a6:9a:bd:ca:e3:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 20:07:03 2026 GMT
            Not After : Oct 27 20:07:03 2026 GMT
        Subject: CN=074c51e6-e772-40ee-966b-d3ae1aa70825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:40:a0:cd:84:5c:b6:70:cc:c8:01:00:c4:
                    25:44:6b:f2:c4:cf:f9:48:4d:ea:e1:84:46:ff:c4:
                    9f:44:33:fb:81:56:d7:ef:0f:56:91:8b:40:dc:9a:
                    b2:ca:47:e5:e8:74:bb:ce:7b:22:e3:ee:39:28:0a:
                    e2:cc:89:11:e8:8d:88:f7:d4:98:28:ab:69:c2:7b:
                    f6:f2:c3:35:49:8d:7a:c8:eb:ee:ce:38:1c:65:82:
                    7d:2b:f8:11:27:53:9e:5a:90:6e:bf:ff:af:6e:d0:
                    f0:53:c4:00:61:1e:d7:a9:fe:6d:3b:bb:43:98:9e:
                    56:7a:e9:7c:14:ba:9c:25:a1:02:20:8b:63:7a:dc:
                    2a:f8:28:c7:f7:d0:34:f9:d3:f1:c0:96:46:e9:73:
                    90:81:f0:39:6f:9c:e8:02:15:87:b0:66:26:26:94:
                    86:3c:dd:67:9d:f2:89:ad:d8:81:f7:45:e7:24:6d:
                    54:1c:d2:b3:d4:bf:39:c3:f7:79:cf:6e:ea:d3:98:
                    0e:71:c1:3b:af:ae:e1:f7:c7:b9:09:23:c9:96:e4:
                    1d:96:6b:0b:ed:f5:f4:83:0c:6b:c5:a1:10:dd:bc:
                    46:98:bc:36:47:4b:57:b5:96:4c:76:16:d2:c4:3f:
                    d1:2c:3a:90:a6:6c:81:3e:a2:4c:18:a3:0e:67:ff:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:BC:8C:C0:55:FA:71:36:87:60:50:7F:B9:2D:A3:3F:3D:9D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a5df3b5-80fd-3103-a6ba-ec2259980d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:e4:08:8b:ab:aa:cd:b4:17:07:28:aa:05:c5:c8:5b:bb:
         3d:7b:6a:db:d6:52:ec:fc:83:3e:cd:27:a1:07:1e:0d:d7:46:
         63:ba:74:74:4f:d0:3c:45:c6:8e:b8:62:8e:f7:20:df:b6:ce:
         c0:8b:da:c5:ae:cb:bb:0b:73:c2:14:0a:78:58:32:91:fb:9b:
         89:5c:49:73:b8:d9:f0:ba:ca:a9:ee:76:2a:1e:08:ea:0f:7f:
         39:d2:26:ed:e6:f0:fa:0d:e1:ef:7c:7c:31:ce:aa:0f:74:ab:
         21:7f:1f:db:38:ca:1b:e6:9c:4e:c9:04:de:ca:28:47:48:97:
         d4:4d:a8:63:99:25:e7:84:ab:88:f9:66:a9:53:54:d7:46:b8:
         9c:fc:fc:e0:ce:13:a6:32:0f:77:ae:2e:fb:8d:a2:34:aa:21:
         b9:54:46:0c:00:ae:4d:a8:9c:0c:e7:95:40:72:71:d7:b8:b7:
         91:2e:8c:e7:fe:5b:30:57:b4:51:cc:81:ec:78:7c:c5:1f:c3:
         d5:02:16:ac:1f:45:d5:b7:f0:a9:08:d4:5d:4b:af:d2:da:ed:
         1f:1d:67:33:6c:af:d1:ee:ae:f3:e0:08:23:9c:d1:a4:44:fc:
         ea:00:7b:66:54:42:2c:86:13:f1:b4:71:e2:7c:5d:93:17:0e:
         71:f9:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:09 2026 by rpki-client