Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa
File:                     8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa (raw, json)
Hash identifier:          RE+vkwQRV2k11qTI29BmGKLC0Ld1LDyn8tiW8qg0Nno=
Subject key identifier:   3E:37:35:3B:FA:9D:09:DB:19:90:D0:F4:29:2D:36:0D:97:AB:CE:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BCC101E4DFFBD4AB292C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        50.82.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:cc:10:1e:4d:ff:bd:4a:b2:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=34f5b644-b9b4-4f6d-8606-ac639c7b0ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:0f:a4:74:22:14:e5:a6:d0:b6:6c:96:4f:
                    be:3a:10:68:46:c4:d4:07:98:e8:02:43:51:ec:34:
                    a0:82:78:b5:0d:f6:9d:77:02:3e:ee:1f:e5:96:be:
                    e9:73:bb:28:96:b7:e9:f6:d9:96:2c:12:a5:fb:b0:
                    d8:79:b0:74:d1:a2:40:e2:ff:4b:5b:48:42:52:64:
                    30:29:f3:bb:ee:80:33:0c:b8:7c:ea:11:ae:74:4a:
                    b3:5e:49:3a:a8:ef:82:da:9a:21:6c:8c:62:b1:4b:
                    ab:05:d4:13:fe:c4:18:32:b8:d8:21:c8:0e:40:16:
                    ae:98:b9:d0:83:10:f9:87:e6:88:91:b9:95:f2:66:
                    67:27:64:c5:b1:d6:b0:95:ba:bb:78:94:33:b8:b5:
                    74:9e:cf:42:22:8b:22:47:6c:ab:c9:71:b9:03:d7:
                    f1:1f:07:04:b8:90:8a:f6:df:d4:f1:1f:67:92:d1:
                    b7:7e:0a:38:8d:37:c3:52:6f:de:44:9a:18:97:99:
                    a2:29:40:30:61:47:29:8f:a7:a2:60:e5:ff:91:63:
                    a4:33:2c:09:f3:28:3d:03:ce:85:1f:79:1d:92:dd:
                    de:12:5a:ca:af:1a:30:44:35:85:de:ac:3f:40:e9:
                    35:26:6d:b8:26:ee:14:b1:25:52:35:f5:e8:b2:ee:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:35:3B:FA:9D:09:DB:19:90:D0:F4:29:2D:36:0D:97:AB:CE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c6b45f0-85e8-3adc-a919-ef9acf4c4414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:e4:f6:71:0d:81:38:ba:8d:45:8b:34:8b:03:22:7c:8e:
         a5:13:e0:47:11:55:e6:f0:34:73:1d:7b:9a:45:92:20:43:52:
         f5:f0:41:06:3e:aa:02:43:73:97:9e:5b:72:91:3c:3a:08:bd:
         60:3c:10:8f:9a:cb:52:ff:e4:0f:85:6b:63:fb:4b:bf:4a:4e:
         88:07:5e:8b:35:f7:9d:8f:25:48:8c:18:f1:a9:f9:af:9f:82:
         a1:0d:6a:59:48:9f:99:0e:ee:f5:76:33:03:a3:a6:eb:e8:d0:
         f6:c9:47:a6:fd:ff:24:7d:af:81:ec:2d:39:e9:d0:d7:56:a3:
         bb:1e:74:a5:38:45:e8:1c:6e:23:e3:8e:cb:4b:77:ab:05:d4:
         8f:b7:b3:7c:fa:0a:89:b0:59:ed:26:5e:c4:09:6f:1a:c1:d6:
         59:38:54:68:b6:6f:1f:da:dd:0c:bf:fa:96:83:93:08:ac:e1:
         be:3d:bc:c3:23:cc:db:f1:88:dc:46:24:d3:21:77:4b:32:57:
         bd:8e:af:fa:4c:8e:15:05:db:a5:92:b6:bf:70:8e:59:fd:44:
         ee:81:8c:e9:11:89:87:1d:c1:2b:72:92:f0:4f:92:b8:87:9d:
         44:6b:0b:6d:3c:1d:ea:8e:34:91:a3:77:3a:15:b9:d7:fb:7f:
         c2:37:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:26 2026 by rpki-client