Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa
File:                     bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa (raw, json)
Hash identifier:          QJTk8Sy1lhhK+6V862rhBAzMDlifZSfNiUZgk9/U070=
Subject key identifier:   D8:D3:1C:A1:34:14:62:56:BC:CD:F5:5D:2F:0D:8F:52:F3:9B:85:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0D19E1D27EA7777508500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        50.81.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:d1:9e:1d:27:ea:77:77:50:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99ba4515-29c2-4b81-99fd-9c82e74d1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:b2:ed:39:3d:4f:af:f2:99:01:fd:85:fa:
                    9e:9d:35:6d:c7:27:b0:8a:bb:39:66:e4:35:aa:ab:
                    df:46:64:33:e9:14:1e:d9:81:54:57:85:11:e0:de:
                    16:51:d9:48:32:aa:fd:24:4d:b2:56:33:03:b3:21:
                    e9:c9:7b:ec:db:2e:7c:07:57:2a:c8:77:42:a7:ed:
                    81:f9:3a:fc:e9:28:8c:62:39:92:32:2c:0d:31:b4:
                    6c:45:5f:c4:20:12:ac:64:4b:9d:fe:20:5f:ba:0d:
                    13:ed:c3:d4:bf:76:ac:56:53:78:f9:d0:fa:25:34:
                    01:43:3f:1d:9e:53:f0:d3:91:56:bc:b3:5b:63:26:
                    5b:19:7f:ab:29:ac:8e:cd:40:d3:97:0d:ff:63:a9:
                    e5:2c:15:82:ce:fa:a5:25:9e:72:61:42:98:cc:26:
                    af:3d:0d:d5:fb:22:4f:ed:61:a7:f5:4e:da:4f:5f:
                    08:2c:5d:ad:8a:ec:a5:e5:51:40:da:24:7b:be:23:
                    f3:35:04:06:a1:26:98:c0:fb:93:e7:d6:7b:89:c1:
                    eb:19:a0:e3:ad:17:ba:75:ea:a8:d4:dd:09:0b:b5:
                    6b:d4:99:6e:e4:17:70:a2:fb:c8:1d:6b:6b:ee:3e:
                    cb:82:cb:d1:7c:c0:94:d6:b8:cf:be:e5:ff:83:48:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:1C:A1:34:14:62:56:BC:CD:F5:5D:2F:0D:8F:52:F3:9B:85:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbe94dbb-f1ca-3cd4-8a06-769175df456b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:9b:0a:d7:0d:f2:6a:a4:8f:18:c2:02:59:bf:e2:3b:26:
         c8:ad:9b:c3:c7:65:4a:35:24:e7:c7:83:e4:e2:52:85:4a:99:
         f0:dd:37:ab:0e:fc:de:d2:7e:93:7c:32:50:0f:17:3b:5a:1e:
         45:98:b9:ec:2a:50:2e:c9:3d:df:da:32:95:6f:55:6c:51:bc:
         f2:d9:d7:48:46:09:a3:5c:6b:a3:fc:b2:ac:ef:fa:a0:54:10:
         dd:ce:a0:d0:9d:9b:2b:01:4c:f2:24:a5:2d:83:74:ed:af:5e:
         1f:8f:fb:c8:bd:ce:79:d5:d9:1e:c7:f7:7b:75:e0:59:20:0d:
         45:a1:42:d6:6a:61:88:93:d0:20:93:34:5e:81:3a:74:57:4b:
         ce:25:48:74:5a:a1:fd:cd:5e:1d:0d:28:91:5e:e4:47:d1:09:
         25:de:fd:08:fc:9d:c9:e9:2e:2d:ed:0d:bf:20:76:eb:c9:94:
         92:57:79:08:25:5a:f5:7c:0a:77:12:01:bf:5a:52:5b:9d:c1:
         61:7d:db:48:e3:72:fb:79:50:40:d0:1e:19:9b:d5:fa:db:54:
         2b:e5:b7:66:df:b0:8e:4a:68:be:7b:33:e6:43:7e:32:86:2b:
         fc:be:71:1b:37:79:b3:9c:d0:32:39:c5:cd:af:bc:03:17:9f:
         f7:81:c8:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noNGeHSfqd3dQhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTliYTQ1MTUtMjljMi00YjgxLTk5ZmQtOWM4MmU3NGQxNjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL+y7Tk9T6/ymQH9hfqenTVtxyewirs5ZuQ1
qqvfRmQz6RQe2YFUV4UR4N4WUdlIMqr9JE2yVjMDsyHpyXvs2y58B1cqyHdCp+2B
+Tr86SiMYjmSMiwNMbRsRV/EIBKsZEud/iBfug0T7cPUv3asVlN4+dD6JTQBQz8d
nlPw05FWvLNbYyZbGX+rKayOzUDTlw3/Y6nlLBWCzvqlJZ5yYUKYzCavPQ3V+yJP
7WGn9U7aT18ILF2tiuyl5VFA2iR7viPzNQQGoSaYwPuT59Z7icHrGaDjrRe6deqo
1N0JC7Vr1Jlu5BdwovvIHWtr7j7LgsvRfMCU1rjPvuX/g0iY0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjTHKE0FGJWvM31XS8Nj1Lzm4UcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmJlOTRkYmItZjFjYS0z
Y2Q0LThhMDYtNzY5MTc1ZGY0NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKtmwrXDfJqpI8YwgJZv+I7Jsitm8PHZUo1JOfHg+TiUoVKmfDdN6sO
/N7SfpN8MlAPFztaHkWYuewqUC7JPd/aMpVvVWxRvPLZ10hGCaNca6P8sqzv+qBU
EN3OoNCdmysBTPIkpS2DdO2vXh+P+8i9znnV2R7H93t14FkgDUWhQtZqYYiT0CCT
NF6BOnRXS84lSHRaof3NXh0NKJFe5EfRCSXe/Qj8ncnpLi3tDb8gduvJlJJXeQgl
WvV8CncSAb9aUludwWF920jjcvt5UEDQHhmb1frbVCvlt2bfsI5KaL57M+ZDfjKG
K/y+cRs3ebOc0DI5xc2vvAMXn/eByDY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:51 2026 by rpki-client