Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2e009ce-7227-3596-8e8f-b806bf231371.roa
File:                     b2e009ce-7227-3596-8e8f-b806bf231371.roa (raw, json)
Hash identifier:          dhmlVNz2bbfvPiQtDtaICMoqlglomVp21eAa3HU7UPs=
Subject key identifier:   F0:70:B5:E8:51:F5:91:38:69:5E:DC:40:0D:74:92:41:7C:08:07:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0BDCF81054DFDE39C815AB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2e009ce-7227-3596-8e8f-b806bf231371.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.82.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dc:f8:10:54:df:de:39:c8:15:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=20229cdc-15cb-46d2-bd58-6b2f5d24f419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:d2:51:5e:bc:74:e7:4f:ac:39:66:d6:16:
                    c4:c5:e2:f6:e5:d5:b2:10:10:fa:b8:9f:bb:71:45:
                    20:67:a6:76:1f:ac:ff:2e:6d:de:a3:5f:d6:2d:7d:
                    3b:9c:62:dd:d8:87:a1:00:41:80:c1:b8:f6:39:a0:
                    5d:88:59:2c:24:fb:36:8f:c3:fc:cd:6c:6c:d1:47:
                    33:a3:2c:1b:cf:ea:20:d1:27:bb:0c:d7:8f:53:03:
                    42:a8:2f:43:45:1a:09:1d:59:9f:bb:ad:7c:a0:0d:
                    0d:af:fc:c6:59:5b:64:7d:80:ab:a6:37:ee:2c:63:
                    39:e9:b6:01:2b:7a:62:94:c4:c3:c1:7e:0c:ea:da:
                    9c:23:3e:40:6a:b7:cd:c6:37:09:c5:1d:fd:02:e8:
                    c1:e2:8c:b1:25:0d:20:e7:b0:54:38:f3:b1:8e:df:
                    30:60:7f:4c:90:1d:85:1a:c6:7e:8e:64:29:ae:ed:
                    4d:39:a0:0e:c9:96:e2:43:90:2f:bb:b8:9f:1c:71:
                    9f:7f:4f:a6:5f:8c:2a:18:44:57:f0:da:21:02:46:
                    57:9a:57:cb:43:1c:15:e0:be:26:24:8b:75:a8:f0:
                    26:9b:1e:d0:61:f6:d2:e9:67:0d:49:d8:7b:8b:e3:
                    e8:56:89:5e:0d:67:36:4e:21:56:9f:c9:fa:74:3c:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:70:B5:E8:51:F5:91:38:69:5E:DC:40:0D:74:92:41:7C:08:07:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2e009ce-7227-3596-8e8f-b806bf231371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:32:b8:ad:2a:fb:1f:7d:ad:0e:b4:5d:f7:58:e8:f1:69:ed:
         97:e4:de:1f:17:db:5a:1c:d8:86:ed:6b:12:0e:ff:98:00:25:
         1d:5e:db:87:34:15:db:7c:e1:41:7e:72:81:d3:75:ad:8c:bd:
         d3:59:34:3b:cd:a4:ca:b7:e1:e9:97:bb:63:ce:f3:ca:4c:3b:
         bd:46:18:07:fe:eb:a8:c6:ee:98:a8:96:8f:d7:85:41:98:43:
         37:7a:24:8c:00:5e:13:98:d6:6d:92:7d:9d:da:e4:da:79:09:
         ae:a0:28:b3:8f:7d:19:66:36:30:d2:77:b7:0a:62:e7:52:ae:
         f1:c7:cc:fe:c7:b1:b4:25:8c:ae:bf:fd:d4:e1:b4:8f:29:dc:
         6a:bf:cd:a2:75:01:d5:85:61:ca:36:11:a2:4e:bb:26:6d:bc:
         f5:26:23:17:3c:78:0b:6d:44:6d:22:40:b8:bc:aa:af:0b:eb:
         22:e3:92:26:3b:2d:16:83:af:f5:fe:ac:95:8f:47:0e:3d:fa:
         8b:dc:e0:8c:69:0e:65:aa:f2:8c:86:83:d3:a8:bc:96:1c:d0:
         2e:d0:40:e4:7c:04:08:30:01:9d:2c:56:c7:dd:03:e8:04:e6:
         4f:79:48:88:13:67:47:fc:5d:af:10:07:66:87:96:a5:81:ad:
         43:1f:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:13 2026 by rpki-client