Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c68d43f7-d331-3785-b659-53c27ea57767.roa
File:                     c68d43f7-d331-3785-b659-53c27ea57767.roa (raw, json)
Hash identifier:          BVn6A2z9UQ2RVm4DLbq9XwFVI2C9laMsBriojPvK+b0=
Subject key identifier:   6C:E1:B9:9C:F8:E2:E3:87:9C:9F:67:58:76:93:09:68:62:BD:EF:51
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974BA4CBC77F76B615B23D9
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c68d43f7-d331-3785-b659-53c27ea57767.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        50.80.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ba:4c:bc:77:f7:6b:61:5b:23:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2dad4399-ab66-441b-9918-17f88aba5832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:f6:1a:59:7a:07:12:2f:0e:61:fb:c6:d7:
                    b6:18:6c:8d:20:ed:13:3b:25:e3:2b:de:9e:02:9d:
                    62:aa:89:0b:ce:3f:a0:3b:51:65:a0:6a:74:1e:a5:
                    df:d3:3f:75:c2:0b:36:d4:1b:7f:07:34:a4:34:3c:
                    50:9c:b6:0b:77:ce:1a:31:10:29:29:f5:7d:0d:10:
                    f4:fb:68:dc:26:c3:5b:87:91:35:97:e0:b5:01:5c:
                    c6:2a:80:cd:95:d4:ae:e6:c1:5c:57:ba:6e:5f:84:
                    23:da:a5:99:8c:3e:a2:66:f6:75:c0:c1:f3:f8:29:
                    81:a1:1c:42:55:18:a3:48:e0:75:78:a1:ad:00:4b:
                    44:d0:b7:ce:bb:b4:cb:2b:68:38:14:69:6e:dc:af:
                    f7:c4:ab:d1:0e:e7:ff:cc:ba:5e:7a:83:58:a9:11:
                    6e:7b:52:7a:b8:ce:3b:70:94:a8:a7:4e:c4:fc:9b:
                    65:cc:3d:7c:fb:8d:75:dc:99:5c:85:5f:4b:fe:af:
                    fb:4a:23:2d:32:14:3b:fe:c6:6a:52:46:49:6a:fb:
                    f7:15:97:7c:c8:89:dd:09:d1:05:1a:b7:2f:53:59:
                    a0:c4:3f:af:cf:10:3a:f9:f1:63:49:f8:05:f5:e3:
                    9d:92:4c:6f:89:0a:d4:a4:5e:6c:28:c2:34:39:7e:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:B9:9C:F8:E2:E3:87:9C:9F:67:58:76:93:09:68:62:BD:EF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c68d43f7-d331-3785-b659-53c27ea57767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:51:9e:7d:a7:d2:2e:2d:f0:4d:76:2c:14:13:df:b7:29:
         7a:f9:8f:fc:a5:a4:0e:e6:11:4f:67:13:00:d5:05:f6:ee:4a:
         28:f4:60:8a:24:06:08:c9:2a:37:cc:63:e9:05:78:d7:10:0a:
         c2:d2:fe:29:44:6b:49:e3:59:87:dd:4b:cc:88:01:43:d5:34:
         07:b3:32:b3:0b:c9:5d:98:f1:4f:6f:1e:c1:2c:0a:32:20:56:
         55:11:5d:73:1b:2d:6d:58:77:61:ed:38:d1:3c:ca:8b:6a:aa:
         32:da:62:70:1a:4d:19:de:98:c3:6a:cf:d2:73:4a:b1:8b:13:
         c2:ec:67:2d:fc:ae:e0:cd:09:b4:d4:82:4d:27:9d:25:fd:a7:
         71:b6:34:4b:b5:72:72:8a:d5:26:5b:a9:9c:bd:14:be:c2:a4:
         ad:e5:9a:37:90:57:f8:05:fb:d0:2a:f7:df:21:00:ba:5e:de:
         ac:ea:9c:fc:0c:30:0e:da:d6:e6:3b:14:78:f8:78:31:51:a4:
         39:d0:7a:08:8f:a8:0d:8c:ad:04:fe:9c:01:b6:a4:f9:2f:17:
         fc:3e:4d:28:8a:a9:3a:8a:32:b9:4b:9f:86:ab:a1:20:92:a6:
         9b:34:0d:8d:c4:19:71:92:63:35:13:a1:9c:eb:92:34:4a:cc:
         a6:80:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:08:05 2026 by rpki-client