Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa
File:                     2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa (raw, json)
Hash identifier:          pvlUzifEfpByIYFkXWMhUDpyTcGvfzKi6k8qNoMqK7Q=
Subject key identifier:   36:3A:1B:86:DB:45:3D:C7:B8:2E:06:61:41:65:0E:1C:07:B3:59:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C45A820878846E2885B845F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        50.81.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:20:87:88:46:e2:88:5b:84:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=94f55368-b4f9-46ee-89d5-177122edfcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:93:fe:70:b3:00:6f:e6:6c:50:a0:36:b9:
                    e0:fb:0c:ca:09:87:f1:47:db:4a:c0:78:82:71:6c:
                    0b:f0:b0:61:ef:02:2c:d4:c3:f8:2b:61:b3:ec:09:
                    25:47:8f:e5:fe:af:3d:42:27:b6:83:e4:09:e6:dc:
                    22:7d:8b:6d:a0:8f:38:69:b6:fb:09:a4:2b:a0:3c:
                    63:79:c0:c3:3a:10:b8:60:e6:b7:43:07:ac:7f:a1:
                    cf:fe:39:25:db:a1:6e:91:72:18:85:0f:c8:67:63:
                    12:a5:4a:5d:b6:29:08:a0:15:10:54:6b:7c:a9:de:
                    99:b6:68:ac:0c:3a:ba:e0:9a:6c:2d:0e:b8:fb:95:
                    71:45:d3:ff:86:a1:81:d1:c7:e0:9f:28:a0:5d:ac:
                    a3:3a:6f:e0:ee:98:11:13:c0:5f:f3:a2:69:42:e0:
                    bf:ee:88:57:43:7c:5f:2d:09:fe:91:b6:12:d5:66:
                    cf:4e:e2:5a:01:30:93:f8:5f:51:50:51:bf:bf:6e:
                    bd:5a:49:f5:86:a9:d1:27:e8:86:4f:16:6e:16:34:
                    33:1f:66:f2:05:9c:36:b8:eb:79:6b:1c:45:04:6c:
                    3b:3b:ae:0b:a6:6c:aa:46:04:8c:ff:59:f3:fb:02:
                    32:a2:99:13:ab:08:76:2b:da:6f:76:1c:5f:27:1c:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:1B:86:DB:45:3D:C7:B8:2E:06:61:41:65:0E:1C:07:B3:59:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2ea26ffb-6d2b-3be5-8260-8483e06a8994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:e3:fa:3a:87:27:98:cc:43:77:97:b3:31:06:72:83:dd:
         d0:d8:2c:c7:b2:78:1b:64:85:96:72:9d:80:32:f0:99:dd:ca:
         6f:05:2f:91:ef:09:3a:62:7d:2d:a4:4a:f8:0b:3f:e6:45:55:
         dd:bd:d8:29:32:b7:26:21:c5:b6:67:a3:23:b9:a2:14:17:71:
         50:ed:6d:cb:f2:99:01:77:10:ee:d7:df:18:62:da:f2:94:0a:
         46:56:88:40:96:b6:aa:50:be:b6:a0:8e:0d:3b:9a:d7:ca:9b:
         98:15:50:bb:7d:b5:15:d9:45:d0:90:16:22:6c:95:10:27:a5:
         81:84:a2:f2:b4:a4:29:39:19:a8:97:01:31:38:1b:0a:24:32:
         04:0c:e4:fc:9d:35:a5:40:a1:ef:fa:03:5d:74:1f:30:50:b2:
         d8:73:dd:52:bd:c8:45:1c:7b:12:8e:32:44:6a:a8:b9:f4:54:
         ce:fd:46:e1:7e:bf:c5:c3:a3:72:ab:a0:24:a6:16:03:f1:e9:
         b7:ce:20:04:38:63:cd:e8:d9:0b:09:9d:04:5e:6a:04:ae:2f:
         97:76:c2:49:da:19:a2:29:12:00:6a:f4:6e:04:b8:6e:16:fb:
         81:86:e9:10:cf:0c:2e:ca:20:9b:2e:07:ae:61:b6:31:4e:1b:
         67:59:52:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCCHiEbiiFuEXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
OTRmNTUzNjgtYjRmOS00NmVlLTg5ZDUtMTc3MTIyZWRmY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KST/nCzAG/mbFCgNrng+wzKCYfxR9tKwHiC
cWwL8LBh7wIs1MP4K2Gz7AklR4/l/q89Qie2g+QJ5twifYttoI84abb7CaQroDxj
ecDDOhC4YOa3Qwesf6HP/jkl26FukXIYhQ/IZ2MSpUpdtikIoBUQVGt8qd6Ztmis
DDq64JpsLQ64+5VxRdP/hqGB0cfgnyigXayjOm/g7pgRE8Bf86JpQuC/7ohXQ3xf
LQn+kbYS1WbPTuJaATCT+F9RUFG/v269Wkn1hqnRJ+iGTxZuFjQzH2byBZw2uOt5
axxFBGw7O64LpmyqRgSM/1nz+wIyopkTqwh2K9pvdhxfJxxffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDY6G4bbRT3HuC4GYUFlDhwHs1l/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmVhMjZmZmItNmQyYi0z
YmU1LTgyNjAtODQ4M2UwNmE4OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlFGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE774/o6hyeYzEN3l7MxBnKD3dDYLMeyeBtkhZZynYAy8Jndym8FL5Hv
CTpifS2kSvgLP+ZFVd292CkytyYhxbZnoyO5ohQXcVDtbcvymQF3EO7X3xhi2vKU
CkZWiECWtqpQvragjg07mtfKm5gVULt9tRXZRdCQFiJslRAnpYGEovK0pCk5GaiX
ATE4GwokMgQM5PydNaVAoe/6A110HzBQsthz3VK9yEUcexKOMkRqqLn0VM79RuF+
v8XDo3KroCSmFgPx6bfOIAQ4Y83o2QsJnQReagSuL5d2wknaGaIpEgBq9G4EuG4W
+4GG6RDPDC7KIJsuB65htjFOG2dZUp4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:59 2026 by rpki-client