Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfddb1aa-b9d0-3f8a-8d2f-0cae4e9b1a22.roa
File:                     cfddb1aa-b9d0-3f8a-8d2f-0cae4e9b1a22.roa (raw, json)
Hash identifier:          OQiuPYYDH2x57dMhdsYDMecLZaggqxxcqKAAQpgEQ+s=
Subject key identifier:   C7:D0:1F:A9:80:90:9D:C5:97:2C:1B:14:33:0C:E0:17:4E:01:C4:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B4D9C9D202D61B935A240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfddb1aa-b9d0-3f8a-8d2f-0cae4e9b1a22.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.80.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:4d:9c:9d:20:2d:61:b9:35:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d7785afd-fe06-466f-adf3-addabb499167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:88:33:d2:fe:f2:40:02:23:b9:cc:b1:c7:
                    81:8d:ba:fa:1b:ec:ba:36:db:32:b8:c3:1b:f8:eb:
                    83:2b:8b:9a:9e:38:ff:8d:96:8d:c8:80:37:82:05:
                    ad:e9:e5:d1:02:27:02:a0:6e:17:52:88:4c:b8:3a:
                    c5:f7:ac:55:ca:e4:a4:4f:93:b5:93:2b:99:46:92:
                    fc:da:bc:31:00:2c:ad:b3:e1:3d:ac:68:cc:b3:72:
                    f2:fd:9f:6e:e0:16:ca:f9:79:d3:c7:7b:10:d8:a6:
                    93:ec:03:73:50:a8:74:14:37:c1:ad:0e:94:7e:e0:
                    90:63:ee:80:58:5f:9c:91:c8:19:47:37:7e:2e:47:
                    b0:5e:03:44:51:7a:17:27:84:ad:19:82:ec:60:de:
                    c6:c5:b4:0b:8a:d3:9d:46:6e:a9:41:aa:fc:bd:58:
                    cb:16:58:59:74:30:f5:33:79:6e:8f:d7:d5:c8:a8:
                    76:10:43:02:8d:8a:f3:ed:06:a0:70:cc:84:f4:f0:
                    cd:f3:07:19:16:71:f3:fa:2c:3a:d5:a1:a6:ea:11:
                    8b:ab:19:46:4a:f6:83:6b:f0:9d:f9:af:b6:89:ed:
                    a6:dd:6e:f5:55:c4:1f:65:3c:95:98:65:ab:ee:6c:
                    c7:9a:89:f5:49:3f:1c:f0:5d:89:88:c5:25:8d:2c:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:1F:A9:80:90:9D:C5:97:2C:1B:14:33:0C:E0:17:4E:01:C4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfddb1aa-b9d0-3f8a-8d2f-0cae4e9b1a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:d1:df:0f:d9:ec:57:38:ad:c9:20:da:34:05:72:5b:3e:
         2e:1d:47:ef:f5:74:36:29:64:02:2c:04:fa:de:f1:07:62:8f:
         71:39:e0:e5:50:67:bc:c2:c6:e6:e3:2c:8d:03:2b:66:0d:a8:
         21:b7:79:80:53:4d:ac:98:f3:4e:fa:f3:1b:a2:48:7e:ce:78:
         b8:d0:a7:a0:b1:e8:05:32:b0:67:15:bd:85:4b:a0:f9:e3:94:
         93:09:a6:d0:a6:99:00:0d:b6:95:ac:05:2f:24:be:bb:4c:3f:
         13:0f:65:06:b5:e0:4f:ee:15:bc:4c:43:90:ea:72:a2:13:5f:
         8c:c6:45:bf:1d:e0:18:1a:70:f6:10:84:eb:69:8c:1b:45:b7:
         56:5a:49:5a:db:e9:18:ae:c0:f9:94:ee:7f:db:49:3a:7d:08:
         ed:4f:b0:07:ca:ab:0d:69:f0:89:c6:e1:23:f4:44:4c:f2:ba:
         44:f8:19:6c:0f:cb:5d:2f:3d:ba:25:aa:59:33:c4:1c:e7:70:
         37:22:2a:84:f9:d4:18:a3:50:2e:95:2f:bc:df:9a:24:76:83:
         73:41:eb:12:e2:ba:76:f6:4e:0b:d9:f6:4e:9c:e3:d9:63:16:
         e9:b3:96:14:d1:82:46:93:4a:41:7f:10:f1:4a:35:c7:9e:83:
         9e:72:f9:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm02cnSAtYbk1okAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZDc3ODVhZmQtZmUwNi00NjZmLWFkZjMtYWRkYWJiNDk5MTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyIM9L+8kACI7nMsceBjbr6G+y6NtsyuMMb
+OuDK4uanjj/jZaNyIA3ggWt6eXRAicCoG4XUohMuDrF96xVyuSkT5O1kyuZRpL8
2rwxACyts+E9rGjMs3Ly/Z9u4BbK+XnTx3sQ2KaT7ANzUKh0FDfBrQ6UfuCQY+6A
WF+ckcgZRzd+LkewXgNEUXoXJ4StGYLsYN7GxbQLitOdRm6pQar8vVjLFlhZdDD1
M3luj9fVyKh2EEMCjYrz7QagcMyE9PDN8wcZFnHz+iw61aGm6hGLqxlGSvaDa/Cd
+a+2ie2m3W71VcQfZTyVmGWr7mzHmon1ST8c8F2JiMUljSweVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfQH6mAkJ3FlywbFDMM4BdOAcSAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZkZGIxYWEtYjlkMC0z
ZjhhLThkMmYtMGNhZTRlOWIxYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADb20d8P2exXOK3JINo0BXJbPi4dR+/1dDYpZAIsBPre8Qdij3E54OVQ
Z7zCxubjLI0DK2YNqCG3eYBTTayY80768xuiSH7OeLjQp6Cx6AUysGcVvYVLoPnj
lJMJptCmmQANtpWsBS8kvrtMPxMPZQa14E/uFbxMQ5DqcqITX4zGRb8d4BgacPYQ
hOtpjBtFt1ZaSVrb6RiuwPmU7n/bSTp9CO1PsAfKqw1p8InG4SP0REzyukT4GWwP
y10vPbolqlkzxBzncDciKoT51BijUC6VL7zfmiR2g3NB6xLiunb2TgvZ9k6c49lj
FumzlhTRgkaTSkF/EPFKNceeg55y+WU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:29 2026 by rpki-client