Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb197716-717e-31fb-9705-bb8412837510.roa
File:                     bb197716-717e-31fb-9705-bb8412837510.roa (raw, json)
Hash identifier:          A26iBAr3Cd5F8iycZY74CSnXg3D90l+alJCcGn3PFIk=
Subject key identifier:   3C:DD:27:E9:FD:83:7C:0D:68:3E:E4:24:2D:43:AF:5D:40:CA:8C:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F10379D45607620B22B66CE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb197716-717e-31fb-9705-bb8412837510.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        50.83.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9d:45:60:76:20:b2:2b:66:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=b504fb90-237d-4c85-994d-f894c5b1efc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:7a:3d:34:0c:30:5a:fc:b9:f2:73:a1:dc:
                    33:84:7c:41:9b:7b:c0:fb:7c:0f:e0:54:43:4d:f2:
                    13:85:37:61:c4:95:ee:4a:8e:13:78:7b:e7:98:ec:
                    f9:db:18:61:8b:fd:9e:3a:bb:59:6c:5f:8d:90:da:
                    df:ac:c0:bc:b6:85:8e:08:10:c5:52:af:80:2a:78:
                    07:2c:13:61:f1:e5:82:c2:e4:6f:e4:ab:b0:07:53:
                    fd:75:22:7d:80:ce:69:02:b9:d1:22:60:2d:e1:a2:
                    3c:f1:5e:3d:5e:39:8a:49:03:2a:ee:52:42:74:bf:
                    bb:05:f7:59:c2:df:bf:de:cb:96:8f:65:88:4c:79:
                    5d:e7:4c:00:a4:21:b6:ee:c8:b5:4f:f9:01:0c:8a:
                    0a:ff:e4:71:0a:20:ed:81:2a:0c:86:86:73:0b:18:
                    6d:68:38:77:0a:dd:a4:dc:dc:90:72:b1:65:c8:91:
                    d9:5c:65:35:5b:6d:7c:dd:be:61:c0:41:4a:80:13:
                    03:8f:4d:06:17:ee:ff:7a:f5:b9:9b:63:17:b9:69:
                    79:4b:10:5c:0d:8f:cf:ab:a0:b1:f6:86:98:7c:42:
                    7c:7a:ea:4d:9f:62:b1:a7:1c:fc:ea:c4:c6:d6:6b:
                    1d:a5:8f:c3:d9:6e:bf:a3:40:65:0b:f0:78:93:8c:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:27:E9:FD:83:7C:0D:68:3E:E4:24:2D:43:AF:5D:40:CA:8C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb197716-717e-31fb-9705-bb8412837510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:3d:84:b5:ca:e8:70:d3:ed:06:32:72:0b:0b:57:33:f0:
         a1:3f:81:9e:af:bb:eb:e3:4c:83:22:c2:1f:70:be:14:c2:85:
         ef:b3:ea:93:79:a6:dd:df:13:81:e7:32:91:67:dd:fc:bc:9b:
         93:af:ff:4f:bc:32:08:0b:79:e3:fa:1a:8b:1f:14:08:60:70:
         a4:02:8f:a3:02:0a:2a:0c:e9:a8:93:ac:8b:81:21:e4:6d:c0:
         ea:a7:07:5f:a7:c9:da:f5:51:00:38:c1:dd:84:e3:16:18:24:
         b5:ff:f5:ec:3a:9f:10:a7:2b:5f:14:8e:7e:ee:c9:20:6d:9b:
         a6:74:64:ec:c7:b8:2a:4d:76:97:f2:0b:d1:e5:45:ed:3b:ff:
         5c:52:a4:b5:42:89:86:ca:57:79:10:21:f4:28:7b:8d:88:32:
         26:a8:d2:00:16:d3:39:72:77:7e:0e:11:e1:40:fd:31:37:fd:
         f8:8f:7f:68:34:d9:a9:a4:cd:7d:30:07:81:ad:d5:68:54:08:
         3e:21:a9:3b:98:33:be:54:e4:0a:26:7b:bf:0b:4b:57:bf:8f:
         5b:35:a9:c4:6f:00:62:65:46:d6:09:1f:35:f7:52:b9:32:73:
         74:b9:69:9d:85:5a:b4:8e:03:70:15:70:54:86:eb:80:a4:71:
         64:d7:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:38:49 2026 by rpki-client