Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0857921-36cd-3559-9657-a3d9102c620d.roa
File:                     e0857921-36cd-3559-9657-a3d9102c620d.roa (raw, json)
Hash identifier:          RB+CDj0VxQd+EAEIDYyAIi5XmjznllGcdPQMTG15gUM=
Subject key identifier:   10:F0:61:3B:73:BE:D8:16:71:76:F6:8F:73:08:36:43:C3:5C:66:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E12597981CD972F40DD480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0857921-36cd-3559-9657-a3d9102c620d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.80.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:25:97:98:1c:d9:72:f4:0d:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=acc2faab-df80-4214-8b92-610f5fbad608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:4c:71:1d:09:d4:8b:7a:f1:44:e9:96:5d:
                    be:5f:ed:de:b7:b0:ae:41:ed:75:d0:25:e2:cf:56:
                    fa:40:28:e5:9a:fc:45:66:90:cd:e9:80:90:00:54:
                    6a:03:39:99:6d:be:c0:60:38:87:24:05:67:3a:cd:
                    7b:1d:5d:97:a1:76:15:ad:35:c1:17:fb:89:f1:52:
                    10:eb:39:65:5e:78:6f:e1:53:c9:48:ca:ef:ce:82:
                    39:77:20:c4:f9:ff:70:ba:63:c5:62:6c:06:7f:07:
                    a0:f5:37:30:ae:10:96:23:78:9d:0d:be:b2:39:84:
                    b6:ea:46:c2:24:d3:53:b7:c5:fe:9f:bf:64:09:b4:
                    e6:5b:d5:27:94:94:18:de:ba:3f:b2:c4:3c:6e:22:
                    a2:08:9f:44:b0:28:51:22:30:34:f7:da:30:62:9f:
                    e7:fb:7f:5e:2f:9d:b2:44:a8:16:cd:29:89:ee:64:
                    cf:a2:2b:bd:b5:e9:a9:3c:f6:ae:30:9c:ba:1c:85:
                    58:6f:4c:91:b1:6a:66:f9:d1:2b:ca:a1:9a:0e:8c:
                    2f:f1:85:23:b6:b8:df:82:10:24:05:99:bd:7e:65:
                    c5:1a:3f:fc:c0:e8:c4:e4:6d:4a:80:cc:14:6a:fd:
                    e7:67:3d:cb:c8:e9:f4:38:a4:9a:83:e6:f5:92:1a:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F0:61:3B:73:BE:D8:16:71:76:F6:8F:73:08:36:43:C3:5C:66:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0857921-36cd-3559-9657-a3d9102c620d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:28:53:f5:12:53:77:28:30:57:57:a8:a9:5c:63:32:91:
         d0:6b:12:7a:64:66:fe:0a:49:75:b8:48:5c:a9:5d:53:41:1d:
         b5:38:bb:64:f3:1e:56:bb:3a:13:06:a3:f9:0e:82:17:9c:87:
         bb:41:f8:67:b6:d6:86:bd:b0:e5:c9:9d:ef:11:d4:6e:40:68:
         7a:c8:49:90:a4:52:03:57:60:16:56:90:04:f5:1a:fc:4b:bb:
         f8:2e:f3:6d:da:89:26:25:e1:9b:db:e6:d5:75:7a:80:56:d0:
         7c:fa:e4:31:ee:86:b6:72:97:37:c8:a1:25:a1:70:4a:f5:aa:
         af:df:75:27:0d:01:a8:a4:d4:c2:e8:f1:ac:86:a5:4b:65:cc:
         4e:b6:ec:8d:6b:3d:24:e6:fd:b4:91:5e:3b:a9:aa:ce:9a:7d:
         4b:58:e4:04:92:f0:a2:cd:3b:45:4d:be:7c:f9:76:3e:63:ed:
         69:6c:72:8d:dc:24:e3:ce:de:80:de:ed:53:86:b1:4d:e4:59:
         fd:cc:21:9f:4d:23:74:af:f6:f5:3f:bf:4f:e6:75:a5:1f:3b:
         11:01:dc:67:17:f6:db:87:63:85:61:9d:50:12:ce:d7:04:fa:
         8f:08:a7:88:91:5f:9a:b7:f4:12:24:18:e6:b3:e4:37:29:9e:
         57:a8:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:20 2026 by rpki-client