Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa
File:                     d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa (raw, json)
Hash identifier:          FgyjoTZMOy57XyXUh56G8pXzyawXidonqa8W9BdAb+U=
Subject key identifier:   40:71:0B:27:3E:68:F8:36:9C:C0:F2:32:CB:1A:C0:6A:4D:2C:1B:A9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2379FF7BDED3F37DC875E710
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        50.82.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:ff:7b:de:d3:f3:7d:c8:75:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=196ff6e5-5de4-46d3-8bc5-f3b23e37a30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:52:75:a4:82:8b:b1:fa:6a:ef:09:56:5f:
                    cb:3c:62:b8:6d:c0:67:9b:11:5e:c2:da:ac:03:38:
                    8c:c5:65:05:dd:3e:42:62:fb:9f:fb:55:78:c4:88:
                    23:0a:06:a3:9f:22:6b:fa:4c:09:f8:77:92:57:29:
                    11:c5:a4:fd:27:de:28:61:de:ed:5b:ac:cc:fd:a5:
                    f7:0d:1f:00:6e:13:af:6f:14:a5:e5:d4:92:e1:5d:
                    b4:9c:40:01:22:9f:9d:29:21:2b:52:7a:22:3e:f3:
                    15:18:39:79:ad:81:9b:ca:f6:d9:66:95:43:9c:30:
                    0c:7e:2b:cb:e2:c3:ae:2e:e3:34:ec:1e:90:a0:15:
                    ec:cb:63:68:13:06:3d:c5:98:3a:36:61:49:69:97:
                    5d:38:a4:88:02:af:eb:c1:d4:0e:59:d6:74:d2:e2:
                    a0:93:51:cc:46:c6:10:d9:5e:8b:31:f2:1f:7a:60:
                    50:e0:42:94:18:4b:58:4b:25:83:f5:c6:33:cc:84:
                    2a:41:56:04:95:87:fb:71:4c:a0:4d:2e:b4:15:3b:
                    6b:14:0c:45:fb:4a:03:4e:a8:63:36:eb:6f:c6:b2:
                    49:95:25:b7:9f:7c:0e:d1:4b:9b:c2:79:8c:77:de:
                    c2:91:f5:6e:7b:a6:c6:21:0d:a9:ff:04:a6:a1:45:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:71:0B:27:3E:68:F8:36:9C:C0:F2:32:CB:1A:C0:6A:4D:2C:1B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9a7cda7-ad13-3f4c-8fe0-a2508a0966e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:a4:45:55:98:78:fd:fe:d8:e6:b2:1d:cd:d4:66:03:48:
         5f:85:ee:95:b9:d4:9d:e9:8b:d4:77:b9:fe:67:d8:5d:dd:6e:
         33:a0:c2:fa:e8:9b:a1:3e:61:b9:b4:d9:5d:0f:3d:c3:45:c7:
         88:89:47:69:a2:23:08:35:95:38:8c:6b:3e:f0:e0:ec:74:e9:
         ed:bc:e4:49:69:f9:e9:d5:32:ed:b3:64:7b:16:2c:55:1c:0b:
         d2:73:3c:61:b8:b6:44:b9:75:cf:42:83:67:78:53:8f:61:d6:
         15:37:b5:21:b9:b4:31:0a:cc:58:45:26:6e:69:37:b5:c2:61:
         7a:d2:13:38:20:12:73:5d:30:86:b5:2f:c8:93:b3:08:63:c1:
         15:9f:97:66:ad:25:5d:35:77:00:5b:81:59:35:c7:e4:24:89:
         ce:be:7c:76:7a:4e:19:1e:d1:64:3e:4b:05:31:4d:59:3f:f3:
         fb:b1:4e:31:42:f2:ef:60:19:60:c7:dd:9c:11:6a:07:a2:56:
         65:35:58:74:ba:d3:ee:4a:f6:74:fd:63:75:5f:a1:14:74:9a:
         0a:f6:17:47:dd:4d:be:ff:c3:95:07:05:71:24:cb:2d:34:a4:
         59:32:2a:d7:03:ee:c1:82:f6:96:cb:4e:f1:83:93:df:6d:a8:
         c9:d9:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:37 2026 by rpki-client