Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfbf31-de41-3c9a-b315-96da9b57bb99.roa
File:                     eddfbf31-de41-3c9a-b315-96da9b57bb99.roa (raw, json)
Hash identifier:          Ktzm3gTNJFKzvj0ASRMXXmszP5oK0smE6naRE1nPSzg=
Subject key identifier:   BE:E2:45:7C:A5:3A:58:04:06:89:7E:9C:D2:7F:31:D4:1B:BE:87:C4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10A68214FC366F7F46C2A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfbf31-de41-3c9a-b315-96da9b57bb99.roa
Signing time:             Fri 01 May 2026 18:00:37 +0000
ROA not before:           Fri 01 May 2026 18:00:37 +0000
ROA not after:            Thu 30 Jul 2026 18:00:37 +0000
asID:                     19905
IP address blocks:        50.80.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0a:68:21:4f:c3:66:f7:f4:6c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:00:37 2026 GMT
            Not After : Jul 30 18:00:37 2026 GMT
        Subject: CN=a81a6463-94ec-4b5b-b9db-32685174f99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:9f:3a:d1:b0:6a:0d:03:6a:16:e1:a7:a0:
                    42:cc:ab:65:7c:bc:c2:22:ce:d4:80:39:32:bd:92:
                    66:5d:3a:6b:d9:7c:9c:4d:5a:2b:98:0e:69:01:a4:
                    40:07:1e:a0:c9:b3:4c:00:bb:4e:0e:01:4d:e7:ca:
                    b7:5c:12:24:1d:c8:53:2b:79:a1:16:c2:d4:cd:0c:
                    f3:50:16:c0:55:62:6f:3f:22:fd:53:9d:ae:d0:fe:
                    90:e4:a3:35:33:8a:ef:fc:cc:d4:54:8c:aa:81:8d:
                    b7:ca:66:ea:f8:2d:c7:ae:60:b5:c1:14:d7:ac:bf:
                    5b:ce:97:2b:98:9d:96:e0:66:2c:36:3b:f9:72:a9:
                    f3:06:25:8d:1e:9c:0e:de:07:c9:83:78:50:aa:0d:
                    92:8d:0e:74:41:bd:cb:84:ec:3c:6d:bd:d5:91:48:
                    8b:5f:44:67:2b:3b:a7:ff:c7:29:ac:3d:1c:47:ad:
                    86:ac:bf:2d:9c:0b:97:86:46:1e:4c:cb:37:78:58:
                    b4:1f:43:0a:c2:d5:4c:83:87:3c:68:c6:9f:31:eb:
                    4d:27:0a:b7:cc:57:d9:34:32:cb:3b:92:72:de:33:
                    f5:16:d2:f1:db:bf:4c:e6:68:87:f1:13:1b:bb:51:
                    a1:64:da:f0:54:64:b1:cc:21:72:e9:3f:58:1f:1a:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:45:7C:A5:3A:58:04:06:89:7E:9C:D2:7F:31:D4:1B:BE:87:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfbf31-de41-3c9a-b315-96da9b57bb99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:32:ad:72:d3:0e:f6:59:6a:6c:f0:09:98:07:36:46:d5:
         2d:6a:7d:ee:ce:28:10:a7:da:5e:2b:58:86:2d:8b:ae:f1:94:
         20:64:fb:3a:e6:6f:bf:37:e4:9a:97:a3:d1:b9:de:6c:4b:ba:
         f7:9b:0f:26:d4:4e:89:0c:dd:c9:dd:8b:50:f9:2a:6c:b1:27:
         bb:fb:21:87:a5:72:8d:78:12:26:04:6b:bd:64:b1:79:8e:e4:
         bd:6a:67:b3:27:17:ca:e3:d1:61:1e:ad:c6:4b:36:85:07:09:
         57:63:10:43:30:0b:e7:12:6b:bf:bb:da:96:7e:11:63:00:b3:
         d5:6c:bc:96:ca:e0:50:14:82:4c:86:97:fa:b3:95:7e:a3:cf:
         4e:b8:eb:88:ca:7e:17:3a:b1:02:98:61:d1:52:17:0c:3d:24:
         27:88:43:69:9e:1d:3e:1c:9f:39:41:90:d5:bd:7d:eb:2d:88:
         02:89:78:2c:74:fe:b4:01:a7:fd:d6:d5:bb:68:90:f0:b3:9f:
         2e:b0:04:5d:9c:71:6d:4f:1f:02:c8:6b:7e:74:26:da:15:c6:
         73:53:be:ea:a2:89:03:49:8c:c5:bf:2b:f1:eb:70:57:07:4e:
         9c:ab:bf:8c:a1:06:f3:9a:e6:58:90:b5:4d:8b:2c:41:da:73:
         8e:d6:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:05 2026 by rpki-client