Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95c2bea4-445d-332d-8d40-a1d928d01941.roa
File:                     95c2bea4-445d-332d-8d40-a1d928d01941.roa (raw, json)
Hash identifier:          ud33UCbjuRXOaGOHhUk4EoLIs6VnT+vBxgfHhZwgvLE=
Subject key identifier:   20:7A:6C:2E:E5:63:FB:89:D4:6C:51:D5:2D:D7:D8:95:9F:09:C8:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498AEC99EE8C5A62A7CDC740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95c2bea4-445d-332d-8d40-a1d928d01941.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.81.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ec:99:ee:8c:5a:62:a7:cd:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e70b5c7-4581-4068-8377-f38e0811d104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:62:77:e7:75:9c:75:44:bb:b8:89:d3:10:
                    82:ab:78:a2:28:e7:79:47:9a:1c:dd:10:61:4a:59:
                    8f:ef:f1:ff:ea:f7:22:b4:c0:9c:7b:66:8a:fd:e6:
                    24:46:5e:7c:7b:ff:14:0b:4c:59:02:f2:10:86:79:
                    8b:a6:0d:25:8f:32:8f:67:41:ba:d5:11:6d:13:6b:
                    b0:f3:c8:c0:49:80:49:93:ac:d6:d4:1e:42:c8:fb:
                    13:7d:6e:9f:03:7f:15:37:2e:b7:5a:43:0c:d0:ce:
                    e8:15:83:ec:eb:ce:1a:d2:cd:06:8c:26:eb:45:59:
                    dc:42:ea:89:63:90:28:61:18:1e:cb:23:af:59:98:
                    81:dc:1b:68:7b:e4:71:f2:14:9e:2a:d4:e4:89:db:
                    8a:20:25:1f:21:ea:f5:57:bc:87:29:4d:d0:dd:19:
                    42:96:0d:01:ca:d4:dc:12:95:87:3c:20:8b:3d:45:
                    b3:f6:8b:60:48:86:99:d3:5d:76:4b:29:34:f2:e0:
                    7d:fd:aa:db:7c:b4:bb:be:20:69:7f:27:d3:40:b7:
                    33:45:f9:c3:99:5e:ca:17:f4:69:88:78:2e:36:e0:
                    d9:a7:69:48:23:e9:66:c2:9c:5b:37:e4:cc:01:d8:
                    00:fa:88:5f:8d:94:04:a8:2b:65:61:e7:9c:f2:dc:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:6C:2E:E5:63:FB:89:D4:6C:51:D5:2D:D7:D8:95:9F:09:C8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95c2bea4-445d-332d-8d40-a1d928d01941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:7f:be:78:e1:19:c3:e9:36:fc:6b:cd:ae:dd:be:42:59:
         43:e2:1b:e7:8e:21:23:9a:f4:c2:49:6c:ae:49:69:64:1d:64:
         d5:19:5b:79:5e:d2:75:52:0f:93:d3:f2:ae:0d:10:6e:0f:79:
         c4:d1:23:f4:4b:33:f2:4b:96:1b:20:81:2c:2b:37:04:ee:98:
         d3:97:f3:a4:f4:9d:15:5d:b1:ed:26:a2:f0:a5:50:3c:b8:2e:
         8e:0b:61:39:b1:94:77:d0:66:a6:38:ea:dd:e4:fa:5c:2a:ac:
         e4:37:cb:5c:49:c0:13:16:44:02:6e:0d:44:a7:6a:00:e8:30:
         8f:45:9f:03:75:22:23:a2:78:53:32:9c:86:99:78:ff:e7:34:
         f6:7d:4f:98:3e:7e:6a:15:29:c4:8d:a5:03:48:e2:58:10:2f:
         c1:18:03:c9:6c:45:a4:56:8b:62:59:92:c7:67:4b:23:b9:9f:
         89:39:d5:99:c5:07:20:52:1a:42:b3:d7:ee:60:49:de:1b:c0:
         6f:89:37:09:a5:84:32:b8:94:cf:64:47:c7:c9:8f:61:83:4b:
         0b:03:85:b4:c8:7b:f7:1c:65:9a:f2:96:52:d5:99:d6:47:0d:
         59:2f:a6:af:e2:58:35:0f:b3:84:6f:c8:a5:22:53:13:9f:dd:
         a9:e8:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:54:09 2026 by rpki-client