Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0ea18c0-3c1e-31d2-8ed6-7b707ac9eacb.roa
File:                     d0ea18c0-3c1e-31d2-8ed6-7b707ac9eacb.roa (raw, json)
Hash identifier:          j4DG3Hss4lAq9GqCN+Hd4OsAmN1S8ylq7rnQpQFnI4Q=
Subject key identifier:   5D:A6:7C:57:01:EE:28:EB:42:74:AF:05:87:57:EC:55:AA:6F:50:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D0BE1193EBFC5C5BC2C20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0ea18c0-3c1e-31d2-8ed6-7b707ac9eacb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        50.81.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:0b:e1:19:3e:bf:c5:c5:bc:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=47e87eb6-ca92-44da-9339-20b5b8a1c06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:ef:27:40:26:49:f1:f0:a6:37:63:4d:1e:
                    69:15:34:78:23:7d:be:d7:3a:22:b6:bf:3c:a6:cb:
                    5b:f9:49:10:fd:13:78:cd:f1:56:0a:44:5e:50:df:
                    e0:a7:b3:ed:f1:a9:80:04:84:0e:7c:73:0e:65:7d:
                    ce:39:a0:a4:5d:64:e2:ee:b9:db:82:d8:66:08:66:
                    7f:d6:b9:1b:ad:9c:0b:83:33:21:bd:c0:da:68:da:
                    16:84:a8:2f:58:7c:13:d0:a6:9b:35:60:46:0d:6a:
                    f1:fc:59:52:13:e6:fc:66:ef:a0:ec:9e:b2:a7:20:
                    27:72:e1:a6:ee:77:69:0e:77:d9:36:a1:2f:5b:96:
                    3d:c0:0e:68:af:8f:35:7a:49:a2:81:c7:d4:62:39:
                    e7:b7:94:b7:3d:8e:b9:e3:16:66:58:d8:41:b7:3c:
                    80:0f:b7:4a:f9:6e:b6:7d:16:80:62:d2:d4:86:3c:
                    eb:9e:67:d9:fd:94:3b:dd:30:a0:19:71:eb:bb:be:
                    fb:df:e0:7f:b4:38:ee:22:a9:a7:a6:87:6b:5d:a3:
                    f3:f7:f8:dc:30:2d:e4:27:43:e7:f4:e2:f0:35:0a:
                    18:41:a5:e6:87:36:0a:c3:73:11:71:41:0c:8b:e6:
                    51:b8:67:0a:6e:82:e3:02:06:26:d5:80:56:1c:32:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:7C:57:01:EE:28:EB:42:74:AF:05:87:57:EC:55:AA:6F:50:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0ea18c0-3c1e-31d2-8ed6-7b707ac9eacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:99:10:e8:34:80:f4:27:8f:62:e2:ca:ba:6c:b8:34:11:
         52:4a:aa:28:fb:f0:3a:32:4f:bf:8c:f2:0e:24:8e:a3:34:38:
         44:42:c9:15:da:85:3c:df:42:b9:82:ea:aa:f8:cc:0c:9a:8c:
         b2:8d:5e:e3:90:99:7f:b3:e5:94:d3:da:05:6c:be:6b:cb:24:
         a1:15:ae:74:ed:e9:6b:1c:25:d8:c9:71:fe:f3:2a:2d:5c:7a:
         c7:42:ca:6a:dc:49:be:4d:90:72:18:e7:43:be:48:ef:ff:70:
         c6:14:d8:d9:1b:2a:93:e9:2a:12:b0:30:48:a5:ae:0e:0c:04:
         31:1a:1b:13:39:30:8c:ee:2d:5d:6c:92:55:03:42:16:02:46:
         4e:20:ba:1a:78:0c:68:29:ee:8b:bc:cf:19:27:2e:7e:24:74:
         ef:05:60:6a:81:a9:a0:1f:f4:22:d1:1f:47:26:e1:9a:ef:dd:
         f0:a6:3e:90:85:89:62:5a:2b:fd:1e:e4:a8:26:b4:cc:71:30:
         5b:4b:85:81:7c:af:29:69:9c:3d:10:aa:57:8d:3f:33:44:83:
         89:dd:84:c6:31:5a:e4:be:5c:d9:23:c8:fa:cf:d8:19:9e:ab:
         f1:f7:4e:61:e0:59:4b:d1:1c:10:d5:0b:7f:74:fa:81:7e:bd:
         f9:8a:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:42 2026 by rpki-client