Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9dd847a-d6cc-3368-8c50-6c4c8c2257b3.roa
File:                     c9dd847a-d6cc-3368-8c50-6c4c8c2257b3.roa (raw, json)
Hash identifier:          xz061qs91UM0tWn9wNatI7jPIspde121vHbXpBkNQ3g=
Subject key identifier:   76:DF:E4:0C:3A:D8:05:84:1B:EE:36:35:73:1F:BB:E4:16:BA:8A:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B3CF4FFE943F5D2166C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9dd847a-d6cc-3368-8c50-6c4c8c2257b3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.83.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:3c:f4:ff:e9:43:f5:d2:16:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a6b1f7d0-8c76-4952-b487-348519b57460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:85:84:f3:be:11:07:96:fb:b2:5c:d1:8c:
                    f1:6a:64:55:14:50:01:e9:b0:09:52:ab:a8:9f:db:
                    f5:42:a5:de:0c:03:f5:b1:3a:ae:07:3e:03:b0:7e:
                    ec:ce:9d:e8:54:8b:09:f2:54:9d:38:2d:f0:f8:40:
                    23:15:54:a2:12:1e:d9:bf:0e:1a:a5:bf:3d:d5:71:
                    10:8c:ca:96:6e:b7:83:91:9e:7b:44:a9:98:0a:73:
                    42:33:81:97:dd:36:00:2a:58:40:31:58:76:65:a3:
                    ab:0f:55:9a:d0:ce:ad:f7:50:f1:e5:af:e2:b4:8b:
                    27:ee:66:bc:80:b7:a2:50:00:16:4a:1d:76:5f:f7:
                    08:cd:08:d8:c2:72:91:c7:66:13:f7:7a:a0:07:9f:
                    b1:27:a2:17:cb:35:af:d5:1d:04:45:3a:6d:e1:58:
                    51:ed:b0:07:d5:f8:d8:6c:27:1e:cf:4a:8b:95:85:
                    9e:29:75:7f:cf:f6:49:e1:85:3a:c0:1f:03:80:03:
                    c1:2e:f9:20:26:6d:88:bb:73:92:54:7d:3e:a4:62:
                    6c:85:bb:ca:66:44:72:60:26:f7:bf:7d:85:c5:18:
                    00:e3:84:0a:14:43:3c:87:ce:1f:14:ee:c3:b3:58:
                    73:e8:69:01:a5:f6:65:a3:63:1a:8f:73:c3:c4:ff:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:E4:0C:3A:D8:05:84:1B:EE:36:35:73:1F:BB:E4:16:BA:8A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9dd847a-d6cc-3368-8c50-6c4c8c2257b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:82:8f:a1:b8:16:a0:a6:3f:ad:55:ca:43:b1:1a:5b:0e:
         b8:55:93:8e:54:9c:6f:0d:83:9d:cd:0e:28:e9:7e:91:4d:cd:
         aa:6a:63:5a:c3:aa:d4:98:c9:ad:13:1e:8e:9d:d5:18:5b:38:
         e3:6a:5a:e6:e3:95:7a:f3:ef:39:63:30:bb:6a:70:9c:40:81:
         cf:c6:d5:89:b3:7e:88:3e:91:9b:80:a0:56:63:66:f1:11:53:
         6c:8b:c6:8b:9e:30:86:7f:51:5b:a4:82:d1:6c:96:40:52:be:
         3c:68:66:8d:9b:9d:11:88:2d:21:18:27:97:5c:7a:c7:0c:c4:
         2d:bd:f4:69:2c:36:73:f8:a2:dd:89:7f:ae:82:99:df:df:7d:
         c9:a7:5d:a4:3e:25:19:a5:75:5d:de:42:87:b7:0a:6b:f1:a1:
         df:4c:30:3e:02:96:4c:ac:36:39:77:74:58:d3:a5:17:5b:92:
         fc:57:90:d7:c8:86:ce:f2:e6:c3:8e:0c:14:25:9c:9b:a5:90:
         97:f1:d4:52:3a:69:19:89:e3:76:61:89:d2:33:78:f1:bc:ab:
         46:85:bd:1c:13:19:3c:66:88:34:f7:f1:76:04:d9:e8:c6:1f:
         1f:47:d9:bf:43:41:ef:de:13:00:b5:c2:a6:df:0c:c6:92:dd:
         22:00:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:38 2026 by rpki-client