Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef606b92-dc36-3067-8f50-94b26e59f6c0.roa
File:                     ef606b92-dc36-3067-8f50-94b26e59f6c0.roa (raw, json)
Hash identifier:          H7Jl3MeIns/ebBXrxK1L5J9qSLUKlXgdhjDmCGtcyPk=
Subject key identifier:   DD:C7:A7:B9:95:DB:46:E5:A4:8F:D3:B4:9E:D1:3B:01:70:26:53:67
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D4FD61E61C015ACB32940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef606b92-dc36-3067-8f50-94b26e59f6c0.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        50.82.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4f:d6:1e:61:c0:15:ac:b3:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=f71c6349-ae8e-49b2-b85e-0342729a8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:39:c2:f3:ba:f4:50:86:7b:7f:d8:5e:a1:
                    ba:fc:8d:6c:34:1f:24:ba:0e:88:72:91:9f:9e:c7:
                    1a:e2:48:1d:86:d9:b0:b9:7f:c7:47:7f:77:5e:df:
                    5a:41:19:c1:71:de:9f:93:9c:44:a7:f9:6f:ef:ed:
                    00:b4:0b:9e:4e:10:24:ad:b5:ba:06:ff:95:21:e0:
                    61:cf:09:23:69:f2:22:45:36:0a:7c:5e:1f:87:e1:
                    47:e2:ba:d0:3a:5d:9e:7c:d2:3e:4b:31:ad:bb:a4:
                    c1:64:7b:8a:3e:5c:0b:ce:4e:59:d5:7f:67:12:d6:
                    c4:e7:31:3a:f8:bb:de:c9:13:f3:88:fe:66:21:eb:
                    e9:88:24:23:f4:07:c1:ba:f4:0a:88:28:c6:5c:c8:
                    f5:22:95:40:ce:e5:d3:40:33:46:e7:dc:47:56:42:
                    1f:60:6f:9e:eb:1d:36:3e:a8:19:72:5e:cb:01:6c:
                    ad:c2:ab:4a:ab:9d:a1:73:b8:91:7c:5d:12:c3:6d:
                    ec:3e:5d:c5:39:e7:bd:97:9b:39:60:e9:f3:6f:d5:
                    8a:47:84:ad:7a:93:e8:96:9b:24:f4:2d:75:75:96:
                    51:c1:57:f0:70:45:8f:a0:61:c7:ff:f7:a4:31:09:
                    4b:21:c9:20:6d:ed:6a:b9:8a:76:b7:24:50:07:87:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:A7:B9:95:DB:46:E5:A4:8F:D3:B4:9E:D1:3B:01:70:26:53:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef606b92-dc36-3067-8f50-94b26e59f6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8a:1d:e7:47:06:be:0c:6f:36:5d:21:98:3e:25:bd:fd:9d:
         3f:80:b4:c5:24:bf:2a:bf:7c:8e:96:3b:ca:ec:92:48:8d:fc:
         5c:3b:58:32:e2:8c:db:81:19:5a:11:80:ed:95:09:0a:42:81:
         78:7b:dc:17:d3:01:16:c0:a6:4c:cc:c1:d6:2b:42:fa:87:5a:
         4e:a1:2a:41:d1:b4:ce:98:bd:99:31:23:7c:9e:57:20:4f:dc:
         a0:4e:d5:f2:13:16:9e:7d:b3:3f:d5:40:b8:3c:3a:5b:a3:45:
         59:95:62:1f:75:54:31:da:92:2b:f5:ac:56:34:01:e4:6a:c9:
         a4:c5:c3:86:39:17:7f:b9:2d:95:13:90:03:0b:60:50:e6:c5:
         93:b7:0c:00:2f:ab:e8:77:95:74:3e:13:29:fb:fd:9c:45:27:
         43:d2:d5:7e:bf:fc:4c:7a:a7:d5:60:96:cf:be:6b:33:48:b3:
         75:1f:16:86:14:47:b5:91:b7:74:87:44:cd:f9:c3:b0:b5:31:
         9b:28:ab:ce:6a:45:e0:91:4a:29:df:57:83:41:fa:1b:41:a4:
         cd:c4:13:4a:f8:4d:72:c6:17:1a:1a:2e:e4:39:bf:39:8a:b4:
         18:9c:a8:db:c3:80:72:e1:9d:29:a1:69:6f:90:ab:4c:47:94:
         e7:f6:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:04:35 2026 by rpki-client