Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa
File:                     cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa (raw, json)
Hash identifier:          LGn1S6h9ywduWWb5mj4oF2WDLjseFWB4yYZx8AEcTv8=
Subject key identifier:   88:38:BE:05:E3:06:E4:99:DB:FB:B0:34:E6:4E:67:12:86:1B:32:7D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498BABA053D31F9EFE1FB1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.80.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:ab:a0:53:d3:1f:9e:fe:1f:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0e46a142-f4e8-4d27-8f63-cba4ab019537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:0d:b2:dc:33:9f:3f:45:8d:5e:9e:e1:db:
                    94:54:33:94:6b:a9:a4:82:26:2e:a9:79:6c:f1:c3:
                    19:47:a2:75:d9:25:b8:cc:46:6d:28:6b:2c:0b:1b:
                    0a:54:01:73:5f:7c:2b:28:b1:90:76:da:40:36:77:
                    fa:9e:b9:3f:b0:54:6c:7d:ee:7e:9c:41:d7:a5:11:
                    f7:2e:c7:d4:da:6c:76:66:48:3c:cf:41:a8:d2:85:
                    f6:30:57:0b:d3:06:a4:5f:aa:56:ab:1b:64:f6:de:
                    5e:7c:e1:16:85:16:b9:5f:df:ef:fc:d7:d7:7f:ed:
                    32:0a:9e:72:c3:24:95:fb:dd:4f:52:ca:34:98:ad:
                    74:f2:d2:5e:c1:30:3b:70:e3:c3:bd:fb:0b:55:c9:
                    1c:b1:76:07:cd:06:3d:b7:6a:a3:17:6d:94:a8:4e:
                    f3:5f:93:63:0b:a5:c0:76:e8:fa:70:b3:73:64:d6:
                    d6:dc:07:cd:ca:8c:37:e5:74:68:1d:28:57:21:66:
                    24:39:3a:e7:4e:fd:c0:cd:b0:5b:f4:7f:e5:67:e5:
                    da:ff:f7:97:12:10:e3:1c:72:65:00:ae:20:28:d5:
                    25:08:3a:82:bc:31:64:34:8c:44:2a:eb:c7:c0:39:
                    50:ba:84:d8:82:ce:c3:cb:4b:85:3c:92:4e:56:9b:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:38:BE:05:E3:06:E4:99:DB:FB:B0:34:E6:4E:67:12:86:1B:32:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf28d7b0-b4b5-3474-af8d-5c84aacc5418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:fa:ab:d2:d9:f9:69:1a:0c:03:cd:be:0c:78:11:7a:fb:
         0e:53:72:28:07:2b:3f:77:05:0a:da:9e:8f:cc:f4:be:dc:74:
         4d:ac:35:61:0b:29:b2:1c:d4:09:53:f3:71:07:60:37:25:fb:
         4f:c7:18:85:81:a9:3c:d0:98:cd:75:aa:95:19:85:e4:92:13:
         d0:48:ab:b9:ec:90:3a:89:2e:68:68:da:5c:f1:3f:62:df:64:
         4f:4c:59:fe:15:3b:7c:ac:00:f2:aa:a1:44:60:48:78:0a:45:
         55:a9:66:05:46:13:df:a4:2b:fa:67:e9:da:af:de:ef:27:65:
         cd:62:15:f8:5c:6e:0c:b5:96:53:ab:d8:c3:70:e2:24:13:42:
         ad:b9:9b:1a:c3:b0:31:14:fb:2c:e7:5a:b6:be:a2:5e:ab:b9:
         97:e2:23:c2:58:2c:63:f7:e0:a5:60:21:eb:36:a6:9b:db:97:
         40:b5:3e:5e:38:db:20:8e:7f:84:8c:d7:33:f5:bd:a9:3d:f3:
         3f:38:8d:70:96:05:8b:d4:7a:67:c4:40:8f:ca:c2:ea:1b:3a:
         a0:f4:ec:68:1b:30:0e:5b:61:fb:9d:b8:b4:cf:93:f0:35:b5:
         a8:da:60:39:d5:0e:dc:e4:51:78:4f:ea:c1:ba:08:47:ba:fa:
         a8:d8:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:01:12 2026 by rpki-client