Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa
File:                     a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa (raw, json)
Hash identifier:          g7WU9jsjvHvWGS38CvCljCeexYks+/yOTY4iWVYpXtY=
Subject key identifier:   8C:64:17:B4:D1:5A:48:D4:B5:0D:07:A2:AA:13:B5:42:07:C1:7D:F0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B3A8C117ED8CC139EFB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.83.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:3a:8c:11:7e:d8:cc:13:9e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=80c7f0c6-acbf-4b36-9ede-c3fb4dc49400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:34:5d:0c:d2:6e:06:0d:a1:44:cf:1f:65:ad:
                    aa:e7:49:cc:a7:e5:2c:de:10:92:34:fe:06:9e:01:
                    a9:10:b3:ab:42:e8:dd:a6:9a:9f:4e:b7:31:bc:a5:
                    97:d1:66:2a:92:09:47:0a:bf:ab:04:d0:a4:bc:77:
                    f3:7c:6d:88:21:ed:09:b8:da:1d:27:e3:28:3e:a8:
                    5f:07:20:ac:72:27:7b:5c:11:4e:4b:98:03:d4:ac:
                    73:0e:da:6a:92:49:42:9f:82:c1:08:da:74:a4:75:
                    f2:a5:34:d5:53:0d:08:5d:84:09:fa:1f:55:d8:53:
                    bb:fc:64:45:5c:62:20:31:02:3a:cc:75:80:29:be:
                    ea:bc:7b:f4:f1:86:b1:a5:d3:28:fb:1a:10:00:81:
                    b4:30:c8:22:4d:f0:69:20:d7:95:1a:c6:4a:5c:3c:
                    22:46:7e:d3:9e:91:8a:d0:c3:95:b9:a5:60:63:d9:
                    96:2a:51:3e:ea:10:5a:b6:8e:f6:76:13:ba:ed:62:
                    11:fb:53:f8:16:88:f9:27:53:cb:d3:a0:67:8d:76:
                    82:fe:d1:97:e1:1a:25:1e:04:9b:d3:09:03:db:e7:
                    c0:9d:fd:bf:c4:85:53:02:fd:5e:e6:4d:15:61:20:
                    ef:9d:ee:83:dc:9d:04:e6:8b:96:6d:d9:15:75:eb:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:17:B4:D1:5A:48:D4:B5:0D:07:A2:AA:13:B5:42:07:C1:7D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cf7135-07b0-3b69-8a11-a04827a8ca58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:0e:42:44:b2:6f:e7:91:f3:ce:71:72:a6:79:4c:82:a1:
         6e:85:6e:4a:8f:30:e7:eb:42:5b:9d:2e:46:e3:f4:f1:a2:90:
         aa:8d:eb:b4:33:74:5a:73:29:ca:97:50:3c:e5:97:2c:ad:23:
         58:48:91:83:b9:65:6c:f0:fd:34:ae:7a:c0:f3:60:5f:a7:aa:
         7e:25:a1:9c:9b:54:f5:a8:94:4c:a4:be:eb:d3:91:67:ac:36:
         49:45:18:47:8e:e0:60:c8:85:23:dc:ef:0c:e8:37:63:97:a5:
         21:52:f8:43:7a:92:de:92:b4:c9:05:f2:bb:58:d5:34:3d:46:
         ff:e0:a4:59:d9:82:0b:dd:d9:1a:9a:dc:e3:b9:f6:7a:cb:24:
         f1:b1:4d:66:89:50:66:93:a3:27:91:ef:23:f4:76:a3:a3:92:
         66:b3:4b:d1:12:65:75:e1:50:e1:50:91:5d:12:a5:94:1f:b2:
         05:9f:11:fb:7d:6a:3e:01:31:8a:74:7f:88:16:f1:b8:ea:40:
         bc:a9:da:bd:a6:e2:89:18:dc:3c:b2:c8:92:d8:d9:2c:e9:f7:
         95:7a:50:b5:7e:74:1f:56:02:4d:06:20:c1:de:f6:66:e1:f9:
         8d:bf:18:ee:b7:55:6f:a6:f4:f8:83:8b:ef:2b:12:06:66:30:
         db:24:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:22 2026 by rpki-client