Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d0ece0-141c-3a6d-9e61-74cdb51ff81a.roa
File:                     b8d0ece0-141c-3a6d-9e61-74cdb51ff81a.roa (raw, json)
Hash identifier:          7jL9iC1lmpgx8oCjgCooMoWEdvmE0JnAN0kFjZvMYbE=
Subject key identifier:   C3:CD:D1:60:D7:61:AE:CA:24:3C:AB:E6:8F:E5:1B:F6:95:EE:1D:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBD624E8109C85F9BCFAA800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d0ece0-141c-3a6d-9e61-74cdb51ff81a.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     19905
IP address blocks:        50.82.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:24:e8:10:9c:85:f9:bc:fa:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=5c6df48c-6b89-499e-b5e6-7743c0dc7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:c2:8b:e0:23:df:81:04:54:a0:68:01:fc:
                    65:e5:0b:c9:6e:50:d2:52:36:b4:9f:49:6e:c9:56:
                    ac:59:63:4c:6e:98:51:e8:32:8e:22:4f:75:5f:04:
                    11:b7:34:76:12:9f:d2:5f:70:eb:1c:fd:a8:6a:28:
                    a4:60:aa:23:99:7c:e6:11:94:a6:52:69:db:24:bd:
                    aa:c5:36:9b:ea:2a:3e:41:19:ce:d7:4b:f0:45:b3:
                    f0:87:63:40:e4:0a:e1:6c:52:1b:be:fc:9b:68:8e:
                    eb:8a:3f:a2:5f:d6:7c:ad:a8:48:62:36:d8:3e:2e:
                    f9:3e:6b:d1:53:0e:1a:d7:90:bd:66:6b:a0:5b:63:
                    1a:0e:8e:0a:c9:df:a8:d7:a1:b2:4a:6f:01:46:27:
                    5b:3b:26:e3:a1:32:22:eb:f0:a1:51:5b:4a:4f:ee:
                    4c:2a:68:f8:d9:8e:54:73:b3:e1:61:43:20:82:f8:
                    32:b6:d9:f9:db:cf:b9:f8:0a:c3:12:d3:ab:77:6d:
                    77:1f:1a:eb:b9:73:d8:54:96:31:d6:26:17:3c:56:
                    31:e4:19:df:4d:59:39:11:dc:1b:43:24:5e:5a:c2:
                    27:08:20:f2:cc:07:f9:e5:3b:d8:97:34:44:77:74:
                    2d:27:b1:2a:11:8a:fb:af:eb:02:73:bc:04:fd:0a:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:D1:60:D7:61:AE:CA:24:3C:AB:E6:8F:E5:1B:F6:95:EE:1D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d0ece0-141c-3a6d-9e61-74cdb51ff81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:69:c3:6f:20:62:91:dd:ca:88:9f:d7:dd:bf:9c:39:46:
         0b:a7:88:96:38:59:b5:ab:2e:2a:67:b7:c4:33:0e:ad:b9:27:
         a3:41:e0:da:0f:df:bb:af:69:3d:cb:52:83:13:6a:cf:af:ef:
         7b:fe:eb:60:94:39:9e:75:8c:07:2f:5d:ac:10:15:0a:a7:b0:
         b4:49:79:b3:a7:a6:39:82:42:97:72:33:d3:95:8c:7d:39:ec:
         14:77:cb:aa:1b:5d:92:91:1f:2f:c6:ab:01:f5:de:38:d7:6b:
         ef:ea:54:82:dd:c8:53:b0:86:12:87:ba:a3:2d:2c:c9:b5:e7:
         69:35:60:23:6d:c7:dc:b7:54:ea:1b:6f:2d:be:5e:eb:e9:2d:
         f3:f9:eb:a2:2b:cf:ac:36:69:09:14:5d:03:48:42:8a:73:39:
         6a:bc:fe:0d:db:e6:9b:a4:b8:03:1f:ce:a8:b8:8a:54:29:44:
         fe:20:aa:0a:20:c9:28:15:7c:99:ec:ce:77:9d:df:23:94:fb:
         d1:76:71:5e:62:ef:86:e0:b9:ec:9f:84:5d:f0:99:82:84:93:
         62:ea:6d:3a:64:53:6a:fc:f6:43:5b:6c:3f:cd:58:7e:01:b0:
         6f:7e:82:5d:1b:d2:64:8a:b0:67:c0:f4:b6:fe:b5:37:fb:87:
         c8:87:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:50 2026 by rpki-client