Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfca212-e740-3bd2-9142-f9542dedbcdf.roa
File:                     ddfca212-e740-3bd2-9142-f9542dedbcdf.roa (raw, json)
Hash identifier:          sHSJtdv3ZSGCXcmM6a3Dk4fMjXP2CZpCVH52jLK1Fbc=
Subject key identifier:   87:E1:D4:96:FF:09:00:16:80:81:81:C2:B2:D0:BB:46:B6:A0:BB:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B48B8E2244DE533ADAD40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfca212-e740-3bd2-9142-f9542dedbcdf.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        50.83.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:48:b8:e2:24:4d:e5:33:ad:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a5782147-9915-4309-b974-cb3edcb32ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:72:4a:b7:fa:58:a2:53:3d:2b:5f:5c:d8:
                    2f:97:9d:6f:09:ba:13:82:7c:7c:eb:63:2f:bc:a8:
                    a5:50:1e:79:04:53:63:3d:de:c9:5c:9e:f9:28:5b:
                    9d:03:ea:10:c6:65:84:b1:9a:6a:8f:d5:72:61:bf:
                    98:a2:8d:2b:9e:b8:49:27:c2:5c:29:36:63:93:ca:
                    00:d3:00:7d:b8:a2:d7:df:cb:a9:88:f3:d6:1f:97:
                    36:e5:61:db:7d:e5:10:25:f0:c9:ba:58:42:26:d1:
                    96:b6:69:60:cf:1a:10:14:71:00:cc:19:7b:53:29:
                    0d:76:01:39:44:a4:39:70:54:51:9a:eb:9b:02:4d:
                    34:16:cd:79:01:e0:3d:6d:87:5d:3e:3b:5d:5c:dd:
                    6a:63:ba:3d:a1:85:02:44:6c:22:ea:ac:52:cb:c8:
                    6d:40:ec:ea:4e:82:34:ce:cd:d8:3c:8c:5d:3c:41:
                    7d:ed:bf:e3:b0:22:ad:ff:68:b8:36:17:23:db:7a:
                    57:ad:42:2c:b8:94:f3:29:66:c6:0f:f9:c2:8c:a1:
                    b6:7d:1c:f0:43:66:52:84:e4:dd:48:70:14:26:16:
                    44:92:01:a5:79:a4:ae:28:23:f5:13:d1:b2:72:ea:
                    34:c4:23:2d:5a:99:40:2e:1e:ed:dc:76:61:b9:d1:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E1:D4:96:FF:09:00:16:80:81:81:C2:B2:D0:BB:46:B6:A0:BB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddfca212-e740-3bd2-9142-f9542dedbcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:ba:3d:d1:71:b1:cd:2a:b0:fb:a1:c1:e8:a8:65:66:a9:
         c9:17:79:15:f5:6d:55:38:df:95:48:be:cf:85:69:bc:cf:4b:
         cd:ac:eb:89:35:bb:56:0d:be:a4:26:d6:af:2a:e0:a5:42:76:
         0d:49:01:db:d5:9b:e3:f5:d2:d5:87:61:bb:63:36:6c:7b:84:
         62:02:45:8b:0d:ef:23:e3:ce:36:7e:77:46:7f:8a:fc:a0:47:
         41:c3:3b:ea:28:26:e7:da:d4:a2:b7:84:86:5b:3e:92:1d:78:
         86:65:a0:f5:43:fd:e0:c1:96:18:5b:c5:6a:eb:b8:d2:3c:4f:
         83:19:16:51:54:0b:09:2a:3d:79:77:95:b1:7a:e4:10:3d:37:
         e5:1a:11:fe:48:31:62:35:a1:41:00:98:f7:88:c0:be:46:6d:
         5e:8f:52:71:f3:c5:6b:42:28:f8:a7:b1:71:6c:34:82:96:e5:
         ba:c2:36:d1:cc:41:28:e9:24:17:a5:58:d1:46:92:2e:7a:b4:
         f2:ee:75:46:bd:25:05:40:41:c5:dc:7c:c5:7b:cc:19:ec:98:
         5d:6a:83:b9:8c:b2:1e:1d:ab:90:91:b4:00:20:9d:24:b9:f1:
         59:85:94:ba:cd:a8:1b:30:8a:f8:4f:2a:f6:29:bb:81:84:ef:
         2d:10:6a:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0i44iRN5TOtrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YTU3ODIxNDctOTkxNS00MzA5LWI5NzQtY2IzZWRjYjMyYWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxlySrf6WKJTPStfXNgvl51vCboTgnx862Mv
vKilUB55BFNjPd7JXJ75KFudA+oQxmWEsZpqj9VyYb+Yoo0rnrhJJ8JcKTZjk8oA
0wB9uKLX38upiPPWH5c25WHbfeUQJfDJulhCJtGWtmlgzxoQFHEAzBl7UykNdgE5
RKQ5cFRRmuubAk00Fs15AeA9bYddPjtdXN1qY7o9oYUCRGwi6qxSy8htQOzqToI0
zs3YPIxdPEF97b/jsCKt/2i4Nhcj23pXrUIsuJTzKWbGD/nCjKG2fRzwQ2ZShOTd
SHAUJhZEkgGleaSuKCP1E9Gycuo0xCMtWplALh7t3HZhudGLTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfh1Jb/CQAWgIGBwrLQu0a2oLs8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRmY2EyMTItZTc0MC0z
YmQyLTkxNDItZjk1NDJkZWRiY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/Uuj3RcbHNKrD7ocHoqGVmqckXeRX1bVU435VIvs+FabzPS82s64k1
u1YNvqQm1q8q4KVCdg1JAdvVm+P10tWHYbtjNmx7hGICRYsN7yPjzjZ+d0Z/ivyg
R0HDO+ooJufa1KK3hIZbPpIdeIZloPVD/eDBlhhbxWrruNI8T4MZFlFUCwkqPXl3
lbF65BA9N+UaEf5IMWI1oUEAmPeIwL5GbV6PUnHzxWtCKPinsXFsNIKW5brCNtHM
QSjpJBelWNFGki56tPLudUa9JQVAQcXcfMV7zBnsmF1qg7mMsh4dq5CRtAAgnSS5
8VmFlLrNqBswivhPKvYpu4GE7y0QamY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:20 2026 by rpki-client