Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8c91a47-160f-3109-83f3-1c0df069e05b.roa
File:                     d8c91a47-160f-3109-83f3-1c0df069e05b.roa (raw, json)
Hash identifier:          X92kGTxUxg17xIU0mTJ1V7jF/E6SYYVGUn5R4h27Daw=
Subject key identifier:   C0:F6:85:CF:AA:13:84:24:67:FF:D1:74:D0:D0:4E:50:59:74:3A:AC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F63F80A8BCBE99866DA694540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8c91a47-160f-3109-83f3-1c0df069e05b.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     30036
IP address blocks:        50.80.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0a:8b:cb:e9:98:66:da:69:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=c4b34040-db9a-4e60-b2db-e53c6258555b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:08:87:5e:b1:fc:d2:63:f7:3b:6c:f9:c9:
                    aa:7c:8d:7b:a5:74:16:73:70:db:79:c5:50:be:36:
                    ba:0b:10:a2:b5:6d:bf:9e:f8:44:25:6f:26:85:78:
                    24:1f:02:f8:bd:d3:5e:71:8b:cf:32:02:1d:7f:49:
                    69:90:8e:c3:5c:da:d7:55:f5:48:91:2c:d3:25:fc:
                    8c:8f:d6:21:35:25:6c:f4:19:aa:67:cc:22:62:87:
                    36:80:43:c3:64:2e:60:11:1c:1c:95:dc:47:c4:27:
                    15:3b:09:91:08:03:a6:18:fb:1b:21:7a:0d:b2:3a:
                    2b:30:66:c2:7f:62:0d:f9:56:4c:cf:1d:43:26:38:
                    77:c0:94:b7:81:ed:85:f6:0e:95:2d:e9:4b:d5:5c:
                    34:65:71:ea:9e:9b:85:1e:d5:05:c0:e2:e7:7b:ad:
                    16:62:27:2d:88:7f:19:bb:d7:7c:a0:51:fa:77:34:
                    b4:b7:5c:a0:ca:85:39:a1:5d:4a:17:9e:d3:4e:f7:
                    43:c2:f3:4b:a7:27:eb:95:ea:9d:5c:5a:8c:ab:85:
                    53:30:2f:54:12:ef:4d:40:ef:7b:51:f2:b9:9a:ba:
                    aa:fd:05:c5:c2:c4:7d:e7:95:16:2d:9f:2d:68:3d:
                    fd:37:7b:0b:53:85:76:d4:44:c2:61:9f:b6:70:79:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:85:CF:AA:13:84:24:67:FF:D1:74:D0:D0:4E:50:59:74:3A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8c91a47-160f-3109-83f3-1c0df069e05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:23:a6:ba:e3:3e:0c:83:7e:d6:f2:58:98:2a:1c:6a:77:85:
         ed:1a:cb:83:f1:5b:87:8e:a7:7f:a3:a2:7f:04:58:bf:82:de:
         38:b9:58:89:de:00:fd:f4:b5:73:f4:1f:67:68:03:e7:4d:63:
         4d:0a:99:69:36:0b:07:99:a6:5b:4b:30:20:44:e2:5a:4b:28:
         c8:4d:3c:cd:08:ce:53:c9:44:9b:8f:9a:49:af:c3:b2:2f:15:
         10:46:a5:73:ba:61:49:f4:28:e2:9a:eb:97:ea:53:39:43:4d:
         6d:71:8f:0d:d7:df:99:fe:88:bd:5b:87:ed:66:4e:c1:c8:5c:
         5a:74:b2:e9:b9:ed:7a:80:41:96:30:2b:84:05:c1:ac:d1:47:
         72:1d:b8:0f:53:4c:ee:6f:ea:37:8f:81:41:6f:ca:35:2e:2c:
         12:b0:47:53:de:85:16:49:76:5f:c8:1d:3e:fc:ec:12:ca:a0:
         9d:e6:69:7e:06:49:e3:12:6f:0e:44:1e:62:25:36:7c:ae:ff:
         4a:13:fe:f7:2d:b8:52:1f:7f:96:07:ae:86:6b:db:67:f0:ba:
         d2:df:6f:82:cb:e1:77:e4:fe:d7:43:80:88:ff:3c:cd:db:e1:
         f0:c4:3c:c6:27:3d:15:12:3f:d4:3c:ae:c6:48:81:a8:ea:87:
         3d:3d:29:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+AqLy+mYZtppRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
YzRiMzQwNDAtZGI5YS00ZTYwLWIyZGItZTUzYzYyNTg1NTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMAIh16x/NJj9zts+cmqfI17pXQWc3DbecVQ
vja6CxCitW2/nvhEJW8mhXgkHwL4vdNecYvPMgIdf0lpkI7DXNrXVfVIkSzTJfyM
j9YhNSVs9BmqZ8wiYoc2gEPDZC5gERwcldxHxCcVOwmRCAOmGPsbIXoNsjorMGbC
f2IN+VZMzx1DJjh3wJS3ge2F9g6VLelL1Vw0ZXHqnpuFHtUFwOLne60WYictiH8Z
u9d8oFH6dzS0t1ygyoU5oV1KF57TTvdDwvNLpyfrleqdXFqMq4VTMC9UEu9NQO97
UfK5mrqq/QXFwsR955UWLZ8taD39N3sLU4V21ETCYZ+2cHmuEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMD2hc+qE4QkZ//RdNDQTlBZdDqsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDhjOTFhNDctMTYwZi0z
MTA5LTgzZjMtMWMwZGYwNjllMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgjprrjPgyDftbyWJgqHGp3he0ay4PxW4eOp3+jon8EWL+C3ji5WIne
AP30tXP0H2doA+dNY00KmWk2CweZpltLMCBE4lpLKMhNPM0IzlPJRJuPmkmvw7Iv
FRBGpXO6YUn0KOKa65fqUzlDTW1xjw3X35n+iL1bh+1mTsHIXFp0sum57XqAQZYw
K4QFwazRR3IduA9TTO5v6jePgUFvyjUuLBKwR1PehRZJdl/IHT787BLKoJ3maX4G
SeMSbw5EHmIlNnyu/0oT/vctuFIff5YHroZr22fwutLfb4LL4Xfk/tdDgIj/PM3b
4fDEPMYnPRUSP9Q8rsZIgajqhz09KSY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:19:00 2026 by rpki-client