Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc1c8038-60fc-37ae-9880-03b5a6ac96bb.roa
File:                     bc1c8038-60fc-37ae-9880-03b5a6ac96bb.roa (raw, json)
Hash identifier:          cS0F3bE6Yb1kTVzvg/t8YL0Sg61HzBX+k5jdHQiRucA=
Subject key identifier:   B5:36:92:75:34:17:43:B5:F1:9A:BC:09:81:57:C5:AE:AD:8B:22:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE9926CF536CD7CC9B5D72400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc1c8038-60fc-37ae-9880-03b5a6ac96bb.roa
Signing time:             Thu 21 May 2026 23:59:57 +0000
ROA not before:           Thu 21 May 2026 23:59:57 +0000
ROA not after:            Wed 19 Aug 2026 23:59:57 +0000
asID:                     19905
IP address blocks:        50.80.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:92:6c:f5:36:cd:7c:c9:b5:d7:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 21 23:59:57 2026 GMT
            Not After : Aug 19 23:59:57 2026 GMT
        Subject: CN=eb4b3eb4-4bab-49af-b050-cb26b1833471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:07:ee:f7:57:fa:cb:2a:17:6a:5c:9d:d4:
                    94:17:82:2e:19:b1:9e:bf:6d:95:33:65:26:cb:5c:
                    e0:11:64:ca:ea:7d:c3:d1:26:14:0f:9e:e9:d9:05:
                    ae:ea:4b:0d:a1:6d:c8:e9:34:51:2d:b8:0f:ea:5a:
                    f5:64:2e:14:1a:5b:e8:49:b7:24:6f:c8:ca:80:db:
                    71:5d:c1:c8:e6:18:28:9d:51:f3:78:48:64:b9:6c:
                    36:2c:44:f6:96:c7:bb:c4:2d:ff:8c:b4:b7:08:df:
                    8c:fb:63:a2:96:16:ee:0c:dd:0f:48:e5:60:d0:6e:
                    8f:73:45:76:fe:c9:ea:24:0e:ce:ed:47:76:d8:c1:
                    b0:d4:ab:9f:93:56:98:92:20:86:5f:64:54:ae:2a:
                    8c:35:19:82:4e:de:59:08:70:7c:4c:c1:15:db:81:
                    51:56:3d:99:8f:e9:aa:28:2b:c3:35:eb:6a:02:3f:
                    59:99:91:9e:3d:fe:02:95:3f:2c:6b:4a:45:b5:79:
                    06:e2:7e:8b:dd:24:da:fb:de:7a:42:0d:f2:fc:ea:
                    7f:29:6f:db:5b:83:b6:d5:53:84:8d:72:fc:60:bd:
                    46:3d:dc:a1:e0:db:91:cd:62:47:aa:8c:c9:23:16:
                    ce:28:e4:68:88:70:d9:b9:c2:e9:6a:87:a2:25:dd:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:36:92:75:34:17:43:B5:F1:9A:BC:09:81:57:C5:AE:AD:8B:22:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc1c8038-60fc-37ae-9880-03b5a6ac96bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:33:f2:ed:5a:40:72:15:c4:a0:88:39:f8:87:b0:2e:5b:
         fb:90:76:56:70:4b:fa:3c:7d:5b:d4:e7:40:5c:a9:5d:e2:bb:
         de:b7:54:1a:94:b7:44:94:46:3e:2c:9d:84:05:ef:a7:52:2b:
         02:82:b6:8a:83:44:0c:29:3c:d2:5c:56:72:12:59:4a:27:21:
         ca:e7:89:15:bf:60:5a:03:6b:1c:6d:a7:04:e1:20:69:c1:85:
         2a:f4:43:fc:dc:9c:a2:d0:0e:1f:44:6b:4a:cd:c5:f7:72:4f:
         0a:c4:b8:47:d5:14:0e:3a:5a:11:cd:d8:a3:b2:c4:09:3f:aa:
         d5:b3:de:2e:5f:78:e3:e2:a7:0c:8f:49:00:ab:7e:3d:4c:7b:
         23:e8:c3:f5:b5:c3:47:e5:81:52:e5:17:50:0b:6b:22:7e:2e:
         66:6f:f9:88:2d:f8:9b:f7:6a:99:8e:49:5a:9f:03:20:ff:1b:
         99:a3:48:2f:c2:d1:e8:df:70:f4:06:de:4b:b7:05:a6:ee:46:
         82:1d:c0:17:31:66:52:9d:73:4b:2e:46:64:de:f0:0d:67:59:
         67:70:de:e7:be:ef:86:75:e4:74:cd:27:25:03:ae:b4:7c:a8:
         a1:f9:69:88:42:7a:68:ea:44:75:f8:ee:10:d4:29:75:4b:8f:
         22:53:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:16 2026 by rpki-client