Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dda8f5e0-cf94-385c-a30c-c4d5c4968c14.roa
File:                     dda8f5e0-cf94-385c-a30c-c4d5c4968c14.roa (raw, json)
Hash identifier:          a3fyzoqUTTinHMHmDtY3fOucB8ERFhK41aVBKxtnRHc=
Subject key identifier:   FB:B7:15:AB:4E:CC:B7:61:8B:16:E9:05:73:AF:18:7E:6A:5A:45:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A2221BC49904C646691A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dda8f5e0-cf94-385c-a30c-c4d5c4968c14.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        50.81.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:22:21:bc:49:90:4c:64:66:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=95b18a5c-8a58-4430-9fc4-9d0cb8755bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:ec:c6:5d:c3:6e:ac:8c:2f:e6:7a:0e:f7:
                    94:8d:19:aa:7d:f7:65:66:26:e7:11:a4:43:07:33:
                    15:5e:fa:b8:54:bb:ba:36:b5:8a:cf:79:a5:f7:4c:
                    22:ae:02:e2:94:ae:12:c8:25:2a:e0:38:73:de:0b:
                    b2:04:c3:f7:99:5f:5d:bb:0d:8a:f6:4e:c7:40:1d:
                    5d:90:dc:29:e4:8a:0a:7e:07:38:d2:72:07:12:23:
                    bd:42:c0:68:a0:f2:14:de:71:2b:11:1a:f8:b4:af:
                    21:20:fc:d0:c8:41:47:a1:61:20:0c:55:71:d2:b4:
                    91:33:92:05:e5:e4:29:2b:86:89:50:3e:ab:a9:19:
                    64:e3:1c:20:da:3b:c9:0c:af:84:2a:40:97:dd:77:
                    08:42:ef:42:8a:c3:e6:18:4a:5c:5e:96:05:4e:7b:
                    6a:c5:1b:31:2d:e5:86:35:07:a1:a7:6d:24:26:7d:
                    34:b4:74:ac:fc:df:9e:e8:9b:9b:ef:ea:be:04:b5:
                    c1:fb:1c:9d:37:21:ab:b5:e9:e6:d8:10:67:ec:11:
                    18:a0:52:e4:08:e7:d3:4e:3b:94:c5:aa:28:94:d0:
                    37:33:51:0c:c8:ce:d3:a8:0d:b1:16:45:7e:29:33:
                    0e:51:40:a3:49:a9:7f:84:c7:88:17:99:43:f4:ab:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:15:AB:4E:CC:B7:61:8B:16:E9:05:73:AF:18:7E:6A:5A:45:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dda8f5e0-cf94-385c-a30c-c4d5c4968c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:7b:2a:5f:94:ac:6c:61:c6:96:30:79:f9:e3:c8:e3:dd:
         76:57:b2:06:bc:f2:b3:f0:2e:dc:c3:f4:87:a6:96:c6:b3:63:
         66:97:b2:fc:6e:9c:84:a8:65:dd:13:b6:42:ac:ea:66:40:15:
         59:39:8d:16:51:a9:b3:c4:18:1b:4e:32:a5:fa:5a:4a:cf:18:
         75:1c:0e:07:a9:53:9a:b8:68:d5:79:ac:78:41:a1:2a:d1:b6:
         ae:a2:12:16:00:61:be:d8:6f:d4:be:cf:f9:f7:7d:56:7d:b0:
         70:9f:99:b2:ac:bb:85:af:21:6c:e1:78:54:bb:b5:ce:22:b5:
         8c:08:77:2a:00:44:23:01:19:71:ca:fc:99:e1:8f:51:d4:b6:
         1e:37:ff:57:ff:72:84:fa:d2:89:d8:c2:f4:49:86:03:98:fc:
         9d:5d:97:d8:73:7b:c0:e8:c4:81:9c:59:09:ac:4f:24:29:d5:
         34:34:59:6c:02:ee:3f:0f:1c:ee:7c:d7:c5:f0:8c:82:36:cf:
         09:dc:0f:00:59:4a:bd:10:0b:4d:eb:2c:fa:44:33:ce:92:b1:
         f2:4e:bd:fa:2b:6f:20:e9:e0:24:7b:e5:27:51:8e:77:99:d4:
         64:81:0a:2f:5c:ad:57:26:4d:2c:56:ab:31:08:10:ad:37:92:
         71:3f:e8:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiIhvEmQTGRmkaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
OTViMThhNWMtOGE1OC00NDMwLTlmYzQtOWQwY2I4NzU1YmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrsxl3DbqyML+Z6DveUjRmqffdlZibnEaRD
BzMVXvq4VLu6NrWKz3ml90wirgLilK4SyCUq4Dhz3guyBMP3mV9duw2K9k7HQB1d
kNwp5IoKfgc40nIHEiO9QsBooPIU3nErERr4tK8hIPzQyEFHoWEgDFVx0rSRM5IF
5eQpK4aJUD6rqRlk4xwg2jvJDK+EKkCX3XcIQu9CisPmGEpcXpYFTntqxRsxLeWG
NQehp20kJn00tHSs/N+e6Jub7+q+BLXB+xydNyGrtenm2BBn7BEYoFLkCOfTTjuU
xaoolNA3M1EMyM7TqA2xFkV+KTMOUUCjSal/hMeIF5lD9KsOQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPu3FatOzLdhixbpBXOvGH5qWkVoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRhOGY1ZTAtY2Y5NC0z
ODVjLWEzMGMtYzRkNWM0OTY4YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlGuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrEeypflKxsYcaWMHn548jj3XZXsga88rPwLtzD9IemlsazY2aXsvxu
nISoZd0TtkKs6mZAFVk5jRZRqbPEGBtOMqX6WkrPGHUcDgepU5q4aNV5rHhBoSrR
tq6iEhYAYb7Yb9S+z/n3fVZ9sHCfmbKsu4WvIWzheFS7tc4itYwIdyoARCMBGXHK
/Jnhj1HUth43/1f/coT60onYwvRJhgOY/J1dl9hze8DoxIGcWQmsTyQp1TQ0WWwC
7j8PHO5818XwjII2zwncDwBZSr0QC03rLPpEM86SsfJOvforbyDp4CR75SdRjneZ
1GSBCi9crVcmTSxWqzEIEK03knE/6NI=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:42:55 2026 by rpki-client