Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa
File:                     89dd45a3-d400-3f18-ad49-001161dc8936.roa (raw, json)
Hash identifier:          cyRHQzRnNW7aSq5+eqJVS98fe79cx26sKp8wgczS2Io=
Subject key identifier:   42:FD:43:2B:CE:09:75:8B:F3:AB:B8:61:C9:91:02:2C:FD:82:C0:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D571F94AD06E36301AB51D380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        50.81.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:94:ad:06:e3:63:01:ab:51:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=f946dc06-3928-407c-b482-8d37658906a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:5f:ee:c2:8c:45:cd:de:33:ad:59:ca:52:
                    f0:b9:dc:a4:ab:ef:c8:c6:c5:8c:88:42:bd:8c:c3:
                    0c:10:2a:6c:9b:8b:4b:4f:f8:68:e0:96:b0:d7:71:
                    82:40:77:e2:6a:aa:22:4d:a0:05:93:21:2c:c7:5d:
                    54:86:c8:e5:b3:54:03:92:44:31:df:d5:91:c6:22:
                    5f:55:7b:67:11:0e:a7:34:39:2a:fd:bd:64:f9:16:
                    52:7a:df:9f:6d:7a:6a:bf:f6:f0:5f:0b:47:e4:27:
                    e8:5e:d8:fb:eb:0b:87:e6:a0:92:0a:78:7e:b1:6e:
                    f8:c5:ea:e7:1e:03:b7:e5:60:46:20:8c:c4:5a:c0:
                    29:76:14:21:bf:60:50:81:12:8a:8f:84:00:ec:06:
                    14:50:4a:0b:ea:48:80:04:eb:8b:9c:d6:4a:c6:5f:
                    81:82:1c:be:7a:7c:20:ea:b3:45:5b:9c:d0:14:d9:
                    f8:e1:5e:63:a4:75:cd:bf:1e:ef:f0:2e:d7:9e:d4:
                    41:ee:b3:3b:63:79:22:10:31:9b:96:73:79:03:4b:
                    ec:59:96:df:74:ce:1f:5d:9b:fa:b6:20:8b:59:7d:
                    a3:8c:5e:f3:17:bb:83:fa:3b:89:c0:6c:e7:8a:83:
                    e8:b9:67:46:f3:2f:b3:a0:1b:4c:40:4f:71:11:ef:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:43:2B:CE:09:75:8B:F3:AB:B8:61:C9:91:02:2C:FD:82:C0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89dd45a3-d400-3f18-ad49-001161dc8936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:62:cc:69:2b:97:e7:9b:3a:40:62:6a:33:5e:42:0f:f4:9e:
         c4:1a:bb:eb:74:bf:8a:4e:8d:2b:db:29:5f:6e:96:e7:a3:38:
         c0:b6:a1:b2:55:bb:a4:14:c7:21:b4:46:18:56:53:b9:ad:2a:
         67:f4:6d:0c:29:3d:64:83:76:d2:28:80:04:66:df:06:34:ff:
         34:34:3c:59:60:a8:0a:0c:e0:e8:6e:c3:d8:b1:10:b0:8c:24:
         b7:f9:22:ef:06:cc:7c:f8:66:1e:1c:72:c6:f6:a5:04:9f:99:
         40:99:36:57:d7:a5:9d:aa:5b:f5:64:77:97:6b:f4:da:b1:66:
         9a:04:22:0c:a7:bf:85:7c:87:7c:fd:38:5d:f7:57:7e:63:2b:
         c3:b0:e8:cb:fb:d0:01:69:44:37:f3:8d:1b:7c:8b:31:44:1e:
         8d:9c:2b:50:75:99:73:44:e2:16:e8:96:a6:42:c8:27:37:36:
         59:bb:82:35:d5:73:ce:96:b4:d1:2f:d3:fc:4c:57:ef:40:6e:
         f4:8a:85:fc:2c:e7:15:fe:f9:c7:6b:09:8b:e3:4d:df:d9:f9:
         2d:f3:26:a6:6f:e9:70:a4:3c:5f:1f:8a:ea:d1:01:51:01:a3:
         f5:97:a9:fe:e0:80:7f:5f:36:2d:6c:0a:63:c8:dc:57:4c:10:
         98:67:d4:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5StBuNjAatR04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
Zjk0NmRjMDYtMzkyOC00MDdjLWI0ODItOGQzNzY1ODkwNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1xf7sKMRc3eM61ZylLwudykq+/IxsWMiEK9
jMMMECpsm4tLT/ho4Jaw13GCQHfiaqoiTaAFkyEsx11Uhsjls1QDkkQx39WRxiJf
VXtnEQ6nNDkq/b1k+RZSet+fbXpqv/bwXwtH5CfoXtj76wuH5qCSCnh+sW74xern
HgO35WBGIIzEWsApdhQhv2BQgRKKj4QA7AYUUEoL6kiABOuLnNZKxl+Bghy+enwg
6rNFW5zQFNn44V5jpHXNvx7v8C7XntRB7rM7Y3kiEDGblnN5A0vsWZbfdM4fXZv6
tiCLWX2jjF7zF7uD+juJwGznioPouWdG8y+zoBtMQE9xEe/AtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEL9QyvOCXWL86u4YcmRAiz9gsC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlkZDQ1YTMtZDQwMC0z
ZjE4LWFkNDktMDAxMTYxZGM4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFizGkrl+ebOkBiajNeQg/0nsQau+t0v4pOjSvbKV9uluejOMC2obJV
u6QUxyG0RhhWU7mtKmf0bQwpPWSDdtIogARm3wY0/zQ0PFlgqAoM4Ohuw9ixELCM
JLf5Iu8GzHz4Zh4ccsb2pQSfmUCZNlfXpZ2qW/Vkd5dr9NqxZpoEIgynv4V8h3z9
OF33V35jK8Ow6Mv70AFpRDfzjRt8izFEHo2cK1B1mXNE4hbolqZCyCc3Nlm7gjXV
c86WtNEv0/xMV+9AbvSKhfws5xX++cdrCYvjTd/Z+S3zJqZv6XCkPF8fiurRAVEB
o/WXqf7ggH9fNi1sCmPI3FdMEJhn1EE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:57 2026 by rpki-client