Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/542c3db0-f3af-38c3-8315-66dda7d94a12.roa
File:                     542c3db0-f3af-38c3-8315-66dda7d94a12.roa (raw, json)
Hash identifier:          sw1XFSOElKez0nw+8zuZci08As7I7HzdVpohMHvH+Ks=
Subject key identifier:   9A:12:50:38:1A:7B:25:1D:B1:45:5C:DA:72:EB:33:B9:58:90:9A:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E1201E3F37E94077971A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/542c3db0-f3af-38c3-8315-66dda7d94a12.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.82.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:20:1e:3f:37:e9:40:77:97:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3d8762ac-5df4-4e14-850d-376c9ec87ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:d8:06:79:73:5c:16:79:1f:7c:3d:76:30:
                    bd:3b:30:90:0f:38:91:28:a7:ad:92:e5:7f:69:ac:
                    84:88:6d:0e:f5:94:83:ab:7f:5d:bb:0d:9d:30:8c:
                    72:d3:52:e7:95:6d:ce:e6:ce:b5:ae:7e:b7:a6:42:
                    a1:ba:a3:25:d1:f2:b0:eb:1a:81:da:a6:81:0c:f5:
                    87:8c:4b:e8:73:e9:92:87:a3:fa:29:f7:f8:6f:03:
                    18:0d:2a:ce:05:2d:a1:f1:93:c8:77:1e:7f:fb:95:
                    dd:cb:ef:23:9a:34:5d:93:23:2f:69:b5:f4:08:ec:
                    c7:77:57:05:97:32:f3:60:3d:11:8c:b3:85:d0:95:
                    07:3d:b8:6a:01:6d:59:8a:8c:cf:59:70:54:00:64:
                    01:49:3e:33:12:06:af:1e:81:f3:c2:e4:d0:a6:cd:
                    1b:55:84:35:b9:ad:43:23:14:69:b7:0c:a1:60:38:
                    bf:2f:8c:7b:8f:c6:c5:b0:e5:90:e8:87:4e:e6:49:
                    af:54:2e:6d:eb:0d:ba:bf:ca:73:57:56:57:35:ad:
                    86:7e:cd:a8:ee:0f:a5:d7:32:b0:c0:68:85:a1:0f:
                    87:e2:01:6e:22:47:8d:4c:c2:dc:63:85:df:66:ee:
                    70:51:c0:5f:91:54:ea:39:f4:85:8e:d2:5b:20:50:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:50:38:1A:7B:25:1D:B1:45:5C:DA:72:EB:33:B9:58:90:9A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/542c3db0-f3af-38c3-8315-66dda7d94a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:a9:03:eb:99:ed:5a:80:c6:bb:c9:dc:ea:cd:2b:b3:bc:
         44:41:93:7e:43:fb:65:07:b5:e0:60:e9:c0:5c:82:86:14:09:
         2e:54:9c:d4:ff:c0:5b:f7:b1:ec:58:7f:fa:31:5e:9e:de:10:
         f1:65:90:fc:2f:0d:bf:19:6b:85:c7:f3:65:6f:e8:2c:86:52:
         56:23:f8:fa:db:cc:b6:71:16:bd:22:c6:42:f0:0e:51:91:31:
         ae:23:a5:fd:5c:92:c4:65:fb:2d:1b:d0:f1:2f:a4:59:ec:ff:
         0e:39:30:bb:d1:00:2f:8f:2d:73:76:e4:07:85:18:b1:9c:76:
         9b:19:e7:c9:c8:4a:e7:f9:19:5a:a0:bf:9b:c3:3e:2a:7f:80:
         8d:2f:75:2f:50:25:48:3c:5d:93:f7:e8:42:36:1e:d5:da:bf:
         f4:fa:90:b6:e7:4d:28:10:e8:00:e0:bf:0b:d5:a6:56:b3:a4:
         2e:d4:4e:0e:a2:57:70:a5:0e:8c:a7:f8:fb:d8:bc:dd:69:6c:
         d7:56:c2:06:15:cb:f1:de:65:e4:55:c8:f7:83:cd:2f:d8:3a:
         11:9d:a8:f4:6d:cd:30:22:de:d5:d6:36:88:33:22:5a:07:0d:
         5e:c3:04:54:a0:67:49:7a:a8:26:1f:e2:33:29:53:3b:5c:88:
         75:80:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:23 2026 by rpki-client