Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aa0c9a6-da57-38ad-a85f-5d93e32bbb58.roa
File:                     4aa0c9a6-da57-38ad-a85f-5d93e32bbb58.roa (raw, json)
Hash identifier:          S06n9SsdxuMD/6wJuPtxm5qchExjQkU9DsAUM5XYvCs=
Subject key identifier:   50:E2:22:AA:A2:9E:E8:D5:3A:5C:E3:92:D9:13:CC:D3:52:67:78:A8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CE460C225037E0EBB2000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aa0c9a6-da57-38ad-a85f-5d93e32bbb58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        50.81.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:e4:60:c2:25:03:7e:0e:bb:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b2ad07a6-a208-41cc-96b4-108d403fbe2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:1d:42:ba:0b:10:ae:ba:f9:3a:b3:3e:0e:
                    6f:9f:ed:cf:df:aa:7b:84:da:04:60:42:04:e2:e0:
                    53:03:79:9d:98:81:dc:0f:99:16:31:08:33:5c:43:
                    f8:70:95:7c:c4:89:48:40:03:ca:7a:4c:7e:dd:38:
                    61:a6:70:11:fb:6f:64:6b:cd:34:b1:de:7d:41:48:
                    f3:e7:ab:ad:c1:30:4a:44:19:a6:38:24:3c:d1:c2:
                    44:02:b7:f9:42:22:6f:a6:b8:d2:96:93:fa:60:58:
                    be:18:5e:1b:24:4e:44:29:61:ed:69:0d:74:4c:0e:
                    c8:1f:2c:d7:8b:54:d4:79:35:f6:ee:b2:04:91:e3:
                    9e:8b:64:e7:af:cc:c6:9c:72:fd:87:4b:20:37:cc:
                    80:77:91:5b:5e:fc:ff:7e:32:fc:8a:2d:55:3e:aa:
                    09:15:bf:f1:11:06:80:0d:e7:cd:b7:90:f2:17:c2:
                    b0:78:6f:62:fc:4b:2d:d8:f5:af:f8:29:ff:3c:13:
                    58:b0:70:9a:15:26:23:72:fa:33:19:bc:96:1f:0f:
                    cb:7a:b5:3f:27:2d:dd:4b:97:99:93:d1:81:56:fd:
                    6f:6c:0c:90:b0:df:63:97:e7:00:d6:ca:d6:88:62:
                    78:4b:11:90:98:af:03:b3:ef:d0:2b:04:85:96:30:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E2:22:AA:A2:9E:E8:D5:3A:5C:E3:92:D9:13:CC:D3:52:67:78:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4aa0c9a6-da57-38ad-a85f-5d93e32bbb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:8d:35:b0:a3:16:89:ca:78:e9:24:77:91:7e:53:66:6b:
         4f:f1:f0:79:6e:6f:27:26:49:8b:19:04:ab:1d:34:62:72:41:
         a7:90:95:c1:a0:c5:ca:dc:3f:74:e9:f1:54:d4:ad:ca:27:58:
         88:a4:28:a5:2e:a5:0a:c8:32:08:80:56:c8:7b:e0:1a:75:69:
         1b:c7:e8:93:4d:56:0f:bb:ed:c5:e9:8e:24:a9:bb:c6:7f:c4:
         c1:1f:e3:4c:c9:e1:cb:83:c0:89:16:f2:d8:6c:ca:86:d9:ae:
         88:b9:92:87:b3:0a:4c:e5:9f:f2:a2:50:83:db:b4:8a:1e:31:
         57:55:88:d1:79:61:21:ed:6b:b8:cc:3f:f3:08:9b:25:61:62:
         c7:50:9d:b8:65:b1:ab:1b:65:d3:e6:e2:ff:2c:23:f8:bc:60:
         0b:a6:5d:ab:7b:83:46:50:1a:2c:c9:4c:72:c4:43:28:95:fb:
         d4:f6:0a:55:dd:9a:17:24:f9:56:13:5e:c2:05:6e:8a:21:f1:
         32:e1:be:5a:9f:a8:9a:aa:d6:e2:11:b6:bb:4f:b9:58:23:9a:
         b9:a7:46:99:41:f2:3b:7e:b6:3a:b8:02:ad:d0:62:df:2a:5f:
         ae:55:f6:82:2e:eb:d2:ce:e2:43:50:6a:62:ed:62:d0:3e:9c:
         3d:19:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:57 2026 by rpki-client