Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929064f9-2bf8-3d2f-82a9-a30551f246b2.roa
File:                     929064f9-2bf8-3d2f-82a9-a30551f246b2.roa (raw, json)
Hash identifier:          xgq0pJ4A896pKbMQnupqU73UZENpa0Mbgk34EtwiM/g=
Subject key identifier:   51:8A:74:9C:AC:26:AF:C8:2F:44:9B:DC:F1:66:B3:5B:E7:28:CE:3E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F480D6403BC5AD542839B3300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929064f9-2bf8-3d2f-82a9-a30551f246b2.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        50.83.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:64:03:bc:5a:d5:42:83:9b:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=7389d644-e3bc-4fd0-9730-1a5030692914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:9f:13:01:5e:de:fd:54:ed:ea:7e:68:e9:
                    bc:4e:1e:97:d7:e7:a4:6f:c9:e1:35:9d:eb:20:ef:
                    e3:38:cd:c4:f7:42:27:b2:0b:7d:d2:59:ca:6c:db:
                    20:0c:76:08:64:d3:4d:62:39:14:3d:ee:11:ed:91:
                    96:d1:ac:25:29:a2:4b:21:9d:55:68:f1:20:24:9e:
                    56:07:78:0d:0d:0c:a1:f7:9a:65:c5:2d:09:17:e2:
                    bc:b9:78:78:91:64:47:10:dc:2a:4c:bb:ea:1a:b3:
                    33:9a:94:5c:6f:ba:55:c9:22:e1:a1:69:76:5a:8a:
                    51:f5:54:da:51:d6:53:36:bb:b0:ab:15:36:22:0d:
                    48:19:02:cd:36:e7:be:3c:c4:21:bb:da:ad:aa:b2:
                    b4:31:25:d6:68:24:c6:3a:8a:1c:55:b2:7a:1a:e5:
                    1f:30:54:6f:3a:3a:fd:01:55:bd:f9:fb:cd:dc:f9:
                    52:36:0c:ef:63:a1:6f:3b:63:bd:73:98:7b:73:0a:
                    09:01:29:d3:d8:40:81:a9:61:44:0e:1e:ba:cb:3d:
                    51:f1:cd:3f:5e:1d:ae:36:35:5e:e1:19:d9:f7:dc:
                    6c:56:3b:01:45:be:02:ba:2d:9e:c5:b3:1e:e1:fd:
                    f1:4e:3a:d7:8b:46:f2:1f:f6:0a:49:67:ba:c4:f2:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8A:74:9C:AC:26:AF:C8:2F:44:9B:DC:F1:66:B3:5B:E7:28:CE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929064f9-2bf8-3d2f-82a9-a30551f246b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:86:39:10:9a:ef:91:ab:78:f2:30:8f:31:b3:ab:7c:78:cd:
         b1:97:f8:81:b3:37:cc:91:46:9e:dd:5e:f8:42:14:37:c1:bd:
         a8:0d:e6:e9:88:3d:22:27:0c:81:de:03:7e:4b:61:55:e7:37:
         44:b6:96:e9:4c:f7:00:40:96:5a:6e:79:7b:7b:74:66:d3:e2:
         a2:d2:68:74:71:48:79:67:90:1e:75:3b:3f:c5:10:82:cf:7e:
         6f:cb:3c:9f:da:8d:c6:5c:e6:a7:21:d4:92:b9:d5:7c:04:7d:
         e8:af:d8:58:5c:88:78:8d:25:d6:06:be:86:25:f3:01:7a:f3:
         00:17:91:a6:ce:3a:de:e1:dd:02:87:26:d4:23:5f:f4:b3:29:
         d6:17:92:ba:38:71:60:23:25:b3:57:76:1c:7e:26:10:38:74:
         74:34:44:41:a5:56:a8:96:60:f7:41:4e:90:34:8d:76:11:08:
         eb:0a:3a:12:ba:90:0d:45:02:59:e1:9c:13:4a:29:45:a9:27:
         8f:89:de:a4:ce:b5:8b:1a:21:d7:93:76:a0:b3:b1:a6:aa:74:
         97:9d:79:73:5f:d3:c3:91:d8:8d:82:34:c4:ca:c3:b1:74:5f:
         0d:4e:85:93:ed:d5:ef:0d:b5:aa:6a:31:99:06:33:47:7a:11:
         f2:51:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:17 2026 by rpki-client