Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a2aa47a-dedf-331b-b04f-f29472faa66e.roa
File:                     2a2aa47a-dedf-331b-b04f-f29472faa66e.roa (raw, json)
Hash identifier:          9kXQbbu0gm34XSZJNQh6QCx+AXh+T7aCymLhGDXWj0E=
Subject key identifier:   17:DF:B3:98:A1:25:B2:26:EC:90:7A:ED:65:84:0A:56:BD:BE:4F:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F119CE2C0655350EECE0B3100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a2aa47a-dedf-331b-b04f-f29472faa66e.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.82.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e2:c0:65:53:50:ee:ce:0b:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b2cff3d3-956c-4b08-bf97-7271f8c64a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:f3:a2:83:a7:64:ff:f3:97:bf:34:0b:1c:
                    17:d3:14:ff:02:fb:f6:a2:90:a3:27:51:73:08:1b:
                    01:28:34:e2:8f:11:89:e5:6c:b4:b9:d6:fa:69:5a:
                    16:97:bd:4d:fb:e8:1d:bc:fa:69:80:74:11:e0:b8:
                    77:32:69:b0:0b:c9:f5:89:2e:7e:a2:ee:86:77:cd:
                    76:52:ea:b5:8e:80:88:cc:53:2d:ca:97:e9:cb:4e:
                    90:4e:96:76:97:15:df:9b:22:65:c0:c1:23:ee:26:
                    0a:5a:e6:d6:ff:0d:4a:6d:b7:0c:57:30:bd:7d:51:
                    2c:2f:c2:10:e5:1e:b8:52:d8:6e:b8:c8:c4:cf:7e:
                    30:a2:9f:5f:83:7e:94:87:b8:af:41:17:ec:80:a9:
                    a8:b0:5b:a5:49:de:39:b5:3f:8b:e8:99:f4:b2:40:
                    ba:b1:41:13:04:2b:a4:02:8e:b4:ab:64:03:a4:eb:
                    db:60:c7:ef:33:1a:41:9f:81:8b:c9:07:d7:6b:d1:
                    67:17:76:be:67:83:d7:a7:01:9b:f3:6a:2e:c0:93:
                    28:53:d9:2b:cc:b1:3f:c0:b7:1e:62:6c:11:23:09:
                    26:3b:08:98:84:03:cc:b1:63:78:40:0e:79:dd:23:
                    32:32:36:29:16:97:6c:8c:b2:56:0a:1a:89:21:3e:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DF:B3:98:A1:25:B2:26:EC:90:7A:ED:65:84:0A:56:BD:BE:4F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a2aa47a-dedf-331b-b04f-f29472faa66e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:e9:84:b7:cc:01:fc:5c:05:96:26:9d:b5:43:70:ae:05:
         74:69:7f:7a:4f:12:88:30:c4:75:25:da:24:f2:6e:0f:50:7d:
         f2:7a:8c:de:ec:0f:47:ee:b7:ce:01:02:93:d9:e6:c3:f6:f2:
         44:40:31:3d:9e:55:07:ec:d6:cf:de:f4:6a:31:ba:c5:9b:c0:
         55:77:a0:d1:19:c0:eb:9a:e3:b2:5e:e4:d2:67:df:88:f9:4e:
         21:98:91:17:09:d1:34:94:85:32:8f:9b:e2:09:e7:69:c5:fd:
         43:fa:c8:07:15:8d:7e:79:86:a0:38:02:83:e8:f7:84:a4:f1:
         8f:eb:ec:c3:36:21:84:be:3b:98:2f:37:de:78:86:a1:b9:4a:
         c0:86:51:13:c4:8f:bc:6c:15:31:38:6e:e7:08:7e:55:75:6e:
         98:95:0b:c7:ae:2d:cb:f8:d4:72:79:d3:93:49:a0:d9:31:77:
         21:21:5f:a7:a6:56:6c:1a:b0:fb:71:4b:50:f5:52:5b:18:64:
         ab:a9:e9:66:37:73:c4:ec:21:c1:87:ba:33:d9:cf:45:cc:08:
         4d:25:12:5a:a5:59:c9:a0:9e:be:cf:05:7a:07:1c:fd:42:b3:
         fd:89:fe:01:be:1a:7c:22:ea:05:04:11:59:0c:61:bb:ef:28:
         a2:1d:89:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOLAZVNQ7s4LMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjJjZmYzZDMtOTU2Yy00YjA4LWJmOTctNzI3MWY4YzY0YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipDzooOnZP/zl780CxwX0xT/Avv2opCjJ1Fz
CBsBKDTijxGJ5Wy0udb6aVoWl71N++gdvPppgHQR4Lh3MmmwC8n1iS5+ou6Gd812
Uuq1joCIzFMtypfpy06QTpZ2lxXfmyJlwMEj7iYKWubW/w1KbbcMVzC9fVEsL8IQ
5R64UthuuMjEz34wop9fg36Uh7ivQRfsgKmosFulSd45tT+L6Jn0skC6sUETBCuk
Ao60q2QDpOvbYMfvMxpBn4GLyQfXa9FnF3a+Z4PXpwGb82ouwJMoU9krzLE/wLce
YmwRIwkmOwiYhAPMsWN4QA553SMyMjYpFpdsjLJWChqJIT4/XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBffs5ihJbIm7JB67WWECla9vk8JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmEyYWE0N2EtZGVkZi0z
MzFiLWIwNGYtZjI5NDcyZmFhNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlJoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5+6YS3zAH8XAWWJp21Q3CuBXRpf3pPEogwxHUl2iTybg9QffJ6jN7s
D0fut84BApPZ5sP28kRAMT2eVQfs1s/e9GoxusWbwFV3oNEZwOua47Je5NJn34j5
TiGYkRcJ0TSUhTKPm+IJ52nF/UP6yAcVjX55hqA4AoPo94Sk8Y/r7MM2IYS+O5gv
N954hqG5SsCGURPEj7xsFTE4bucIflV1bpiVC8euLcv41HJ505NJoNkxdyEhX6em
VmwasPtxS1D1UlsYZKup6WY3c8TsIcGHujPZz0XMCE0lElqlWcmgnr7PBXoHHP1C
s/2J/gG+Gnwi6gUEEVkMYbvvKKIdiSk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:29:07 2026 by rpki-client