Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053a25bf-26f7-3889-8603-0b1e73030cdc.roa
File:                     053a25bf-26f7-3889-8603-0b1e73030cdc.roa (raw, json)
Hash identifier:          e0jnY4Otrj/ChMysL47M+9e0BqwvtfGgU00tAW1spJo=
Subject key identifier:   A7:9E:6D:94:A2:7D:EF:2F:EC:48:2D:AE:D9:CD:D3:8B:7B:9D:F0:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B993972F3FAA47DE9CF2A6282
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053a25bf-26f7-3889-8603-0b1e73030cdc.roa
Signing time:             Tue 21 Oct 2025 19:42:08 +0000
ROA not before:           Tue 21 Oct 2025 19:42:08 +0000
ROA not after:            Mon 19 Jan 2026 20:42:08 +0000
asID:                     30036
IP address blocks:        50.81.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:39:72:f3:fa:a4:7d:e9:cf:2a:62:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 21 19:42:08 2025 GMT
            Not After : Jan 19 20:42:08 2026 GMT
        Subject: CN=7d74e7fe-1510-4dab-bec4-30eaa735ff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:58:64:26:5c:42:d8:62:53:e5:0d:0f:11:
                    46:1b:7c:1c:6c:bf:66:ec:e9:0c:39:79:79:5b:46:
                    18:c6:24:4c:6f:fb:63:cc:36:ee:10:61:58:a9:75:
                    75:5d:25:1c:5f:08:59:2d:67:7e:9c:78:ff:8e:f0:
                    af:87:7a:81:8a:95:ac:bc:26:c7:9a:9d:e7:ad:23:
                    1d:64:3f:58:1b:84:d5:27:b7:84:3e:dd:57:1a:e9:
                    14:56:1f:92:7e:9f:fe:22:92:1b:b8:0d:54:f1:e3:
                    6b:63:6b:32:fd:87:c8:3d:85:1c:1c:cd:8c:c6:af:
                    eb:8c:96:04:d7:37:1a:06:21:2c:27:bd:ea:0b:cd:
                    2e:38:bf:a7:26:2e:ee:c8:81:3e:ac:a8:ab:c4:ea:
                    d6:bf:bf:c3:56:bf:e6:23:1c:b7:77:d2:35:aa:95:
                    7d:ba:12:35:ae:50:86:dd:7c:2a:36:12:4b:27:de:
                    7f:89:ff:d8:31:cf:8c:33:a7:29:b0:eb:7c:5e:38:
                    32:58:98:2f:af:35:1f:5d:b6:b5:4a:4f:87:40:dc:
                    1c:19:36:1c:0a:ae:30:65:e9:1f:fd:c6:cd:a3:0d:
                    e9:ec:f1:a9:4b:5d:56:9b:8b:60:c7:bb:0d:d3:fd:
                    4f:1d:96:6b:db:d1:da:85:fe:b8:86:fc:e8:64:e8:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:6D:94:A2:7D:EF:2F:EC:48:2D:AE:D9:CD:D3:8B:7B:9D:F0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053a25bf-26f7-3889-8603-0b1e73030cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:54:37:7e:95:63:ab:18:7e:85:88:8b:5d:46:00:a5:1d:
         0f:df:a5:2b:26:17:3b:24:5a:2d:52:70:90:99:21:aa:5e:39:
         df:17:64:21:d9:7e:8f:2d:67:32:b3:2d:d6:58:c2:11:1e:71:
         30:42:38:21:dd:32:f9:78:dc:c2:e5:e6:95:98:c6:5c:c2:0b:
         e7:cc:99:76:d0:b9:a4:00:bd:87:79:40:29:be:28:e3:19:c2:
         76:fc:ff:2e:a5:26:1a:d5:31:46:30:88:de:9e:67:7b:7e:f4:
         a9:e9:9c:ad:ef:0b:e5:68:4b:fc:26:71:a8:c8:11:e1:f6:a3:
         f4:ba:23:12:69:1c:52:35:a7:1b:78:d1:7a:01:30:c9:37:e5:
         df:d5:f7:58:c7:63:87:24:5d:87:02:34:db:80:d4:7a:6d:40:
         45:78:94:c8:a7:c9:56:cf:a9:af:9e:24:f0:fb:aa:e9:76:02:
         7c:f1:d7:1b:98:db:4f:a7:bf:52:15:89:ac:a2:42:67:01:71:
         27:be:ce:cb:d9:7a:fb:df:bf:b4:99:d2:fe:b1:48:a5:8a:e5:
         6f:3c:fd:b6:40:b6:8a:bc:1d:07:c8:91:b8:06:8b:60:74:f8:
         06:64:27:18:63:f2:91:8d:52:27:30:92:f9:35:7f:1d:6e:8e:
         68:de:86:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZOXLz+qR96c8qYoIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAyMTE5NDIwOFoXDTI2MDExOTIwNDIwOFowLzEtMCsGA1UEAxMk
N2Q3NGU3ZmUtMTUxMC00ZGFiLWJlYzQtMzBlYWE3MzVmZjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJYZCZcQthiU+UNDxFGG3wcbL9m7OkMOXl5
W0YYxiRMb/tjzDbuEGFYqXV1XSUcXwhZLWd+nHj/jvCvh3qBipWsvCbHmp3nrSMd
ZD9YG4TVJ7eEPt1XGukUVh+Sfp/+IpIbuA1U8eNrY2sy/YfIPYUcHM2Mxq/rjJYE
1zcaBiEsJ73qC80uOL+nJi7uyIE+rKirxOrWv7/DVr/mIxy3d9I1qpV9uhI1rlCG
3XwqNhJLJ95/if/YMc+MM6cpsOt8XjgyWJgvrzUfXba1Sk+HQNwcGTYcCq4wZekf
/cbNow3p7PGpS11Wm4tgx7sN0/1PHZZr29Hahf64hvzoZOj9/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKeebZSife8v7EgtrtnN04t7nfD6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDUzYTI1YmYtMjZmNy0z
ODg5LTg2MDMtMGIxZTczMDMwY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlEsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+cVDd+lWOrGH6FiItdRgClHQ/fpSsmFzskWi1ScJCZIapeOd8XZCHZ
fo8tZzKzLdZYwhEecTBCOCHdMvl43MLl5pWYxlzCC+fMmXbQuaQAvYd5QCm+KOMZ
wnb8/y6lJhrVMUYwiN6eZ3t+9KnpnK3vC+VoS/wmcajIEeH2o/S6IxJpHFI1pxt4
0XoBMMk35d/V91jHY4ckXYcCNNuA1HptQEV4lMinyVbPqa+eJPD7qul2Anzx1xuY
20+nv1IViayiQmcBcSe+zsvZevvfv7SZ0v6xSKWK5W88/bZAtoq8HQfIkbgGi2B0
+AZkJxhj8pGNUicwkvk1fx1ujmjehio=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:28:06 2025 by rpki-client