Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa
File:                     8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa (raw, json)
Hash identifier:          6X+Z1UKCdTzT8NtFkWpxdPht4lfvw6ByZRmBJsr7eq4=
Subject key identifier:   A3:FB:F6:50:DD:40:9A:E1:3D:38:66:F2:9B:E7:8E:EC:3C:2D:EF:7A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4972E63808F56E72BABA1180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        50.82.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e6:38:08:f5:6e:72:ba:ba:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4f8abad7-4604-42af-a6ae-91e446525aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:bf:ac:ae:ca:85:fd:c3:5a:5b:86:c0:81:
                    93:82:63:e0:25:d2:87:1b:e1:04:f5:b0:77:cc:e4:
                    b5:e1:67:b2:d8:fb:f2:61:61:7f:27:60:56:d7:54:
                    c8:5b:0e:a3:81:8f:09:5b:05:34:bf:5a:8e:b1:6f:
                    fe:65:e8:0a:42:1e:9f:dc:e5:8d:35:16:65:43:2d:
                    90:59:5b:90:4e:a4:23:46:58:ec:a3:8a:c0:9c:81:
                    18:7e:97:68:50:fc:c1:9b:7d:8a:bc:b6:fb:a9:ec:
                    71:96:45:1d:06:a4:33:63:ac:e4:ff:d1:9d:ed:92:
                    33:7b:7e:4f:b0:84:7c:2f:d9:69:98:1c:84:f4:63:
                    6b:5e:41:20:ba:c9:e8:6a:29:71:96:f3:6f:3b:a5:
                    16:30:f3:73:a9:2a:43:e8:80:85:be:fd:91:ff:38:
                    dc:87:63:1e:97:31:f7:de:8a:1a:30:98:b3:30:b1:
                    71:e0:48:8a:99:a0:76:1d:25:90:2a:2f:54:74:28:
                    05:6d:ad:e3:42:30:80:52:a2:24:ea:33:c7:50:0f:
                    72:e7:59:54:37:79:43:6f:79:18:eb:71:05:9e:dd:
                    0d:d2:e7:df:b0:f9:cf:cb:76:13:04:b7:ed:f9:aa:
                    2a:3c:4e:ca:03:66:25:66:02:1a:ef:69:6b:81:59:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FB:F6:50:DD:40:9A:E1:3D:38:66:F2:9B:E7:8E:EC:3C:2D:EF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:a1:0e:8e:4e:12:79:76:83:35:c2:af:3f:49:c2:b4:cb:
         ea:5e:f0:f6:8e:32:ec:2a:0d:b3:bd:b0:bb:9d:c0:c8:32:ab:
         d8:29:d2:33:f8:03:d6:57:62:dd:15:26:17:44:4a:78:3e:fb:
         72:d4:ef:a8:7a:fb:7e:6b:fa:b7:71:12:40:67:56:45:ab:e5:
         f6:22:df:3a:b4:b2:d0:51:f4:bc:4c:ce:d3:74:37:b1:98:43:
         bf:dd:05:e5:d2:eb:13:89:ce:93:83:46:a8:9f:ed:00:df:d7:
         49:29:0c:13:15:ea:72:68:a2:d1:99:57:9d:a7:2d:4c:72:79:
         37:7e:26:75:2a:fb:73:ec:ab:06:82:06:f3:48:09:cd:99:10:
         18:6f:89:4d:43:52:02:75:a9:72:76:1a:5b:de:92:90:50:cb:
         b8:f5:96:b0:f5:9c:ba:19:64:06:3e:ee:98:bc:87:d6:34:e1:
         5e:38:1d:70:4f:5c:e1:50:92:99:4e:c4:71:d0:90:73:1d:e0:
         e2:ac:7e:43:ed:f4:65:f0:a6:64:35:a7:57:3c:58:5c:53:bb:
         c4:5c:03:2c:aa:d3:ad:30:f5:ed:d1:0f:ff:e1:82:d6:fe:86:
         28:80:86:74:70:c0:6c:9b:b2:31:be:98:86:9f:1f:d7:77:ff:
         ce:f7:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:39:37 2026 by rpki-client