Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa
File:                     cc71187c-a5e3-36c0-9308-1f78198cea29.roa (raw, json)
Hash identifier:          HualUT0cHE+sxMPTjysvOO4bD5mZC7EGzewss8E5Qn4=
Subject key identifier:   F9:4B:84:59:72:54:17:1B:B0:4F:D2:48:9F:5F:A8:D6:47:D5:49:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707CD21DB6F8709A7635770
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        50.82.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:cd:21:db:6f:87:09:a7:63:57:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=173179d3-4da3-428d-8efe-9b05c8c64e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:85:e9:2f:dd:92:50:7f:3d:9f:fb:78:ed:
                    9e:c4:43:a0:b4:5b:dd:c6:4e:8b:ff:b1:df:fc:ae:
                    df:a8:44:1f:73:ca:a0:54:42:36:6b:63:9c:c1:c2:
                    31:b2:90:e1:1a:fb:cc:ed:d9:0c:92:c2:02:e3:d5:
                    60:1e:c9:1e:ae:ca:de:ff:a4:49:60:ce:f3:4f:cb:
                    2e:df:c3:28:3e:5d:34:cb:9f:4f:e6:04:9d:19:76:
                    d8:75:4d:f6:78:81:2f:06:97:41:9e:c2:a0:52:80:
                    95:56:7b:6d:eb:6a:b2:cb:6a:1b:75:2b:bb:1b:3c:
                    9a:2d:cd:09:b8:cc:32:80:8d:af:bc:69:e8:e5:19:
                    bc:96:b9:1b:32:c7:d6:99:b9:7a:b1:3d:15:45:0a:
                    85:8b:7c:2a:1d:d3:41:17:7a:41:7a:31:36:ff:67:
                    fe:21:84:85:a0:ff:4d:9b:f4:a7:80:2e:6b:cd:ac:
                    f7:be:bf:e1:e3:27:68:f0:54:f8:5d:55:fb:53:af:
                    10:a2:76:5f:c3:0e:11:72:13:af:a0:dd:8f:c5:ef:
                    ce:d7:5d:fd:17:9a:bb:0e:89:ea:e5:1d:4b:2b:7e:
                    e0:3c:0f:29:7a:cc:29:e1:40:ee:df:00:e5:64:90:
                    fe:26:f2:ec:9a:fd:af:96:19:64:d9:ed:a3:47:cc:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:84:59:72:54:17:1B:B0:4F:D2:48:9F:5F:A8:D6:47:D5:49:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:cc:11:8a:0e:db:6e:b1:91:9d:47:ea:37:79:5f:0a:d1:
         ff:d4:9e:dc:9d:a6:4b:5c:89:d4:e0:31:72:99:49:d9:c7:0f:
         56:df:4b:6b:e2:76:29:11:f6:92:b1:08:6a:4d:86:fb:10:1a:
         49:05:76:0d:d6:97:e0:15:29:bb:4d:17:c2:a5:05:12:a9:41:
         93:05:22:a1:87:cb:c5:c6:4c:d0:a4:a0:43:f9:d7:4f:2d:d9:
         23:58:5e:b0:f6:7c:4e:75:e3:dc:fd:19:e4:7e:13:56:3a:1b:
         45:02:58:1e:3b:59:98:c0:b5:09:90:79:67:50:08:f3:47:30:
         02:b9:63:eb:78:19:cd:96:86:95:62:1d:59:3e:d4:4d:b8:e3:
         c6:eb:a6:b3:db:3b:f7:49:41:af:0a:fe:8e:e4:8c:2a:68:ff:
         1d:d9:26:4f:7b:d8:11:55:5f:ba:1e:08:9b:d8:18:b9:7b:59:
         08:de:b3:a1:7f:ca:bd:b3:6d:fa:a1:3a:91:f3:c4:8f:9c:e0:
         76:f8:69:d5:c8:d4:c2:05:86:88:b1:f9:f9:96:5a:68:b2:ca:
         c9:7b:14:50:76:d7:ce:d0:f7:59:5e:68:4a:e2:09:62:6f:67:
         c2:76:68:88:0b:88:5a:dc:76:30:39:f2:86:d0:28:d8:31:38:
         69:d1:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:05 2026 by rpki-client