Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95003909-af9c-33c2-822f-02b0d78bc3fd.roa
File:                     95003909-af9c-33c2-822f-02b0d78bc3fd.roa (raw, json)
Hash identifier:          GuF3S8hoVXPf4wcKdLebY97nteoQ/lQ2AumaO1yc+3k=
Subject key identifier:   A7:EB:AE:38:BF:5F:BB:C3:6C:80:12:DE:24:90:39:D2:8D:32:0F:CE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F6C58325F471D789DE2288280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95003909-af9c-33c2-822f-02b0d78bc3fd.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     19905
IP address blocks:        50.80.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:32:5f:47:1d:78:9d:e2:28:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=5d6d2917-47ce-4a56-862d-14ed8ba435eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:79:9e:05:57:50:7e:87:53:d2:7e:81:74:
                    8e:f8:f6:b7:8d:0a:67:60:5d:5d:cb:d4:b9:8c:33:
                    ef:e6:ee:9a:92:08:26:9f:7f:6b:1e:a4:58:cf:9d:
                    cb:af:de:4c:e6:1c:7d:db:7c:9d:98:d1:17:20:1e:
                    74:cd:4d:eb:14:5f:1c:0b:28:58:43:55:97:cc:5c:
                    ac:8f:16:23:71:16:9f:b6:1e:70:36:ed:ba:80:27:
                    23:48:68:ef:4d:ea:05:a4:d7:60:5e:7f:e4:70:34:
                    94:c4:67:67:5a:78:71:12:79:27:98:37:c8:e7:75:
                    6e:8f:ba:06:de:52:ac:a5:7e:9e:77:d8:fd:54:72:
                    b9:7e:12:1f:e9:b8:70:a6:1c:67:bf:ce:d9:99:2c:
                    24:7e:3b:99:82:67:b4:57:38:3c:61:aa:fe:7d:1c:
                    fa:f1:ce:28:70:14:16:e7:70:a9:db:7e:3b:38:8b:
                    05:0a:89:ff:51:42:a4:1a:ee:d7:1c:29:fc:49:61:
                    ac:30:60:64:7e:d1:25:57:cf:07:86:dc:da:e1:e9:
                    47:bc:a2:8a:8d:47:99:44:36:c4:70:ee:be:cc:6a:
                    d1:27:fc:68:4c:71:a1:7f:ba:cd:c6:a7:72:01:65:
                    6f:87:c3:43:06:fc:8f:b1:4c:bd:6d:62:ad:67:70:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EB:AE:38:BF:5F:BB:C3:6C:80:12:DE:24:90:39:D2:8D:32:0F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95003909-af9c-33c2-822f-02b0d78bc3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:03:da:05:e4:b2:52:2b:2c:11:22:90:77:72:fc:92:ee:04:
         2f:08:9a:a2:6b:8d:f2:1e:b8:32:33:09:5c:5d:5f:c9:72:45:
         6a:22:6a:0b:e6:4b:d0:86:ba:24:23:67:4a:7f:7a:33:49:f0:
         dc:7e:43:5e:68:5e:bf:f7:76:5a:a2:86:3f:f4:7b:da:d8:b2:
         89:6d:b0:df:ed:bc:a8:59:f1:44:71:f6:0e:0c:80:f5:cc:ce:
         60:31:f1:05:06:37:4c:4f:88:b5:94:8f:33:44:fe:e0:b3:ac:
         c5:59:ad:f8:36:32:95:36:f4:c5:fd:42:2a:d8:c7:64:46:83:
         0f:4a:79:b6:21:4e:86:60:66:75:01:f9:23:f7:7b:74:f0:ba:
         0f:8b:7d:2a:af:ff:a5:dd:8e:13:bf:93:8d:6c:4b:a3:1c:45:
         18:29:f3:28:44:f1:81:38:f4:ff:a0:c9:52:a6:f8:72:2d:b1:
         d3:a0:bb:ca:7e:b3:ee:ff:86:18:7d:f4:59:97:a1:29:72:32:
         4f:8f:21:b2:95:03:b8:28:e0:d9:16:84:51:31:c8:21:be:c2:
         3a:23:5f:ba:12:45:cd:9a:88:9b:0d:2f:66:76:e2:5b:3a:5f:
         6b:47:b4:4b:8e:16:84:d1:51:32:e6:e8:ec:6c:ba:3c:cd:47:
         ff:f4:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:17:35 2026 by rpki-client