Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1253585b-7212-3fdf-b797-b5394a5fd0e7.roa
File:                     1253585b-7212-3fdf-b797-b5394a5fd0e7.roa (raw, json)
Hash identifier:          akk73FomWWiG0bbSd25ala/jz7DUqnkY/BFIpQkr9cU=
Subject key identifier:   3E:53:24:BB:DF:A8:78:80:F0:9D:24:DE:DE:E3:FC:BC:3A:6D:E5:2E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C326A7BB97665DAA4880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1253585b-7212-3fdf-b797-b5394a5fd0e7.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        50.82.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c3:26:a7:bb:97:66:5d:aa:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=3f091b3e-338f-4c22-b4da-f165a513ca58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:1b:c8:bb:e1:27:8d:e7:c3:34:91:9b:ae:
                    b7:ba:00:e2:39:76:43:c6:44:39:b5:ed:69:5b:ff:
                    ad:62:20:e1:10:ac:36:fb:3f:c5:0c:16:b9:08:cf:
                    3d:e6:d3:ca:27:f5:98:5e:84:37:a2:cc:e9:24:dc:
                    8a:4f:20:d3:84:a8:19:95:5b:8d:2c:16:d9:b6:9c:
                    b3:33:79:53:4e:ca:1a:bc:37:cb:19:89:58:1d:82:
                    d9:db:64:af:96:a1:ac:60:32:4d:ff:94:8a:06:05:
                    bc:fb:46:90:ec:e3:36:27:cd:4f:9c:9d:7b:f7:1d:
                    0b:61:5c:72:e1:90:cb:4f:95:a9:88:bb:45:a5:70:
                    d0:dc:c9:ba:fb:01:6c:92:75:68:03:a6:48:66:a6:
                    ec:33:87:19:6c:c8:1b:d0:0e:dd:f8:54:03:5e:9f:
                    35:e1:d0:15:49:df:25:82:7d:9c:38:00:ff:d0:01:
                    b0:8e:5e:74:6d:d2:09:33:9d:f4:19:5f:2b:7c:08:
                    13:72:10:10:ca:59:7f:b4:4d:b7:c7:14:cd:33:3e:
                    6f:e1:08:b1:a7:c3:37:81:95:c6:ff:75:82:4c:df:
                    e2:f9:65:ca:97:d1:21:fd:87:f0:20:7e:94:c8:26:
                    5d:d9:b8:59:e0:ef:1f:f9:27:6a:54:62:3f:1e:74:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:24:BB:DF:A8:78:80:F0:9D:24:DE:DE:E3:FC:BC:3A:6D:E5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1253585b-7212-3fdf-b797-b5394a5fd0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:fd:bb:6e:7a:48:fd:fb:b7:a2:8c:d6:a5:7b:da:99:46:
         f0:7e:e9:b2:ea:1f:57:3b:6d:c3:82:9d:cd:32:52:59:12:50:
         64:f6:ae:5c:06:fd:ff:e7:47:26:00:2f:55:77:6e:82:f8:c6:
         10:eb:ec:38:de:4a:76:69:f3:f9:18:4c:16:36:a0:ce:62:a9:
         fc:cf:8a:68:73:19:a8:50:2f:12:57:7d:e3:6d:11:48:98:0b:
         fd:b2:a4:f2:03:35:4e:37:c2:86:c5:44:1a:38:3f:82:c7:9f:
         4c:6f:49:a6:7a:d7:a3:1e:a1:b8:ce:28:28:3e:be:97:3a:78:
         1d:36:c9:c4:c7:50:ac:33:07:2f:18:eb:fa:ad:de:2f:a8:ef:
         6c:0f:f7:1f:ec:f5:d9:c9:25:68:8c:84:60:2f:c3:66:7c:b0:
         b6:9e:1d:1e:ca:76:b1:7b:f9:06:49:da:54:e9:46:5d:2d:d1:
         c9:67:70:5a:bd:a4:a3:ee:f1:c1:b7:d5:47:42:48:c9:39:33:
         05:12:23:de:62:e5:ab:35:11:05:50:11:be:ab:45:ee:63:5f:
         5a:e5:7b:b7:e5:72:1e:38:3d:ed:25:95:07:d9:c0:cd:79:a9:
         26:e7:e9:db:b3:82:b2:95:3c:40:f8:ed:06:31:6d:9f:4e:70:
         db:dd:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:12 2026 by rpki-client