Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc3235e9-83b3-3a5c-a433-ee2afd9b4c32.roa
File:                     cc3235e9-83b3-3a5c-a433-ee2afd9b4c32.roa (raw, json)
Hash identifier:          AxGOjHbHGxf6/Kk6MAmgEcpVdLHGsw8GTEQ/bZFQHno=
Subject key identifier:   5B:E6:8D:45:92:16:DE:06:9E:55:9C:CB:C7:99:22:09:F7:84:8B:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B4BB0EFE51B26191F0140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc3235e9-83b3-3a5c-a433-ee2afd9b4c32.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.81.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:4b:b0:ef:e5:1b:26:19:1f:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=16078bc3-92b5-4026-831a-530a132f61cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:f8:5f:93:b6:77:bc:50:3a:c6:44:44:b1:
                    5c:7b:f9:3c:53:cc:c6:cf:77:ee:08:f6:ae:6e:93:
                    84:2d:af:1f:e7:f8:7a:ae:3c:6c:81:f6:d9:da:e4:
                    ac:7b:9b:ce:18:d2:29:d5:39:e1:2a:30:e3:e1:84:
                    53:10:48:07:f5:05:fc:97:99:12:8a:a5:42:32:e4:
                    24:e0:1c:0a:89:e4:c0:e6:79:29:dc:30:36:4f:c3:
                    36:c4:c2:e8:ad:e3:ac:f9:f9:09:62:ab:01:6c:c7:
                    7c:65:62:ea:90:c9:99:c4:62:42:bd:d5:17:69:4c:
                    98:30:3f:1a:fb:83:d7:6e:29:e9:ed:56:c9:7d:e2:
                    70:d9:4c:f3:59:4a:16:c7:bf:53:eb:90:4a:62:64:
                    51:b5:de:c6:1b:ff:4a:db:de:a7:f2:b2:5c:80:91:
                    b4:af:57:a3:88:58:49:8d:d9:72:70:a5:34:8f:9e:
                    79:e3:b8:ef:63:1d:5d:00:eb:e1:9f:59:da:d2:81:
                    47:e3:9a:84:b1:8e:9c:bc:d4:5f:c9:b9:b1:80:ae:
                    f2:1b:04:17:88:ce:21:8e:83:e4:d4:0e:1f:b9:13:
                    33:86:fa:c4:6e:08:b7:74:13:9b:d5:e8:bf:0c:bf:
                    79:0a:2a:4d:15:21:5e:81:a2:e0:34:0b:ac:3c:9d:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E6:8D:45:92:16:DE:06:9E:55:9C:CB:C7:99:22:09:F7:84:8B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc3235e9-83b3-3a5c-a433-ee2afd9b4c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:40:a6:7a:48:f4:df:ba:8a:fe:f3:61:fa:d4:ef:fd:54:
         54:76:1b:1d:e3:0b:0d:5e:34:53:b2:a2:47:b8:84:3b:d0:cf:
         aa:99:c3:7c:ab:ea:dd:bf:b9:0e:8a:a9:48:48:6a:79:dd:57:
         ca:fc:59:fd:a5:54:7f:eb:c0:48:72:8c:71:ee:52:bd:67:5d:
         15:74:1d:47:02:88:ad:21:91:b0:ed:aa:d3:cb:68:4f:39:b4:
         72:9e:c5:84:f5:dd:d5:3d:8f:0a:5a:c6:bf:0c:6e:e7:56:12:
         5f:f7:00:52:de:77:11:d6:8e:8d:bf:ce:bd:25:be:c2:1e:d3:
         f2:96:75:19:74:b1:0a:06:e6:49:7d:d5:cb:6c:fd:05:e1:02:
         42:b1:39:b5:36:43:91:6f:1d:2b:b5:c7:9b:64:7d:2b:9b:37:
         6e:4f:9d:a1:53:64:a6:06:9c:7e:1b:7a:93:f5:27:5c:56:13:
         c2:da:3b:19:a2:17:9b:3e:7e:cc:c7:ae:4d:e9:5d:49:12:b9:
         d6:9c:11:bb:be:ef:0d:5f:8d:f4:6b:d9:e9:05:e2:c5:8f:99:
         a4:33:a9:33:1c:c6:54:21:45:84:cf:c3:0b:d8:a5:f8:4b:69:
         a8:0f:53:42:48:4a:e6:43:5a:ec:c1:a3:7e:b0:53:71:b6:17:
         d3:15:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:48 2026 by rpki-client