Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a249bcf2-c656-3ed3-b7ee-1bf9ca271c59.roa
File:                     a249bcf2-c656-3ed3-b7ee-1bf9ca271c59.roa (raw, json)
Hash identifier:          ZuNVvoBJrF3l2+K7Zle7y+macv0OSNfOEd4DEqBvfA0=
Subject key identifier:   CA:E8:4E:2F:EA:5A:14:CE:B4:CD:F3:FF:B2:7B:16:77:37:35:74:9F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B2CCD4D160D32C5549900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a249bcf2-c656-3ed3-b7ee-1bf9ca271c59.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.81.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:2c:cd:4d:16:0d:32:c5:54:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4647ca2b-7fe1-4cbe-ad7f-dacb22aaeee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:94:9d:cd:cb:72:74:df:f2:5f:2e:c3:e2:
                    69:18:35:ca:27:c8:d0:1a:25:8a:46:76:27:20:76:
                    d1:10:fa:ed:ac:36:28:07:aa:73:3f:98:40:9e:b7:
                    a6:67:01:ff:72:a9:e0:98:fa:df:db:5a:98:37:ea:
                    66:90:95:cf:b9:73:aa:a1:3f:32:f0:82:ac:fe:9b:
                    48:3c:b6:5b:30:02:8d:8a:d0:94:44:1b:17:74:94:
                    10:3f:51:4f:30:be:22:b6:de:62:d8:ac:4f:51:cc:
                    94:15:09:66:a2:25:b3:d1:50:e8:69:a5:b1:17:b6:
                    3a:e7:f6:9b:e3:c8:fe:10:af:6e:ea:71:55:77:36:
                    dc:85:4f:c7:b4:4d:a2:ca:09:5f:0e:33:4b:8c:b5:
                    07:e4:db:4f:2d:6b:f3:de:a5:3d:e7:54:47:03:7f:
                    0a:83:66:f6:cc:3f:02:b3:47:ad:50:69:7e:6d:c0:
                    46:e8:d3:bc:4d:c0:3b:ec:53:ed:1c:e7:59:f5:d5:
                    52:1c:f3:43:ad:14:16:12:cd:ad:ea:65:a6:7b:ce:
                    6a:49:f3:e9:81:f0:7c:9e:9a:2e:6a:da:16:aa:cd:
                    61:18:e9:46:a0:97:e8:7a:8e:fd:f1:8b:2b:07:b5:
                    db:2d:b7:7a:58:80:08:fb:8e:4e:dc:95:5b:68:d5:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E8:4E:2F:EA:5A:14:CE:B4:CD:F3:FF:B2:7B:16:77:37:35:74:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a249bcf2-c656-3ed3-b7ee-1bf9ca271c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:95:57:d2:18:05:b0:02:40:2e:0a:79:a2:08:be:81:44:
         84:af:95:f8:75:80:db:d6:cf:f5:1d:6a:f4:96:e7:1f:08:9f:
         e7:2c:c6:99:4a:3b:f4:89:ac:49:6a:ec:ee:d3:01:f0:c3:c4:
         ff:26:b4:b3:90:67:07:7f:7b:1a:cc:a3:6c:90:e3:8c:e4:35:
         9a:d2:5a:c7:af:0a:78:81:7e:69:76:e1:66:c3:33:34:1e:c9:
         45:49:94:44:8c:75:4e:9b:fa:ec:10:5c:7b:2d:0e:86:ae:1d:
         de:d5:ad:51:31:68:0d:36:6a:db:23:cd:7c:8e:0b:e2:f4:e7:
         db:96:9a:3b:1b:1b:e9:bc:10:79:6b:01:33:99:be:f6:b7:c3:
         0b:61:2d:61:b9:bf:f8:b1:4b:24:e5:90:0a:bd:72:06:c9:5c:
         19:d7:a1:54:b8:b8:4d:94:44:c8:3b:03:af:e8:ec:56:17:11:
         2b:57:d6:b0:fd:8e:7b:a7:07:59:a3:71:33:44:33:69:d8:ef:
         1b:12:a7:5f:11:b2:8c:a6:84:1b:09:37:28:b0:52:de:aa:f6:
         da:30:b0:28:d4:87:55:4e:61:fd:bf:38:72:96:d3:f8:bb:39:
         dd:cb:bb:fb:d6:51:a6:f1:b9:2a:ff:e0:b6:27:8a:39:b8:72:
         d2:19:79:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmyzNTRYNMsVUmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NDY0N2NhMmItN2ZlMS00Y2JlLWFkN2YtZGFjYjIyYWFlZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw+Unc3LcnTf8l8uw+JpGDXKJ8jQGiWKRnYn
IHbREPrtrDYoB6pzP5hAnremZwH/cqngmPrf21qYN+pmkJXPuXOqoT8y8IKs/ptI
PLZbMAKNitCURBsXdJQQP1FPML4itt5i2KxPUcyUFQlmoiWz0VDoaaWxF7Y65/ab
48j+EK9u6nFVdzbchU/HtE2iyglfDjNLjLUH5NtPLWvz3qU951RHA38Kg2b2zD8C
s0etUGl+bcBG6NO8TcA77FPtHOdZ9dVSHPNDrRQWEs2t6mWme85qSfPpgfB8npou
atoWqs1hGOlGoJfoeo798YsrB7XbLbd6WIAI+45O3JVbaNXt/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMroTi/qWhTOtM3z/7J7Fnc3NXSfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTI0OWJjZjItYzY1Ni0z
ZWQzLWI3ZWUtMWJmOWNhMjcxYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlHWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABt0lVfSGAWwAkAuCnmiCL6BRISvlfh1gNvWz/UdavSW5x8In+csxplK
O/SJrElq7O7TAfDDxP8mtLOQZwd/exrMo2yQ44zkNZrSWsevCniBfml24WbDMzQe
yUVJlESMdU6b+uwQXHstDoauHd7VrVExaA02atsjzXyOC+L059uWmjsbG+m8EHlr
ATOZvva3wwthLWG5v/ixSyTlkAq9cgbJXBnXoVS4uE2URMg7A6/o7FYXEStX1rD9
jnunB1mjcTNEM2nY7xsSp18RsoymhBsJNyiwUt6q9towsCjUh1VOYf2/OHKW0/i7
Od3Lu/vWUabxuSr/4LYnijm4ctIZeXI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:04 2026 by rpki-client