Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa
File:                     21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa (raw, json)
Hash identifier:          gpK5nwYB/cuV4GVl69prpEwJAzRS4eUedpidE7OGId4=
Subject key identifier:   09:E3:D5:B0:3D:8E:A7:ED:D7:E2:DC:5A:1A:E4:CB:E7:0F:32:8F:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11FAACAB78944534ED680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.80.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1f:aa:ca:b7:89:44:53:4e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b19ef01d-ed28-457f-92b9-ca0db336a8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:c9:65:af:e6:f2:c3:96:35:eb:88:f7:b6:
                    bf:a0:fe:4a:99:5d:34:5b:56:b4:8b:8b:93:57:60:
                    6d:e7:f4:62:d1:f7:85:77:24:aa:44:2d:01:32:df:
                    7e:d7:75:d0:84:b7:3b:ca:ca:4b:3a:a6:10:be:58:
                    98:9b:2e:e4:c0:b9:a4:69:46:d6:da:fe:a6:84:e8:
                    0a:6e:50:4a:87:ce:79:4f:ee:56:54:7c:f4:d9:a9:
                    4c:58:54:7a:4c:c7:a1:c7:58:fd:64:c2:67:1a:9d:
                    8f:f6:36:7f:11:19:38:3d:18:c8:1b:06:6a:2e:c7:
                    7d:e4:07:c7:94:47:16:4f:82:0a:6e:5d:c4:21:ce:
                    a2:05:e6:25:dc:c7:41:de:a6:8f:4d:75:81:c7:ee:
                    ab:44:4d:fd:3e:e9:c8:b7:8e:95:e1:83:7e:2a:19:
                    d8:cf:de:cf:9c:b5:48:0e:a7:3b:33:d9:4f:8f:53:
                    70:f9:13:cd:e0:8f:ed:c4:05:cc:16:0d:ae:c8:4d:
                    8d:91:28:53:a0:2d:47:3e:dc:1d:a7:cd:c8:6f:e2:
                    18:1a:d4:62:0d:7d:5c:01:c8:c8:25:0f:87:9b:49:
                    fa:58:8c:3f:7b:ca:69:b8:68:e4:c0:9d:38:2d:79:
                    cb:19:35:47:f2:26:14:ed:5b:ed:4d:69:6e:63:48:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:D5:B0:3D:8E:A7:ED:D7:E2:DC:5A:1A:E4:CB:E7:0F:32:8F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21423aa6-b44c-3a08-bbea-25ce21f33c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:95:7b:37:c6:5f:ae:47:93:13:d9:fd:d5:85:44:6f:c0:
         86:a9:9d:46:f2:65:fe:5c:c9:46:ea:60:72:00:91:70:a3:d2:
         c6:ca:c8:77:dc:06:7c:12:66:53:6a:83:35:ef:11:4b:b8:68:
         65:c4:b9:cf:9a:54:d3:cc:62:cb:51:28:3d:67:5a:81:f1:80:
         e9:ab:00:1a:e8:57:9c:0d:ec:bf:15:fd:84:d6:bb:65:1d:ff:
         00:d9:77:ea:ab:63:f8:ce:83:2d:c4:eb:83:94:38:64:ff:14:
         fc:dc:54:2a:02:3a:2f:9f:4e:f6:7b:b1:39:88:2b:d3:50:40:
         11:11:22:47:d5:ba:99:13:76:0e:34:25:83:f8:ee:0d:b1:5a:
         9e:17:3d:12:a3:19:d1:96:50:30:69:21:f0:a8:95:e4:f2:b1:
         77:df:1e:6d:ce:93:c0:58:36:41:e0:91:47:3d:b8:97:78:ff:
         26:eb:d0:5f:4d:dc:ce:d9:a7:86:92:43:1b:00:51:22:7f:1a:
         33:dc:d8:a5:19:e2:f5:2f:83:67:34:87:0c:dc:9a:ec:89:95:
         c8:3c:f5:75:3c:f3:72:94:d6:fe:6f:aa:9b:e7:3c:58:58:3f:
         96:26:91:10:48:27:34:8d:e3:ef:97:10:10:e9:45:ed:af:4d:
         16:24:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:05 2026 by rpki-client