Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa
File:                     d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa (raw, json)
Hash identifier:          LylJJyolCEDAxzxTj1D+GvTeg0bxYUug6xns9tlF1mk=
Subject key identifier:   48:D9:AD:23:56:0A:CB:8E:FB:2E:C0:BC:44:A9:26:07:89:56:51:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F268D004514F6617D96B534C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        50.81.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:00:45:14:f6:61:7d:96:b5:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=385ba7e6-a76c-4631-9c6c-5f91f60d9b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:05:af:cd:c2:c4:75:f5:88:74:e0:45:7c:
                    28:2d:31:cb:f1:ff:a6:84:49:8f:36:d5:e2:8c:e4:
                    72:50:2f:d4:eb:8d:1d:c5:d8:b5:28:f6:75:a7:99:
                    45:5c:0a:aa:b3:ba:ac:9c:81:82:fc:92:ae:67:d4:
                    3d:f1:c2:34:5f:21:c8:8c:e6:98:16:24:7b:a2:1b:
                    85:69:70:3a:32:63:f3:2b:2d:43:1a:ff:19:a9:ad:
                    81:48:94:07:d3:cd:bb:0f:32:d4:6f:25:e4:29:3b:
                    78:3a:81:3f:ec:2e:82:42:99:07:14:1b:94:4a:82:
                    4c:08:cb:63:22:4b:4b:ff:d9:02:ec:d2:cd:80:f2:
                    c2:bf:35:3d:f3:3d:7d:d6:d4:56:66:3d:48:c1:bd:
                    4f:2e:53:8e:05:b5:55:0d:bf:a8:ad:0c:15:39:df:
                    ae:2b:0c:59:8c:8d:bd:db:6a:9e:95:53:52:9f:e9:
                    1c:6b:5f:b1:03:33:cf:92:bf:ee:fd:c1:73:7b:c9:
                    fc:56:c6:4d:64:98:4f:c4:dc:6f:bf:9f:20:76:10:
                    fa:fb:7b:5e:38:c3:d3:21:e1:4a:6e:17:94:bb:ea:
                    f2:8b:7f:44:6c:2a:f6:ef:e6:bd:74:bb:ce:e0:0c:
                    6b:7c:88:d7:5a:5c:c0:12:2f:4e:46:3a:08:a2:d1:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D9:AD:23:56:0A:CB:8E:FB:2E:C0:BC:44:A9:26:07:89:56:51:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9d71937-4bf5-340b-ad60-a6cabdeab03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:26:59:25:e4:0b:3a:19:31:05:0f:97:8d:45:f6:68:16:
         5a:8a:3d:fb:f9:e8:42:75:36:c4:c6:b4:c3:ad:1e:06:1a:ff:
         39:89:21:9d:4f:7a:dd:37:7a:05:3e:0b:ed:4c:2e:34:69:68:
         00:c8:18:89:f6:6b:d7:40:0b:d0:0c:52:6d:70:6e:c7:0f:db:
         cd:75:04:14:5f:02:89:5f:e9:e9:2f:da:20:3b:8c:df:f0:2e:
         79:a1:4e:c8:00:98:71:cc:04:7d:f9:e9:05:a8:b4:41:8a:16:
         19:87:35:01:c1:a4:0d:5b:89:b8:f8:46:8f:63:9b:87:31:61:
         9c:02:03:13:cb:e2:a0:1c:6a:fe:f8:55:21:be:eb:e0:86:df:
         53:0b:57:0f:3b:ee:62:70:21:55:9f:5e:84:2d:09:58:6f:c8:
         a0:77:cb:84:06:f6:1f:c8:99:fd:3f:3d:77:c2:4a:73:77:39:
         0d:40:42:40:51:da:02:a8:56:8e:1f:82:13:06:45:56:ea:89:
         b1:a1:f5:e6:b4:39:f7:5a:bc:97:be:26:44:77:9e:6d:13:9a:
         b1:50:06:79:0c:52:1d:f0:8f:8c:27:aa:b9:db:0a:1c:8b:01:
         82:5e:ed:60:60:92:d4:4f:9f:af:a3:e9:8d:93:1b:65:b8:9d:
         22:43:bb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:33:20 2026 by rpki-client