Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fc7f23b-9fb9-3703-895c-ea8ce8a34f5b.roa
File:                     5fc7f23b-9fb9-3703-895c-ea8ce8a34f5b.roa (raw, json)
Hash identifier:          bFCAftWlfoygtDsbQYgAphAWlq1oRb/bduqHVbA1Icg=
Subject key identifier:   00:12:0F:73:F4:9D:12:9C:6A:E2:AC:0F:46:FB:01:73:D6:4F:A5:10
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BB5C25152369EF13563736DE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fc7f23b-9fb9-3703-895c-ea8ce8a34f5b.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     30036
IP address blocks:        50.81.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:51:52:36:9e:f1:35:63:73:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=d96f319a-309e-4bdc-a19e-b6030ff0b49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:e3:cc:f9:7f:c4:d0:81:dc:6f:81:ee:f0:
                    4c:1c:e2:a9:b6:35:26:d3:cc:43:a4:e8:c7:bf:95:
                    50:bc:c4:c4:a9:4b:51:d5:93:d1:d8:79:9b:df:8f:
                    0c:e9:c8:bb:f4:09:15:63:fd:cf:1e:f8:a4:f6:51:
                    59:83:9c:2d:96:66:e6:4a:a7:4c:6a:7a:a0:28:33:
                    97:02:37:ee:af:33:ed:d8:b5:04:f2:1a:eb:7d:89:
                    2f:a6:cf:ea:b7:93:e7:90:89:bc:a1:2f:2a:d3:e9:
                    b3:c3:83:e0:d0:bf:75:7a:07:cd:73:cd:20:4c:a4:
                    f8:7b:9e:13:5e:8b:53:65:f0:8b:7b:4b:fc:72:f8:
                    2b:25:22:a9:21:1a:26:28:9c:c5:63:ee:84:aa:e9:
                    b4:09:4e:54:61:b1:74:0b:dc:a2:24:fd:34:44:60:
                    48:bc:dd:2c:2c:69:23:fc:d1:13:75:88:10:9c:be:
                    9c:1d:91:68:09:73:58:8f:df:18:4e:b9:a1:51:62:
                    d0:5f:6f:33:b8:eb:c0:8b:62:40:f6:21:25:11:e7:
                    83:b3:dd:1a:09:12:16:9c:23:73:56:e0:d5:67:15:
                    08:de:1c:29:17:0a:f4:7c:62:db:ec:a4:a4:4a:f5:
                    e3:31:9b:61:f4:c5:ce:ae:c2:44:ce:b2:7c:af:33:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:0F:73:F4:9D:12:9C:6A:E2:AC:0F:46:FB:01:73:D6:4F:A5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fc7f23b-9fb9-3703-895c-ea8ce8a34f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:88:7f:52:59:9c:84:1f:01:3a:29:4a:0d:d0:18:15:35:0c:
         fc:d7:bf:66:7a:a0:d6:b9:0d:22:04:af:a7:90:8b:b9:f8:c4:
         5c:08:5b:64:01:81:9b:32:08:17:5f:ac:86:e1:48:04:4f:54:
         14:5c:c4:e9:0b:d3:9c:51:a2:22:b8:fa:4c:74:87:fe:e7:c0:
         9d:7d:39:e3:00:ec:41:53:e5:a6:9e:f7:91:d5:7f:01:87:c8:
         03:33:29:04:50:ec:80:72:09:09:45:82:66:2d:2c:67:91:cf:
         a7:34:48:10:17:30:73:a6:f7:98:42:91:41:5a:82:6d:fd:29:
         58:e0:25:4a:7d:be:36:11:19:a8:13:14:b8:95:c5:b3:f0:2f:
         50:a5:0f:82:9f:2c:eb:e0:87:a1:e1:ab:4c:20:25:ca:29:09:
         b8:d0:0f:28:fa:8d:fd:b1:f0:07:2d:0f:24:ab:2d:cc:f7:ec:
         45:66:4c:a1:f7:a8:2a:30:6a:22:f3:41:9e:65:de:af:32:15:
         db:16:de:4f:e9:e7:71:2d:1b:bc:50:f3:66:88:50:1b:35:01:
         9d:15:02:6c:0f:aa:6d:53:85:02:94:81:9a:c0:58:91:0d:2b:
         71:86:86:fe:69:a8:36:e5:28:5e:15:b4:ec:31:3e:9e:7c:0a:
         b5:b6:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:15 2025 by rpki-client