Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/736f8232-cfe7-3e4b-8ba2-894a16d379bd.roa
File:                     736f8232-cfe7-3e4b-8ba2-894a16d379bd.roa (raw, json)
Hash identifier:          DXahd2fURcKlkOiK+e5jy7ZdbZiMk2zjncTwYS12CiQ=
Subject key identifier:   5F:BD:68:B1:B8:36:09:0C:EB:22:6B:4B:EF:47:E3:5D:73:B0:69:CE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA798831B80DF334883D68A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/736f8232-cfe7-3e4b-8ba2-894a16d379bd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        50.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:83:1b:80:df:33:48:83:d6:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e39369c8-6d84-4ed9-9e57-e53a6f43af71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:ed:73:68:2a:06:48:e1:56:d2:32:db:21:
                    ca:94:4e:4b:f6:cd:a0:61:86:e2:ae:1d:74:5f:e1:
                    28:1f:eb:88:2f:97:d3:0f:ce:c1:3c:2d:25:d2:e6:
                    92:d2:46:0d:83:35:33:36:77:2e:d0:3e:17:39:dd:
                    ed:2e:53:4e:c1:25:48:0f:35:bb:5e:5e:29:02:18:
                    f8:2d:b0:a2:40:1f:b6:6e:a4:e3:ab:71:47:ae:32:
                    4e:a9:c1:9c:57:c5:fe:dd:1f:b2:16:12:e0:13:20:
                    e6:42:a2:e8:ec:09:6a:1d:fb:bf:a9:4e:53:5c:44:
                    1c:79:54:57:59:78:9f:df:b6:0f:06:6b:db:8c:79:
                    85:0c:ec:d3:4f:cf:80:6b:e9:af:fd:63:33:a9:de:
                    09:67:f6:5b:38:26:ae:e1:56:18:df:ab:a9:2e:99:
                    0c:73:14:0d:88:6a:69:be:f9:e5:c6:35:00:b1:0d:
                    b8:9e:75:82:28:12:37:30:ae:e7:72:35:b4:d6:bb:
                    6e:73:f8:7c:86:5b:4f:1e:c0:66:c5:cd:f3:4c:a8:
                    9d:4c:81:d8:90:67:e5:78:64:37:ce:68:f3:0b:12:
                    d8:53:39:3a:5c:f6:5a:00:f7:93:f3:be:cc:a8:b9:
                    8f:2f:59:37:e6:52:4d:c2:33:bc:4c:2f:07:2c:26:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:68:B1:B8:36:09:0C:EB:22:6B:4B:EF:47:E3:5D:73:B0:69:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/736f8232-cfe7-3e4b-8ba2-894a16d379bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:97:a8:12:24:42:79:6a:91:24:2a:ca:61:4d:36:cb:28:b4:
         76:ce:59:19:c6:2f:08:f0:5d:5a:36:76:ab:c2:fe:39:9d:0f:
         c2:24:36:cc:07:a6:25:46:bf:55:98:ad:65:2e:88:e8:3a:62:
         8f:45:f6:3b:42:5b:0f:04:ec:a7:50:d0:dc:84:4a:4d:34:59:
         ac:70:d7:8f:b3:09:f4:7c:ce:b9:12:a5:d4:6a:1d:75:21:29:
         74:d8:e6:2e:c0:6f:6b:94:7b:90:81:2a:65:03:85:16:2e:57:
         45:49:55:ad:c3:37:fd:d1:d9:fa:1f:94:68:9c:c6:80:25:c0:
         39:27:e3:58:84:dd:06:9a:71:4b:1f:9d:ba:da:de:88:b2:bb:
         ab:e9:c4:61:9e:7e:46:58:66:2c:82:5e:33:8a:4d:92:41:1a:
         c1:24:11:77:37:bf:e8:94:ea:14:dc:6c:bb:55:bf:90:db:fe:
         0f:24:ae:79:21:87:c3:3e:0d:5b:d0:a8:ba:02:62:7c:7a:f0:
         a9:3d:c9:45:32:da:3c:d7:08:25:b0:05:40:6b:6c:ce:ae:c8:
         f5:09:6d:12:2d:1e:a8:71:96:98:d7:5f:9f:80:fb:41:8e:e6:
         c8:ba:d3:d0:00:6e:f9:c3:8e:49:b6:e4:4d:07:47:ab:da:85:
         16:d7:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:11:26 2026 by rpki-client