Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa
File:                     cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa (raw, json)
Hash identifier:          yDo4IFEjff6Lek2H05pjQYibooHDJkps9vqSQRU+/qE=
Subject key identifier:   69:35:64:32:01:1C:D4:51:D4:EC:5C:0B:18:D3:33:AD:B1:5B:CD:B0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D773A6D26189792EF17720680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        50.81.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6d:26:18:97:92:ef:17:72:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=6dd27b8e-edb5-49d5-ab74-8d032eee1a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:77:96:bc:e1:3f:82:a0:2b:93:54:78:4d:
                    14:9b:e9:ad:9e:e7:a6:f6:d0:23:ce:eb:6c:00:84:
                    38:70:f9:40:f4:a5:92:e3:09:94:a5:04:ed:9f:96:
                    dc:eb:da:b0:85:01:8e:d2:42:88:0a:62:66:ca:c0:
                    1d:81:a6:b4:50:6d:03:b3:14:07:f2:89:cc:fd:de:
                    53:ee:6e:2b:06:d9:97:42:c7:33:a2:39:38:84:89:
                    c5:d9:b1:21:48:5d:e4:fb:e7:3d:34:b2:93:2b:c5:
                    06:d7:92:0b:9f:0a:9f:f8:da:c1:06:69:d8:02:a7:
                    5d:c7:76:3a:1c:56:29:58:c5:f8:0d:0d:da:eb:f9:
                    c2:70:24:14:bd:71:2a:56:25:02:40:c4:20:89:53:
                    2f:58:e7:8a:b2:02:d1:5e:1d:7c:3b:1c:e1:3c:49:
                    f0:02:4c:5d:a9:ba:c1:bc:1b:79:48:e3:7d:06:6a:
                    0c:80:24:20:bc:57:bc:14:bc:b4:67:d4:6a:bb:de:
                    c7:e2:fe:64:ec:96:1a:40:b1:ba:23:7c:1e:9b:47:
                    c3:72:4c:b4:7f:cf:bb:ea:1e:fa:28:57:69:9d:9a:
                    10:e6:e6:6d:10:e4:bf:07:84:a6:e9:27:2b:d9:f6:
                    ca:ad:56:67:b3:a3:29:79:1d:d3:8d:1d:ae:cb:a9:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:35:64:32:01:1C:D4:51:D4:EC:5C:0B:18:D3:33:AD:B1:5B:CD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:af:5d:95:c6:76:1a:aa:e4:76:f4:2d:b9:83:34:db:58:cf:
         49:33:72:a8:2f:cd:e3:92:42:8c:d6:2f:b2:34:f9:b2:f7:61:
         46:2c:f7:aa:a7:77:c8:91:b2:0d:1d:5b:6a:87:eb:93:a9:05:
         c3:5f:57:c4:a8:8a:a1:bd:79:40:47:ec:e8:4c:a2:1d:e4:c2:
         73:72:83:d6:64:71:33:9d:07:71:23:62:8f:f5:f8:c5:43:5f:
         89:04:33:03:68:cc:c2:f4:74:5d:c8:ea:4d:f4:27:c8:4a:be:
         f3:8b:be:e0:1e:4e:27:52:15:cb:64:a0:2e:3f:b9:b2:6c:3c:
         40:e6:88:9b:8c:cc:72:5b:93:b5:24:f0:09:13:52:ce:53:6a:
         94:17:96:1a:82:fa:cc:6b:72:95:fd:d6:f4:de:5a:e6:72:d3:
         e2:a9:70:f6:cc:30:48:de:f1:36:45:a4:22:29:6e:d0:0d:ea:
         ec:8f:79:46:a7:de:59:8b:f2:ce:e7:02:49:3a:ac:40:66:0b:
         c8:3f:c4:f1:a1:44:88:88:e4:8d:c1:2b:4b:3b:e5:c9:d4:61:
         f9:39:08:80:da:3a:0f:60:a0:94:44:bd:07:3a:f9:50:44:08:
         8c:0f:18:9f:3d:33:88:76:47:89:9e:40:86:e2:1f:91:c4:8c:
         d7:4c:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:14 2026 by rpki-client