Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f8ab66a-c746-3963-8b7a-be2d3b2d5442.roa
File:                     6f8ab66a-c746-3963-8b7a-be2d3b2d5442.roa (raw, json)
Hash identifier:          8LlYb5RSVLZjwDxTxvM67v2yQCAxW8IC0sC/CLXJtow=
Subject key identifier:   62:65:98:34:05:CA:B7:20:25:BE:5A:BA:32:DB:D7:B9:96:C8:7E:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CBBBAC65F93523B6F4C5F3180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f8ab66a-c746-3963-8b7a-be2d3b2d5442.roa
Signing time:             Mon 02 Feb 2026 21:07:08 +0000
ROA not before:           Mon 02 Feb 2026 21:07:08 +0000
ROA not after:            Sun 03 May 2026 20:07:08 +0000
asID:                     30036
IP address blocks:        50.82.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:ba:c6:5f:93:52:3b:6f:4c:5f:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  2 21:07:08 2026 GMT
            Not After : May  3 20:07:08 2026 GMT
        Subject: CN=3a1787cc-57cd-4f82-8ed5-ab8b5b206ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:93:2a:ba:3a:37:c0:4c:f2:25:7f:9c:74:24:
                    11:d9:57:31:aa:04:cb:8b:1f:a0:b5:85:85:80:bd:
                    8d:72:e0:9e:ad:f1:83:c4:a6:c3:0f:73:63:28:ca:
                    a0:ef:b2:5d:52:56:c6:03:25:4b:9c:a3:c2:8a:0d:
                    65:d8:e3:be:64:e8:b9:6e:02:bd:3c:65:16:3d:05:
                    1c:ec:36:0d:96:fc:d8:b0:c0:24:42:64:44:6e:af:
                    69:9c:2e:fd:a3:4d:8f:fc:39:f1:da:6e:ed:32:46:
                    60:e9:95:45:18:9b:53:f3:57:6b:b0:52:72:0a:78:
                    19:2d:70:81:34:cc:ca:cc:12:97:f9:3b:26:ef:cd:
                    2a:10:eb:cd:ed:96:5b:c0:ed:a9:83:dd:db:23:cd:
                    c2:62:4e:9e:a0:cc:d7:44:46:8e:ff:d1:78:cd:0f:
                    cc:1b:48:1c:0e:a3:b0:72:e2:77:64:70:e1:df:7f:
                    3a:fe:3a:3b:96:30:27:dd:38:d9:fc:de:70:a7:26:
                    f6:5c:bc:cf:5c:93:c4:f1:c9:19:29:d1:e6:cd:22:
                    40:90:bb:c2:ea:7a:59:ec:09:da:34:3a:0f:91:87:
                    08:08:ea:a6:56:1f:f8:e4:c8:77:d5:89:bd:58:87:
                    5b:98:e1:72:8a:a4:63:74:22:f9:43:45:79:68:ba:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:98:34:05:CA:B7:20:25:BE:5A:BA:32:DB:D7:B9:96:C8:7E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6f8ab66a-c746-3963-8b7a-be2d3b2d5442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:a8:ab:81:a4:27:68:13:9e:e4:77:9a:4a:39:a1:9b:52:
         15:60:8b:23:42:a7:62:34:46:8d:75:e5:67:7a:25:99:f8:f3:
         26:df:0e:3b:09:38:19:62:1a:bc:0b:03:3c:04:a2:cf:4b:fa:
         e8:8a:0c:b9:92:cb:16:33:fa:fb:69:ee:b5:5e:88:11:7b:b1:
         71:08:14:fc:6b:4b:79:28:04:5d:a0:d2:90:e0:9e:e2:ab:1f:
         61:8b:9f:5d:c2:7d:96:a2:72:32:cc:82:2a:e2:ce:a7:2a:ad:
         91:2d:82:15:b7:4f:19:3b:fa:ca:54:f8:af:47:db:20:f7:bb:
         3a:ef:70:83:d4:ef:df:47:11:bc:03:0a:da:66:92:7a:3f:12:
         9b:53:1e:8d:40:f5:b8:40:b6:26:0d:36:31:c8:42:19:d6:7d:
         80:9a:0a:ba:1a:80:72:74:58:94:84:e7:c2:eb:ec:4a:36:de:
         1b:8e:a7:ea:ca:7b:37:4d:3f:17:6f:64:56:0c:f7:c4:b2:21:
         ad:06:de:ad:c7:39:d4:9a:d1:a7:6b:ce:de:75:b3:36:71:fb:
         b6:9c:90:cc:eb:99:73:e3:ae:56:c8:21:b6:b7:2f:dc:55:72:
         21:9b:a1:a4:3f:27:5d:a4:72:19:35:66:56:7d:a6:72:ce:eb:
         61:67:28:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy7usZfk1I7b0xfMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIwMjIxMDcwOFoXDTI2MDUwMzIwMDcwOFowLzEtMCsGA1UEAxMk
M2ExNzg3Y2MtNTdjZC00ZjgyLThlZDUtYWI4YjViMjA2YWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JMqujo3wEzyJX+cdCQR2VcxqgTLix+gtYWF
gL2NcuCerfGDxKbDD3NjKMqg77JdUlbGAyVLnKPCig1l2OO+ZOi5bgK9PGUWPQUc
7DYNlvzYsMAkQmREbq9pnC79o02P/Dnx2m7tMkZg6ZVFGJtT81drsFJyCngZLXCB
NMzKzBKX+Tsm780qEOvN7ZZbwO2pg93bI83CYk6eoMzXREaO/9F4zQ/MG0gcDqOw
cuJ3ZHDh3386/jo7ljAn3TjZ/N5wpyb2XLzPXJPE8ckZKdHmzSJAkLvC6npZ7Ana
NDoPkYcICOqmVh/45Mh31Ym9WIdbmOFyiqRjdCL5Q0V5aLoVRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJlmDQFyrcgJb5aujLb17mWyH60MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmY4YWI2NmEtYzc0Ni0z
OTYzLThiN2EtYmUyZDNiMmQ1NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEw7qKuBpCdoE57kd5pKOaGbUhVgiyNCp2I0Ro115Wd6JZn48ybfDjsJ
OBliGrwLAzwEos9L+uiKDLmSyxYz+vtp7rVeiBF7sXEIFPxrS3koBF2g0pDgnuKr
H2GLn13CfZaicjLMgirizqcqrZEtghW3Txk7+spU+K9H2yD3uzrvcIPU799HEbwD
Ctpmkno/EptTHo1A9bhAtiYNNjHIQhnWfYCaCroagHJ0WJSE58Lr7Eo23huOp+rK
ezdNPxdvZFYM98SyIa0G3q3HOdSa0adrzt51szZx+7ackMzrmXPjrlbIIba3L9xV
ciGboaQ/J12kchk1ZlZ9pnLO62FnKMM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:05 2026 by rpki-client