Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4417a05-1616-38bb-ad9a-a42efc0978ad.roa
File:                     e4417a05-1616-38bb-ad9a-a42efc0978ad.roa (raw, json)
Hash identifier:          VCiS9A2AQVvlkGqBEfP7tmoH4sW2jRoPo2aEvxyUMk4=
Subject key identifier:   5F:6E:B0:00:91:9B:39:A4:59:4D:9D:60:74:09:AE:0A:07:B5:35:97
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F480D40E8CC15E7AFE4821500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4417a05-1616-38bb-ad9a-a42efc0978ad.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        50.82.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:40:e8:cc:15:e7:af:e4:82:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=3794449a-1d2b-4d01-a40e-51d167576700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:45:22:7b:12:64:c7:c7:c6:44:e2:f9:9e:
                    11:58:47:1f:89:b0:e0:db:54:00:68:c7:fe:c4:43:
                    af:13:b6:db:18:0c:83:4a:7a:8b:93:e1:e7:0d:d4:
                    54:b3:dc:5d:21:5d:a0:f1:ef:cf:1f:17:39:cc:11:
                    11:02:82:d3:9c:96:90:1e:12:fc:27:7f:ec:1d:58:
                    08:81:22:af:af:d0:7d:b1:b8:c9:36:ba:e9:7f:d9:
                    30:db:fb:0c:1a:ea:a1:92:13:6b:62:34:17:66:eb:
                    d3:31:23:f1:33:7b:21:80:35:81:6c:5a:79:a9:40:
                    10:e3:d2:f9:4a:63:28:0c:f7:90:47:21:a9:7a:06:
                    95:07:dd:1e:67:92:7c:7f:94:01:95:44:86:f8:ca:
                    6b:a7:1a:d2:1d:35:e9:8b:ca:7b:54:72:14:97:41:
                    a1:59:6e:cb:c6:43:cb:fb:19:35:16:1f:f8:27:cb:
                    f8:3d:9e:ec:04:5f:b3:20:40:54:31:56:ef:5c:b3:
                    44:fd:de:6e:80:b0:79:a5:5f:b1:be:9a:36:39:ba:
                    16:5f:8d:53:9b:5c:f3:83:fb:d2:d9:b0:f6:fd:a2:
                    ab:e0:ed:34:ff:e1:cc:2f:94:43:55:48:55:9d:50:
                    7c:b6:db:4d:67:8a:c7:01:ff:d9:ef:45:9c:d8:c9:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6E:B0:00:91:9B:39:A4:59:4D:9D:60:74:09:AE:0A:07:B5:35:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4417a05-1616-38bb-ad9a-a42efc0978ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:f0:3d:09:9b:42:56:87:3d:dc:35:7a:96:e5:44:64:e7:
         30:d8:c6:6d:18:0e:48:4a:64:29:a0:00:ba:25:89:ec:ea:d4:
         ff:ef:83:e7:ea:c4:4e:54:e1:39:af:bb:76:73:4f:56:4a:f2:
         64:98:26:d2:ca:af:e1:74:4f:88:70:5b:4e:56:f4:55:a2:3f:
         f2:43:93:57:65:44:cb:9d:cd:76:a0:c0:ba:ad:38:36:45:f4:
         e3:fb:1e:ff:67:5e:d6:9b:d9:84:38:ce:3f:1f:68:48:55:b4:
         55:d6:5c:7c:0c:dc:66:0a:a9:34:25:f7:6e:9d:df:6a:71:f4:
         39:d0:02:aa:84:19:28:c3:22:fb:11:2f:ff:2c:67:14:f6:8d:
         77:fa:08:f0:ec:8e:a3:bf:91:1d:a1:91:73:9e:16:ed:38:f5:
         30:43:9d:12:cf:e7:82:e2:a8:1a:99:97:90:b8:62:e7:7f:c8:
         90:bf:93:04:a5:3f:39:70:be:ac:72:b3:b9:1f:21:b7:4d:d9:
         50:36:b8:72:38:71:22:96:9f:21:93:a0:32:f6:49:00:b8:55:
         da:b6:9e:a1:b4:8b:fb:b5:55:f2:6a:94:7a:ea:c4:b5:f8:e4:
         45:bd:9b:05:ac:22:65:44:d7:0c:fa:41:66:21:b5:41:91:ed:
         8e:ef:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:46:26 2026 by rpki-client