Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa
File:                     5d753468-a17a-30c1-8300-866c964857a4.roa (raw, json)
Hash identifier:          +nQ2UUjFcLqa2zlrZ35gqmcjkqV9u9XHUzjWX8KRqiU=
Subject key identifier:   EE:C3:69:42:57:3A:40:75:6B:0B:29:EA:50:6D:6E:D4:21:B4:5D:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AACD23BC65840BE2CAEC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.82.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:cd:23:bc:65:84:0b:e2:ca:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=204cf719-4439-4a62-9e41-886b76ba0d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:56:f8:d3:92:f1:4e:3b:fb:e6:c3:cc:e9:
                    6f:20:b5:61:20:88:cb:76:87:60:e9:9e:c5:f3:15:
                    eb:6f:05:5a:6c:7a:08:b4:da:4c:2c:b4:02:a0:35:
                    6f:20:a5:1b:4d:59:e1:5a:3e:a7:ed:af:af:01:79:
                    18:b0:97:5f:6a:7e:c4:83:07:b6:12:e9:37:97:67:
                    25:81:9e:cf:5e:48:78:66:8f:1e:b0:49:e8:95:05:
                    a6:41:ca:84:b0:eb:d4:55:7d:10:fd:6b:9a:96:28:
                    b9:71:0e:77:3d:96:b1:be:be:40:da:dc:d0:13:1f:
                    b0:c1:c6:3b:5c:0f:fb:99:cb:b1:cd:30:ed:bb:77:
                    56:6c:8e:67:b3:54:c2:06:e3:4e:d4:69:5c:34:ff:
                    95:89:22:6c:fa:2d:75:87:55:e6:7e:5a:51:7f:56:
                    63:2e:3b:75:dc:9b:50:96:9a:9d:06:05:80:31:5f:
                    c1:7b:42:f3:1b:3a:31:f5:ea:3e:9c:88:4b:6d:67:
                    a0:31:50:60:2e:77:fe:2e:a7:16:a1:8d:7b:4d:e3:
                    61:44:71:45:b5:23:fd:11:f3:fb:43:97:1e:32:77:
                    ca:74:a4:c0:22:67:ce:d4:d8:77:86:3f:e7:07:3f:
                    fd:5e:f9:56:70:b8:5b:fe:b8:d3:ec:51:07:6e:7d:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:69:42:57:3A:40:75:6B:0B:29:EA:50:6D:6E:D4:21:B4:5D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:88:71:02:15:9d:40:5f:d2:b1:cc:d2:0d:67:ea:f3:24:34:
         34:3f:0e:27:f3:6a:09:77:dc:1a:e6:0c:bb:81:a0:d3:03:a9:
         dc:21:e5:2d:b6:d6:28:dd:8a:5b:c5:ee:1f:fd:bc:48:a0:8f:
         f8:52:8b:cc:96:8b:eb:0e:15:78:e0:a5:97:0a:49:9e:6d:f2:
         2a:fb:0c:e2:59:8e:df:da:5d:ec:b1:9d:9e:3c:eb:88:e0:83:
         7c:98:db:07:de:d4:64:5f:79:af:83:9b:18:4f:ea:e9:35:95:
         fd:85:72:08:2a:01:ed:b2:96:60:5c:a8:12:58:95:8c:ec:b0:
         8c:c6:85:65:3a:07:44:9f:7a:5f:de:21:c0:61:68:ae:b4:e9:
         c8:84:d3:d6:82:4d:2e:d8:54:20:3a:36:52:fc:d4:1b:a6:72:
         82:c3:3f:c5:19:ed:c1:9b:5f:29:09:57:fe:e3:4f:35:52:f3:
         21:6f:a9:e7:1c:90:61:20:3a:b1:93:42:0b:d2:01:9c:f5:bb:
         16:0a:fa:d7:3a:dd:77:d7:10:cd:d4:65:24:47:ab:0f:6c:55:
         29:87:e5:bd:af:b9:d3:54:c8:45:5d:c4:2c:73:14:47:0d:0b:
         bb:88:a5:ac:a3:64:d8:22:75:6e:e5:61:dc:6c:69:cb:2c:a9:
         da:b8:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:20 2026 by rpki-client