Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa
File:                     5d753468-a17a-30c1-8300-866c964857a4.roa (raw, json)
Hash identifier:          wN4S6gDYboyl5/xLgoTk5pxH+2ASqylQL1o3CAVt7Wk=
Subject key identifier:   77:B9:87:2D:60:CA:C7:7D:B1:21:05:39:D3:C5:6C:AF:F0:0F:CD:C4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DEB141AED2F0AB7622C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        50.82.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:eb:14:1a:ed:2f:0a:b7:62:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=1c651158-0aa8-445f-8922-c0f1ddcfbf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:b8:e9:8f:1f:5c:e5:68:5b:53:c2:b3:08:
                    f6:67:45:e1:8c:71:a6:fb:2c:bd:62:88:67:bc:7a:
                    42:f1:c2:d0:11:8f:2d:80:ec:9d:78:f4:70:44:11:
                    a5:d8:14:0d:3c:1c:dc:6d:65:70:10:52:b4:de:cd:
                    8c:a1:53:f2:b6:27:18:c4:fb:0a:da:8f:28:fc:49:
                    d5:b9:b1:9e:a9:58:da:e5:a7:ca:89:70:8d:34:f7:
                    52:c3:10:6f:81:5b:00:7a:49:3a:42:cc:a7:2b:1d:
                    24:3d:50:3d:8e:1a:13:16:af:e9:90:ba:9a:56:02:
                    76:d0:66:75:10:46:d0:7c:1b:45:0b:9a:1b:b4:58:
                    a1:ac:f0:ed:da:32:bc:d9:8d:32:13:02:d0:e7:63:
                    1c:98:4f:61:a9:7b:6e:ca:0d:fc:7a:66:27:1b:06:
                    9d:f6:bd:9e:ec:4d:cc:19:01:58:13:d4:91:36:2d:
                    09:a8:8b:a3:bc:4a:a4:3d:d9:4e:6a:ae:5d:0f:9d:
                    b8:48:a6:18:39:fe:36:63:cc:ff:42:fe:4e:61:be:
                    26:46:2e:12:88:32:a0:00:c0:c1:e4:cf:d2:f0:f2:
                    c1:a7:54:92:b0:a4:a8:9e:f8:16:84:41:fe:0a:f8:
                    1b:17:c3:e5:b5:db:32:7a:a6:ad:04:78:d8:a1:fd:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:87:2D:60:CA:C7:7D:B1:21:05:39:D3:C5:6C:AF:F0:0F:CD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d753468-a17a-30c1-8300-866c964857a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:47:b2:1c:f9:86:bb:35:67:bb:52:46:66:d1:d7:87:8f:02:
         b0:58:53:24:0b:fa:ae:1e:8c:60:d4:2b:f6:2a:37:8a:64:51:
         92:e1:bd:63:60:dc:3c:d2:3e:c6:f3:28:82:35:56:a1:b4:fd:
         dc:a0:c6:ae:db:6f:41:f0:ec:6b:72:e3:26:46:2e:cb:ec:2b:
         3f:ab:18:b9:db:10:db:46:85:45:bd:bc:47:f4:c9:52:a6:9c:
         ae:93:f7:4d:45:6f:c9:9a:39:5b:1a:31:74:c4:53:ae:3b:02:
         f9:90:9f:dc:ae:32:50:49:1e:f0:49:10:99:5c:cb:b5:ab:ed:
         ed:31:67:5e:fa:35:d8:bd:e8:0f:5f:9f:93:a1:5b:11:25:16:
         30:c9:d3:9d:04:2c:1e:49:59:c6:4e:4d:38:d3:0a:44:fc:81:
         d0:16:ae:12:21:40:7c:d1:3a:ca:22:4b:b3:62:1b:c9:81:8e:
         42:43:3d:22:00:6e:75:ba:77:86:76:86:59:3d:bb:fa:90:0c:
         3d:11:22:24:1a:6b:58:fb:fb:2b:1b:c2:f6:8c:cb:bd:79:e2:
         3e:40:a3:07:58:3c:38:72:9f:b2:c1:35:b8:02:03:ba:ba:f9:
         fd:58:72:56:1c:de:d0:63:6a:2a:96:ed:82:f2:cd:9f:e8:1a:
         ce:23:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:56:58 2026 by rpki-client