Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa
File:                     cc71187c-a5e3-36c0-9308-1f78198cea29.roa (raw, json)
Hash identifier:          eAK2ETFsg89QtSo7+FJN4UW6KZM+Tn5rrTegiw9p6Mw=
Subject key identifier:   6E:BA:6E:28:3A:0C:65:28:53:40:CD:5A:CC:30:A8:9B:20:8B:A0:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49745CFAE8F5DA08147A8800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.82.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:5c:fa:e8:f5:da:08:14:7a:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9bd0e88f-4e75-44f6-b8da-32c82a657ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:6d:69:4f:1c:d6:34:46:cf:3d:b0:9d:fd:
                    ac:17:85:af:72:b2:7c:14:70:6e:cc:3d:92:e9:f1:
                    b3:1d:56:3a:05:91:65:71:32:4c:cd:d1:a6:2c:da:
                    75:99:08:45:4f:1b:48:53:fb:92:fa:88:c2:42:c0:
                    92:02:f1:c6:ec:eb:e8:4c:ab:b7:b0:93:f8:a4:ce:
                    c9:f9:cc:a8:4d:a9:0f:1a:e8:f4:42:ed:c1:d5:70:
                    b7:a7:5f:ac:c9:63:f7:b7:40:6e:47:a7:03:87:b6:
                    21:c8:20:32:5d:ba:11:b1:48:33:b0:9b:3a:e5:ed:
                    07:0f:13:e8:4d:8c:6c:b5:77:ac:8c:48:be:65:a5:
                    b6:4f:58:d6:0a:31:c1:a2:81:6f:8c:aa:08:6b:2c:
                    c3:11:d2:53:28:1a:0f:d4:b9:4a:a4:d8:30:6b:7a:
                    28:ab:9d:ba:5e:7f:2e:b9:bb:02:6f:9c:c1:1c:0e:
                    1d:44:57:ae:76:dc:4c:91:91:d4:c0:cf:8a:50:6d:
                    d9:9e:03:eb:42:9a:2f:f8:2b:b2:0d:4d:5a:9c:9b:
                    70:11:11:9a:d9:5a:31:57:39:60:24:b4:d4:c9:2c:
                    c7:b3:4a:1a:1b:a2:a6:72:ec:78:98:78:de:3b:d7:
                    23:72:53:be:57:c4:76:e4:fb:b4:3e:24:72:b5:79:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:6E:28:3A:0C:65:28:53:40:CD:5A:CC:30:A8:9B:20:8B:A0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc71187c-a5e3-36c0-9308-1f78198cea29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9a:2b:a4:de:7d:15:d7:51:8e:06:ec:43:22:df:7f:39:48:
         89:de:87:4c:1d:12:1c:39:dd:cb:ae:13:2b:58:7b:79:25:4a:
         c1:af:c4:ba:74:63:bf:7d:23:8c:23:d6:d2:57:14:43:fa:3f:
         44:b6:99:68:e1:44:ff:7a:e7:b7:a4:ec:d0:23:2c:db:b3:bb:
         41:48:e1:2b:2d:98:3b:71:9d:6e:19:7c:5d:35:39:4e:ab:4f:
         52:02:48:8e:87:5d:b6:83:0e:d5:c5:f4:81:f8:8d:7f:f8:1c:
         9f:1f:ee:2c:17:d9:e6:bb:52:0d:f6:63:6b:ec:0c:29:f5:87:
         bc:ab:bd:74:11:ec:25:d1:3f:fd:67:4d:07:47:5f:2e:b8:12:
         88:e0:f0:7e:84:6a:b4:de:bd:3b:0a:b5:cd:1e:31:bf:d5:a3:
         45:f8:20:50:45:b9:1c:71:db:2b:0f:1e:c8:1b:cb:d9:88:28:
         8a:6b:77:a9:95:75:a4:d8:dd:c6:69:cc:40:a9:f5:33:81:5e:
         81:a8:48:b1:bb:a0:2d:f2:c2:52:1d:bf:de:01:e3:25:90:f1:
         8a:13:b0:b5:e7:d8:a4:02:9d:48:73:72:90:29:1d:95:19:d0:
         12:26:c5:f8:3a:7a:c6:fb:81:a8:c4:b8:d2:c3:a2:3a:23:0b:
         ce:4e:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:49:03 2026 by rpki-client