Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef42992-4e13-360d-a9bd-1ac1f78895d4.roa
File:                     1ef42992-4e13-360d-a9bd-1ac1f78895d4.roa (raw, json)
Hash identifier:          aPffcDyH+ZdV1MZ33L/XDAIhkoVVwh4ndfllXkH5Wgs=
Subject key identifier:   43:AA:B5:8F:1A:2C:53:0E:7E:5D:23:FD:70:CD:93:33:39:26:8F:11
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D585A75407352CD4BA200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef42992-4e13-360d-a9bd-1ac1f78895d4.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        50.83.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:58:5a:75:40:73:52:cd:4b:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d4b8e0dc-cacd-4ca8-87bf-b3c686fa6ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:2f:8b:81:fd:7f:59:74:62:19:cf:d6:9f:
                    b7:7b:41:c5:1d:15:7b:13:69:b5:99:d5:31:22:d0:
                    83:c3:8b:68:d8:a9:a8:4e:b6:b4:17:68:da:c1:68:
                    ed:ff:94:f4:06:0d:f6:89:56:4a:ee:0f:f2:e4:c5:
                    2a:f4:7b:1e:e7:17:2f:e4:5f:11:15:63:6b:05:9a:
                    3d:fc:bf:0c:30:44:e3:57:5e:b2:b9:b0:f3:72:29:
                    35:df:54:d0:70:2b:4b:34:49:1d:e1:4b:52:82:cb:
                    00:b8:ae:57:04:5e:e9:67:f0:73:8f:95:46:60:2b:
                    da:32:bb:74:c9:15:b6:60:a2:1a:5f:d8:52:d0:cf:
                    06:f7:c6:ff:d5:ee:98:02:bc:ba:c1:5f:e9:45:f6:
                    46:9e:fc:df:d9:7a:da:41:e2:73:81:a3:fc:00:d7:
                    1c:38:4c:7f:aa:68:09:0d:88:85:28:03:45:1e:85:
                    82:f0:23:13:a7:79:3e:d9:e2:76:3c:03:57:5d:be:
                    84:ef:46:bf:a1:2d:f9:c2:12:b3:80:fc:ce:25:53:
                    f8:3f:25:69:59:ab:70:0f:c2:2c:7d:70:13:05:1d:
                    32:6b:32:11:70:7b:06:db:2e:9f:c0:0e:b0:90:64:
                    aa:21:03:1b:e7:ad:8f:c8:2e:e2:9e:44:19:d7:44:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:B5:8F:1A:2C:53:0E:7E:5D:23:FD:70:CD:93:33:39:26:8F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef42992-4e13-360d-a9bd-1ac1f78895d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:81:35:b4:68:fc:2f:9c:c9:02:da:9a:dd:7b:96:73:9f:
         a1:f5:71:81:9d:f6:81:11:da:4f:6f:40:f1:0b:e2:f2:8f:db:
         a4:a8:40:4d:58:3b:28:16:f9:3c:41:7d:1e:a2:01:30:90:a2:
         59:02:df:96:e3:54:7f:ef:59:e6:e3:91:8c:8a:b8:47:62:7e:
         a3:a8:ab:f1:a5:60:df:d2:c3:ba:f7:a5:65:b9:d7:13:1f:91:
         98:02:d6:a3:dd:26:1d:7b:a8:5f:6e:d7:35:af:79:b6:0f:8d:
         d5:1b:a6:1b:07:26:d6:72:3c:42:8c:ab:e7:77:d5:5e:5f:b7:
         0b:19:b9:25:74:0d:08:0b:4c:73:d4:47:11:0c:93:4e:fc:8f:
         c6:87:c9:c8:8d:43:93:7a:79:0a:fd:0e:17:09:38:0d:26:48:
         47:2b:26:61:e7:33:f4:24:6c:14:32:77:e7:73:eb:82:07:b9:
         00:03:66:90:6e:9d:c6:0b:ba:17:d7:9d:d0:e2:e4:78:53:d4:
         a6:cf:2c:83:8f:05:bc:74:90:c4:a3:fc:73:57:3b:3f:b6:70:
         c5:b2:be:4d:42:4e:a3:a8:95:05:14:fe:19:92:82:04:d2:75:
         b5:ea:1e:69:72:33:76:dc:ce:1e:63:cc:bf:dd:ca:c2:ee:0a:
         76:88:ac:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVhadUBzUs1LogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZDRiOGUwZGMtY2FjZC00Y2E4LTg3YmYtYjNjNjg2ZmE2YWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdEvi4H9f1l0YhnP1p+3e0HFHRV7E2m1mdUx
ItCDw4to2KmoTra0F2jawWjt/5T0Bg32iVZK7g/y5MUq9Hse5xcv5F8RFWNrBZo9
/L8MMETjV16yubDzcik131TQcCtLNEkd4UtSgssAuK5XBF7pZ/Bzj5VGYCvaMrt0
yRW2YKIaX9hS0M8G98b/1e6YAry6wV/pRfZGnvzf2XraQeJzgaP8ANccOEx/qmgJ
DYiFKANFHoWC8CMTp3k+2eJ2PANXXb6E70a/oS35whKzgPzOJVP4PyVpWatwD8Is
fXATBR0yazIRcHsG2y6fwA6wkGSqIQMb562PyC7inkQZ10RRDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOqtY8aLFMOfl0j/XDNkzM5Jo8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWVmNDI5OTItNGUxMy0z
NjBkLWE5YmQtMWFjMWY3ODg5NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlNwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0RgTW0aPwvnMkC2prde5Zzn6H1cYGd9oER2k9vQPEL4vKP26SoQE1Y
OygW+TxBfR6iATCQolkC35bjVH/vWebjkYyKuEdifqOoq/GlYN/Sw7r3pWW51xMf
kZgC1qPdJh17qF9u1zWvebYPjdUbphsHJtZyPEKMq+d31V5ftwsZuSV0DQgLTHPU
RxEMk078j8aHyciNQ5N6eQr9DhcJOA0mSEcrJmHnM/QkbBQyd+dz64IHuQADZpBu
ncYLuhfXndDi5HhT1KbPLIOPBbx0kMSj/HNXOz+2cMWyvk1CTqOolQUU/hmSggTS
dbXqHmlyM3bczh5jzL/dysLuCnaIrEQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:57:30 2026 by rpki-client