Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4a4e0e1-7428-3ab8-afa6-72996eb09147.roa
File:                     c4a4e0e1-7428-3ab8-afa6-72996eb09147.roa (raw, json)
Hash identifier:          0XhTfr9HiQ3Q4bm8om2xcFfdbc/VL7MIec1xxaZ9eEc=
Subject key identifier:   09:77:B7:0C:2A:79:BE:7E:AC:73:79:8E:57:EB:C1:63:EA:2D:78:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBBF51BAF14BDC9EFC99E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4a4e0e1-7428-3ab8-afa6-72996eb09147.roa
Signing time:             Thu 28 May 2026 12:14:57 +0000
ROA not before:           Thu 28 May 2026 12:14:57 +0000
ROA not after:            Wed 26 Aug 2026 12:14:57 +0000
asID:                     19905
IP address blocks:        50.80.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:bf:51:ba:f1:4b:dc:9e:fc:99:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:14:57 2026 GMT
            Not After : Aug 26 12:14:57 2026 GMT
        Subject: CN=99c5e568-b17a-43a4-a784-1f264661a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:c1:40:da:72:bd:06:44:7d:99:54:d1:f6:
                    7d:bc:f1:c9:a8:9d:bb:b5:e3:da:d4:be:c2:38:89:
                    ec:28:51:58:a2:b6:42:91:47:f6:63:44:b1:9b:0c:
                    bd:fb:8d:0c:59:07:ef:30:9a:f4:44:23:70:b2:40:
                    ab:37:ab:13:bb:17:3d:88:77:6e:f8:39:77:4f:bd:
                    6e:1b:53:44:d0:ca:a9:2a:2b:9e:0c:3f:db:e5:a1:
                    4b:53:b5:7a:43:a0:35:9f:ba:21:f5:e1:8e:d0:bc:
                    e7:d4:ed:91:f7:93:b0:96:10:e7:31:d3:ed:4e:0a:
                    32:1f:23:c8:2d:60:5f:91:f8:42:0b:90:ff:8f:e4:
                    4f:ef:19:69:c0:f5:1e:d7:f5:03:12:89:1e:16:05:
                    2a:d4:24:20:0a:0b:97:b9:d3:c2:a0:b1:fd:ea:34:
                    3f:11:63:58:31:7e:57:d4:33:85:e4:e2:8b:73:35:
                    83:3f:00:78:64:19:f1:79:14:4d:e4:9d:bb:2c:79:
                    bf:a0:75:7a:f6:55:c3:9f:b7:43:b9:5c:3d:df:0b:
                    b0:69:ae:60:bb:36:95:4a:fc:81:53:a9:09:a9:a4:
                    d8:03:7f:d4:75:ec:24:8d:cf:c1:97:0a:f2:4d:e9:
                    6b:e8:ab:63:1b:b1:ff:57:65:7f:65:d6:de:ea:4b:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:B7:0C:2A:79:BE:7E:AC:73:79:8E:57:EB:C1:63:EA:2D:78:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4a4e0e1-7428-3ab8-afa6-72996eb09147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:3e:73:0c:59:24:d4:20:29:2b:23:72:13:9e:9d:b2:fc:
         28:25:af:54:54:07:8c:9e:30:05:ce:6e:d0:97:e5:bf:c4:86:
         bf:1c:a0:dd:fa:e4:de:a0:b9:78:20:d9:f7:36:27:9a:54:99:
         a7:c8:c3:47:20:b2:88:e3:91:0b:ce:6c:98:15:8e:e6:b1:c6:
         67:b3:96:65:08:44:3b:5d:e0:c7:07:3c:16:40:03:68:8b:ae:
         e5:0e:5e:05:2a:e5:8e:6a:ee:0d:c0:e3:52:06:e1:a0:ca:87:
         d1:1d:a3:0e:84:66:b4:f9:e2:a8:c0:87:34:c0:88:eb:3f:f7:
         6c:e9:f3:45:03:28:6c:58:93:6f:f0:8d:23:fb:d3:0e:81:6d:
         b5:2b:23:88:7e:28:10:dd:91:2a:1d:11:49:d5:17:5b:b0:18:
         b3:85:bd:81:0e:e0:b3:14:27:b6:00:b6:b7:99:0c:55:5c:e2:
         ed:91:54:61:85:7a:39:93:09:d0:b1:bd:6e:9e:5b:52:9e:8e:
         d6:ce:e5:47:a3:b8:d4:52:9c:ca:d0:6d:74:7a:e5:a5:16:f2:
         f3:56:a7:0b:b7:39:a1:05:c1:11:b1:3a:01:f4:6a:60:92:19:
         50:e8:50:cd:5b:71:96:0f:86:e4:38:0a:43:ae:04:ec:71:2a:
         6e:d2:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:18 2026 by rpki-client