Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa
File:                     cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa (raw, json)
Hash identifier:          j8BKbvyYxBtmGAc3joXukyhhCK84x44s87LJ10UZqiY=
Subject key identifier:   57:DC:6B:CC:5E:90:9C:69:78:2F:79:8C:EB:A4:60:4A:2B:CD:71:8A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974AB0240000AF48D8A4400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.81.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ab:02:40:00:0a:f4:8d:8a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e3f24f47-4b4d-4a4b-b3e7-21b734004516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:db:cf:dd:ee:19:84:a2:7e:00:5c:88:a6:
                    e2:64:7f:59:04:65:3e:4e:5d:13:d8:8a:15:e4:62:
                    7a:40:7a:4b:39:1a:3c:dd:00:4e:83:1b:fc:ea:61:
                    ef:30:4b:ec:51:9f:09:01:d7:f2:20:b3:ea:fd:8d:
                    a3:b8:3e:b5:49:da:af:66:01:29:3e:15:59:e7:e9:
                    32:4e:09:d0:ef:2f:d5:a5:38:71:57:46:32:69:05:
                    d1:18:59:64:e9:aa:2d:ae:65:d0:c0:ae:06:b8:f7:
                    f9:cb:c7:9d:df:79:88:fd:13:a8:1e:ee:cc:48:dd:
                    71:00:35:9d:f7:a6:f2:f8:31:ad:0b:59:78:27:f1:
                    24:5f:f5:8b:af:98:a5:07:24:20:41:29:53:0c:82:
                    40:d1:2e:1f:63:67:84:97:e4:2f:b0:43:7d:f1:4f:
                    69:12:9a:5a:9c:e2:1e:79:88:ed:eb:a8:d7:2f:72:
                    6d:83:17:7e:9d:35:42:12:a2:c2:e0:29:81:d1:26:
                    71:19:39:1a:44:88:b1:72:11:75:ef:64:f1:69:69:
                    ca:63:09:3c:dc:79:ac:4c:de:d0:78:03:66:ff:07:
                    f4:65:8b:11:87:2e:75:c4:6a:c8:b5:14:e8:a1:cc:
                    4f:44:b9:8c:03:c6:32:86:9e:4c:86:32:71:21:83:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:6B:CC:5E:90:9C:69:78:2F:79:8C:EB:A4:60:4A:2B:CD:71:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba0af28-0bed-3dd0-be2d-909eb82bd2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:56:21:c6:4a:71:48:f8:db:2a:cc:8f:69:64:1b:22:78:2e:
         0c:33:27:51:7a:d8:7a:06:cd:9e:de:4e:ca:83:e8:c5:58:56:
         47:a6:1d:1b:e2:a2:df:4e:13:de:df:7a:11:b6:c8:64:4f:8a:
         47:a3:82:80:5d:2f:af:b1:eb:dc:ed:bc:95:3f:cd:8a:3b:16:
         e5:82:ac:b8:68:59:3d:71:31:b6:09:48:e3:f6:72:46:5c:eb:
         f1:9b:7d:a6:ed:3b:34:f1:2d:fe:45:51:82:4e:37:86:3a:d7:
         4f:7e:72:3d:78:45:5c:87:7c:62:9a:3f:f2:54:91:2f:0a:0d:
         d0:44:5c:34:13:a7:61:37:45:35:3f:97:2e:6b:c3:6b:d4:02:
         d6:c7:4e:66:39:dd:77:95:4c:3b:ee:42:3f:e9:38:18:5f:89:
         b8:71:22:03:ef:39:75:d6:e7:ab:36:97:34:e8:74:b8:58:a6:
         a7:6c:10:2d:93:29:38:4c:f1:a0:13:82:f8:70:f5:33:f0:cb:
         0d:58:0a:69:3c:cf:7c:59:27:54:d9:de:16:a3:1c:e9:58:8f:
         d4:14:a6:f0:82:6f:18:f3:f3:88:52:39:5c:64:71:8d:97:69:
         a7:1d:c0:68:b3:a2:b9:b7:63:f7:94:e5:30:48:eb:18:b0:1a:
         c1:46:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:47:48 2026 by rpki-client