Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5442f751-6c9c-3cf3-a2bd-71a3e46ec94e.roa
File:                     5442f751-6c9c-3cf3-a2bd-71a3e46ec94e.roa (raw, json)
Hash identifier:          P0wYSLWoAp2+FUcdZRErJNIyp/Biq0Dg+fPIMmfxCDg=
Subject key identifier:   74:BC:AD:10:51:1A:19:3B:1B:54:56:AB:4B:0B:3C:9D:E6:79:9B:97
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA2837D8965A2201626200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5442f751-6c9c-3cf3-a2bd-71a3e46ec94e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.81.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:28:37:d8:96:5a:22:01:62:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=49f8f4b2-18d7-4c68-ac15-25a9c13b2965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:53:9b:2b:39:6f:f7:3f:e9:84:78:33:92:
                    c0:04:81:8c:0d:ba:84:f5:f3:32:91:2b:b0:6f:be:
                    c6:0c:1b:64:e0:2c:eb:71:ad:7d:e0:67:6a:f3:53:
                    d7:65:9e:80:b4:c0:c3:14:7e:1e:25:d0:8e:74:4c:
                    00:13:75:2c:60:3f:94:48:d6:47:90:cd:ed:1b:c2:
                    26:ab:fe:9a:f9:34:ed:1e:6a:47:a3:7c:fa:a0:b9:
                    f3:2a:77:36:c6:ad:cb:a5:01:1f:7b:b8:47:5d:17:
                    11:91:ab:0a:28:fa:c8:af:3e:25:ee:0c:75:f8:a6:
                    a7:74:b0:eb:af:ca:28:75:8f:53:06:40:46:c1:86:
                    51:b7:cc:18:5c:7a:6e:3c:1c:5d:bf:52:91:40:ae:
                    9d:50:8a:b0:f9:c3:29:46:d9:4d:06:c8:ac:0b:25:
                    a7:70:c2:8a:3f:7b:bf:ff:93:ee:3b:11:76:aa:da:
                    bc:f5:1d:64:98:2f:d3:66:49:2c:e2:7d:1b:1f:a2:
                    08:4f:3f:16:d5:18:86:a3:35:a8:db:f9:42:83:9a:
                    63:20:e6:cc:89:11:0f:a2:fc:2e:c8:00:44:ec:b4:
                    b8:25:4b:d3:d8:76:55:4e:8e:cf:4b:57:a1:d0:7f:
                    79:a7:01:f5:c6:a6:0c:4e:b2:06:97:cf:75:0f:a9:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:AD:10:51:1A:19:3B:1B:54:56:AB:4B:0B:3C:9D:E6:79:9B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5442f751-6c9c-3cf3-a2bd-71a3e46ec94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:c9:eb:3f:4c:d3:b1:d1:5f:83:de:a2:02:c7:ef:b5:b0:
         14:3e:30:79:a1:89:ae:ac:75:da:7e:d0:ed:ee:23:07:c8:ff:
         e9:f2:88:4e:b3:0a:c7:04:50:93:54:a7:3e:9e:ce:c4:62:df:
         63:36:3a:8e:df:01:11:4f:62:e5:6d:aa:3d:87:76:ce:ee:e8:
         cf:2e:af:ab:28:00:98:f9:3c:5a:bc:95:f1:ba:ec:04:5c:45:
         48:d7:66:51:42:e0:08:5f:10:36:c4:6b:a5:ed:84:17:81:16:
         7c:ec:be:59:de:1a:21:d3:e5:29:85:65:cb:bb:46:3f:4a:10:
         63:6c:b9:fe:94:f7:79:03:d7:90:c0:98:72:05:25:3a:df:2f:
         6b:75:41:06:6e:21:ed:3f:08:b4:6a:4a:c3:d5:7f:4a:41:bc:
         d6:17:1c:58:7b:47:08:a1:aa:bd:3b:56:39:e7:51:55:43:bd:
         ae:b2:b2:9e:1d:d7:e4:f9:63:c8:a9:f2:d5:0c:3a:0d:13:6e:
         3a:d5:b7:7a:5b:86:a2:92:58:17:16:c5:2c:6d:33:f2:78:1a:
         82:39:a6:58:d6:b0:c6:4b:7f:b1:db:8e:6f:c0:e6:ca:8d:e3:
         15:38:ab:4c:01:f5:91:e6:da:aa:f4:31:ef:61:74:53:bc:14:
         51:70:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:12 2026 by rpki-client