Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fba53a4-e49b-3930-b583-72353db5e6aa.roa
File:                     0fba53a4-e49b-3930-b583-72353db5e6aa.roa (raw, json)
Hash identifier:          Ej8DJLyEBZMRk+fuLO95YTrp/M54i7NfrQ2ASRiH3sM=
Subject key identifier:   E4:F7:A7:0C:62:E5:78:7C:D2:A6:B3:CF:90:EC:AB:0B:3D:20:42:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043615725755FD3B26760100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fba53a4-e49b-3930-b583-72353db5e6aa.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        50.81.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:15:72:57:55:fd:3b:26:76:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=c7674760-f820-4d8f-89af-d7e62a1a3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:83:e0:e3:49:89:3d:74:a2:66:a3:17:e7:
                    a8:a3:b1:fb:49:49:07:c5:2f:59:8c:9f:e5:61:64:
                    bd:ac:48:2a:53:8c:8f:5f:80:91:e0:08:8e:93:4d:
                    b6:b7:2d:55:64:59:3b:dc:59:f4:40:b8:8f:ea:2b:
                    93:61:b9:d1:81:50:fe:d9:fd:cf:ea:4f:6b:97:62:
                    83:cf:1e:4d:30:60:ce:76:ee:ac:48:09:6b:d9:7b:
                    83:ca:61:13:2a:79:4a:4c:e5:c4:24:3f:7b:0f:7e:
                    8a:de:61:40:01:62:47:89:0d:9f:21:51:d8:d4:04:
                    97:c7:2e:a4:20:66:70:82:66:6d:e8:7e:58:c1:1d:
                    5b:80:5c:44:16:4a:8f:92:b1:22:ed:84:80:27:cd:
                    17:79:b5:72:59:d2:f5:31:40:09:98:9b:d1:81:47:
                    80:29:53:cc:83:21:81:5c:bd:d4:12:ad:d4:e6:56:
                    c2:a0:0f:b0:b1:ae:b1:ee:69:79:e4:55:20:08:6f:
                    b8:ec:e4:11:a3:c4:ea:98:60:ac:22:dc:f1:de:10:
                    7d:00:83:08:6e:84:d2:d5:4b:1e:f9:95:3b:dc:96:
                    4a:47:6b:fc:9a:2e:2b:3c:e3:a0:af:a2:42:e0:ba:
                    77:63:02:1c:6b:ff:41:ab:52:fb:d1:89:e4:15:d0:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:A7:0C:62:E5:78:7C:D2:A6:B3:CF:90:EC:AB:0B:3D:20:42:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fba53a4-e49b-3930-b583-72353db5e6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:87:cf:29:e0:88:b7:70:41:d1:c3:1f:61:aa:53:48:e8:48:
         f9:62:35:aa:6d:ab:6f:da:26:0b:17:87:b6:0f:35:cb:c3:1c:
         3a:1a:e7:00:00:64:6d:79:3b:08:6b:e4:1d:67:92:bf:16:77:
         48:a1:20:24:b6:e9:d5:e3:27:61:d4:06:ef:2d:6c:ee:ee:09:
         91:ff:01:cf:d0:74:60:3c:92:28:a5:18:61:72:dd:2e:40:84:
         74:c2:4d:db:d9:cb:f7:f9:b4:d8:79:62:c1:9e:6c:bb:14:4c:
         5d:c3:89:b0:a2:ae:ba:10:83:26:e2:26:eb:80:ca:89:ad:f0:
         15:a4:31:80:5e:9d:c1:18:4a:8a:e2:1d:0a:aa:9a:5c:53:f1:
         87:a4:57:40:8b:72:ce:e9:23:2a:6d:e4:d9:33:fe:d5:96:c9:
         81:f3:c5:63:67:09:16:a7:a4:0f:d0:fb:4f:32:b7:b2:0e:93:
         cf:e7:4f:40:0b:56:15:d2:a7:0f:74:4b:d5:2e:dc:ad:ec:49:
         43:71:2f:91:cb:fb:bf:b0:85:c3:2a:e2:77:7a:a2:0f:c7:11:
         9e:cf:da:f9:62:5b:27:30:8e:3f:0c:fa:a9:ea:10:47:68:0b:
         21:b7:e3:58:91:3c:86:ad:8e:85:3e:87:f9:e2:bd:c7:7d:bb:
         cd:ca:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:20:14 2026 by rpki-client