Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa
File:                     da07970b-00e7-351b-b5b0-2af37eb91af3.roa (raw, json)
Hash identifier:          cwqPLLZJcosUJr8O2LFjd9ulXNkZHkUOsZyNO4PZ7pI=
Subject key identifier:   C9:60:BD:BF:30:E5:67:14:A2:95:AE:20:F8:C0:F6:5D:4A:EB:7D:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE783BAA268207A702A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        50.80.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e7:83:ba:a2:68:20:7a:70:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=c079dabe-8940-4d41-8e7f-7f4f2c51191f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:82:2d:31:aa:f4:ee:0b:fc:67:1c:5e:a9:
                    02:81:46:7c:27:06:33:f0:91:c3:b6:de:32:d2:1b:
                    8a:33:37:d4:31:74:96:67:ec:ae:72:ca:90:95:2a:
                    64:18:27:fd:ee:6b:d3:a1:06:7d:cf:9a:a7:8d:f4:
                    ca:94:74:2b:a1:3d:e8:0d:c0:97:fa:ae:bc:ea:4a:
                    f2:68:5e:21:e4:cf:70:be:0f:2c:ea:32:8c:20:67:
                    54:17:d6:86:56:a7:a1:ad:ef:9b:b8:41:e0:a2:c9:
                    0b:7a:4a:50:c7:90:b3:2c:5c:d6:fa:ad:cd:ff:9e:
                    38:71:a5:25:0e:f6:72:71:5d:e2:25:9b:67:a3:30:
                    95:e7:bb:c1:ab:bd:ef:92:49:52:00:05:b5:bb:7b:
                    98:8e:c0:2f:6b:5f:5f:42:a8:3d:ed:d5:7f:a8:14:
                    70:6a:9b:98:72:8f:04:01:ab:c9:57:04:7b:d1:6f:
                    63:f5:7e:a5:bc:e0:6c:78:f2:07:7b:c2:cb:fa:cb:
                    2e:7b:ee:7c:aa:8f:86:48:72:ae:d9:a4:c6:39:47:
                    d2:d4:72:35:09:a6:52:d7:3b:d0:54:8c:cd:ac:10:
                    71:e7:17:ad:d7:2e:61:d4:66:7e:8a:66:07:05:d5:
                    35:1f:81:51:78:65:7b:ec:a2:08:ce:8a:8a:e5:48:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:BD:BF:30:E5:67:14:A2:95:AE:20:F8:C0:F6:5D:4A:EB:7D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da07970b-00e7-351b-b5b0-2af37eb91af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:ff:df:88:c0:4c:13:0f:3c:1a:91:b5:c5:6c:a0:45:25:
         8f:3b:2a:c6:bb:25:94:80:78:b1:8e:e0:56:05:a3:30:d3:da:
         df:62:61:55:45:e6:f1:85:5a:16:e7:cf:d8:62:99:69:22:e3:
         63:66:f9:60:c5:b7:0d:68:f0:8a:6f:8a:80:9d:61:f8:af:56:
         f5:fd:5d:3c:0d:b2:ab:a2:71:7e:9e:a8:54:56:bd:53:41:30:
         cf:c6:ba:76:87:18:fa:c5:12:d6:fe:e6:82:9e:d2:93:e3:42:
         db:bf:1f:96:2a:01:44:ed:bd:58:e2:e2:56:94:21:b8:4c:26:
         59:e5:43:c9:05:c3:8c:17:11:51:84:5c:31:e9:1a:10:aa:a2:
         7a:12:bb:65:55:78:4d:a4:fe:90:38:c2:83:2b:bc:0e:1c:de:
         6b:37:6b:18:91:33:59:21:48:d3:81:12:3c:4f:b9:8c:2f:29:
         c7:72:ab:bb:fb:02:ec:f9:af:55:a6:16:e3:a4:de:9b:25:f2:
         41:bd:3f:6c:da:e8:c4:a1:d7:98:4a:17:f6:12:18:67:36:0c:
         9d:d5:51:50:c3:d1:2c:82:a7:91:c2:24:0a:7f:5c:44:fb:6c:
         5b:b0:d9:e3:6d:37:60:df:1a:93:56:7c:20:07:78:6c:75:bc:
         4d:8d:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:42:00 2026 by rpki-client