Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa
File:                     bea4add9-19c9-3643-a83c-496bd1649cea.roa (raw, json)
Hash identifier:          c1sTdPvkDRgciIUz3GaU1oDFlu9brFFICHJi/bRurM8=
Subject key identifier:   08:22:A0:45:CD:81:B1:CC:81:C8:3D:D0:3B:C3:2D:9D:FB:7B:69:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A4720C83B15B17B7D7C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        50.82.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:47:20:c8:3b:15:b1:7b:7d:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=798b4166-0da4-4df3-ba36-bfbc7636b418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:50:f1:65:be:5d:55:ac:19:81:b1:24:99:
                    8b:86:23:e0:ae:c8:68:5c:33:9a:49:6a:de:10:4d:
                    54:1e:a0:69:1c:e1:ed:0f:15:91:83:38:d1:b5:d2:
                    dc:d6:f8:ed:b2:d2:fa:ac:a9:6e:d3:da:23:62:5d:
                    09:14:88:95:5a:f5:51:20:e7:1d:fc:b9:3e:90:1a:
                    05:83:2a:62:97:23:38:73:fe:65:3d:05:ce:58:8e:
                    3f:f0:ae:04:24:04:5b:39:e1:4f:ab:39:eb:7f:3d:
                    43:09:ed:0b:8e:4b:9c:24:cf:a7:ae:a3:7f:13:0f:
                    cb:87:b7:d0:0d:dd:6f:7d:25:87:8a:9b:fc:30:0e:
                    2a:bb:53:4e:e9:c0:ec:76:a7:de:9f:e9:c7:4d:0e:
                    78:cc:58:9e:38:f5:79:af:62:fb:b1:10:43:52:34:
                    f4:2c:37:cf:0d:3f:0e:ad:dd:e3:61:8d:15:a0:1a:
                    dd:23:9c:e9:95:fd:5b:ba:78:31:6f:27:4f:d1:99:
                    cd:2a:95:ef:b6:bf:d3:64:72:95:a9:d4:d0:43:85:
                    2b:17:e4:e9:ab:a7:c0:5b:ab:6d:97:b9:60:d8:5e:
                    e0:da:5b:45:fe:dd:68:a2:e1:ad:c5:d1:d7:9f:4e:
                    70:68:30:11:3d:59:5f:fd:37:63:4c:05:89:e2:44:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:22:A0:45:CD:81:B1:CC:81:C8:3D:D0:3B:C3:2D:9D:FB:7B:69:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bea4add9-19c9-3643-a83c-496bd1649cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:5f:23:df:af:b9:01:8a:fa:a2:92:a3:2d:f6:13:a3:9b:
         4d:35:c7:70:b6:f2:0c:16:b6:c0:a6:6d:35:ad:65:46:4c:22:
         80:3f:5b:34:fa:51:cd:85:f9:35:2e:92:01:fa:db:f6:75:48:
         da:93:91:7e:1f:5c:25:61:7a:82:10:c0:03:6a:d5:f4:47:aa:
         77:d8:38:83:60:d5:db:1b:41:a0:4f:54:04:6d:5f:21:24:c0:
         bc:cd:c0:69:bc:c0:ba:ee:e5:2c:21:b7:3a:ed:fe:a4:5c:f2:
         ed:de:ae:75:dc:b3:c3:9f:5a:5b:94:d2:2d:6a:ab:a1:de:c2:
         4b:52:d2:14:c9:b5:ef:e0:5a:73:a3:9c:2f:6a:0c:6a:d0:5e:
         5a:f0:3d:88:57:51:b9:8c:74:a3:68:9a:19:32:dd:2b:4c:33:
         07:62:f6:d6:5b:02:e0:f9:9e:d9:55:04:6c:1f:78:07:32:cb:
         db:d4:e7:06:36:f3:31:f9:e9:fd:d1:3b:b4:36:93:ad:3b:0e:
         cf:2a:b7:11:6e:b9:d9:c6:38:bf:d9:83:91:93:45:78:ba:d9:
         ef:dd:d1:c0:7e:e8:80:08:15:a9:df:59:d9:15:bd:46:1d:d0:
         64:dc:4e:7f:37:87:55:01:10:5a:a1:a7:81:0c:1a:58:d8:66:
         ad:c5:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:05:40 2026 by rpki-client