Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3641e52b-20ec-3659-83bb-35b1fcb91825.roa
File:                     3641e52b-20ec-3659-83bb-35b1fcb91825.roa (raw, json)
Hash identifier:          nF9KMVs5cUqZu5lnaLTnrSmzn+WGlswHKJ5iuACbY3E=
Subject key identifier:   51:2D:23:35:C7:A6:B9:9D:2F:78:C0:BF:39:3E:A6:AE:C9:6B:6D:40
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE15069EF36C890426134A9C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3641e52b-20ec-3659-83bb-35b1fcb91825.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        50.81.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:69:ef:36:c8:90:42:61:34:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=76afbf4e-28e0-4116-9d8a-90dc03835b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:76:06:5a:a3:fe:70:8c:c1:53:4f:f9:9f:
                    f4:60:79:11:91:93:7f:97:3b:45:1d:c3:7b:05:aa:
                    01:33:54:3d:3c:e4:c6:e1:8a:f7:93:f3:a7:66:02:
                    cf:b5:9e:26:80:b8:6c:65:13:e9:a7:68:94:47:6b:
                    54:73:6f:97:db:11:5e:92:7b:57:b8:fd:45:90:eb:
                    91:b7:0a:cf:38:f3:da:ad:46:8b:9d:e6:3f:ac:dc:
                    f2:10:89:df:6e:66:2f:b2:91:c9:a5:e8:ed:ff:63:
                    58:fc:c0:36:88:5f:12:6b:d9:11:19:5c:92:9a:6f:
                    5c:1f:1d:b5:2c:67:4d:9f:cd:41:96:37:84:d0:b1:
                    7d:81:19:6f:9f:ad:19:61:ef:35:0c:3f:0d:6b:4c:
                    c8:26:49:a8:22:ec:bf:81:6b:8a:a1:cc:df:ff:a5:
                    e6:23:cb:1d:e1:5f:43:93:b9:84:cc:74:ed:f4:45:
                    cf:9d:c1:36:ce:90:08:f4:db:78:17:2c:17:26:4b:
                    9d:4e:04:4d:91:49:34:cd:1f:41:1c:ae:e0:a9:43:
                    ca:32:ce:b2:64:df:e7:92:98:83:36:55:2e:5d:33:
                    9a:a0:37:6d:32:f8:21:c6:9e:f2:c8:af:50:ee:77:
                    a9:84:78:58:55:10:de:b7:58:09:fb:1f:ee:5c:a3:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:23:35:C7:A6:B9:9D:2F:78:C0:BF:39:3E:A6:AE:C9:6B:6D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3641e52b-20ec-3659-83bb-35b1fcb91825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:58:e7:e6:82:da:ff:ec:0d:d0:f0:0d:7c:49:0e:0f:f8:45:
         aa:17:30:ad:4b:31:72:c9:51:6a:10:89:eb:50:3d:53:2a:8e:
         ef:07:44:8f:7c:cd:81:cb:0a:13:4f:01:ce:23:81:42:d3:a4:
         55:87:61:09:3d:84:64:8e:ab:d9:f8:c5:ce:33:f2:c1:4f:1a:
         1a:4a:d0:4f:fc:7a:f2:8e:ee:88:51:ec:71:04:a3:5c:8e:cb:
         ba:d8:f5:6d:1b:14:1c:5b:b4:c9:7c:aa:5f:b9:f7:36:7a:9c:
         de:62:45:fd:72:0c:3f:16:ec:4d:3c:d8:ad:ce:8f:ba:52:b5:
         ee:1f:07:a6:c7:5b:be:a0:33:a7:f3:c9:71:77:bc:5a:11:31:
         88:6b:02:2a:34:6a:5f:f0:1a:5f:28:1e:d8:55:02:20:6d:c1:
         e7:63:55:ae:74:f8:71:dc:b1:50:00:3b:7a:85:cb:77:cf:f2:
         37:eb:67:2e:2b:88:1d:ea:fb:60:44:a6:0e:b4:46:89:7b:2e:
         39:65:ce:8f:20:45:47:f8:83:38:a1:ae:3f:25:89:09:07:0e:
         a8:9a:d9:a7:5a:c1:11:9a:85:7b:ba:f9:48:bf:f6:1c:60:9e:
         2d:f6:d8:a5:95:b4:17:70:01:e9:f7:43:17:c8:74:d4:84:50:
         80:b4:5d:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUGnvNsiQQmE0qcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NzZhZmJmNGUtMjhlMC00MTE2LTlkOGEtOTBkYzAzODM1YjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l92Blqj/nCMwVNP+Z/0YHkRkZN/lztFHcN7
BaoBM1Q9POTG4Yr3k/OnZgLPtZ4mgLhsZRPpp2iUR2tUc2+X2xFekntXuP1FkOuR
twrPOPParUaLneY/rNzyEInfbmYvspHJpejt/2NY/MA2iF8Sa9kRGVySmm9cHx21
LGdNn81BljeE0LF9gRlvn60ZYe81DD8Na0zIJkmoIuy/gWuKoczf/6XmI8sd4V9D
k7mEzHTt9EXPncE2zpAI9Nt4FywXJkudTgRNkUk0zR9BHK7gqUPKMs6yZN/nkpiD
NlUuXTOaoDdtMvghxp7yyK9Q7nephHhYVRDet1gJ+x/uXKMjYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEtIzXHprmdL3jAvzk+pq7Ja21AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzY0MWU1MmItMjBlYy0z
NjU5LTgzYmItMzViMWZjYjkxODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlHVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFY5+aC2v/sDdDwDXxJDg/4RaoXMK1LMXLJUWoQietQPVMqju8HRI98
zYHLChNPAc4jgULTpFWHYQk9hGSOq9n4xc4z8sFPGhpK0E/8evKO7ohR7HEEo1yO
y7rY9W0bFBxbtMl8ql+59zZ6nN5iRf1yDD8W7E082K3Oj7pSte4fB6bHW76gM6fz
yXF3vFoRMYhrAio0al/wGl8oHthVAiBtwedjVa50+HHcsVAAO3qFy3fP8jfrZy4r
iB3q+2BEpg60Rol7Ljllzo8gRUf4gzihrj8liQkHDqia2adawRGahXu6+Ui/9hxg
ni322KWVtBdwAen3QxfIdNSEUIC0XUQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:57 2026 by rpki-client