Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa
File:                     e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa (raw, json)
Hash identifier:          S5oqO89Ivh2gXFwFu0MdhODgtmWCp6NXZzYNeQRfbDw=
Subject key identifier:   BD:77:6E:B6:5F:DE:D6:D8:49:76:A1:7D:64:0C:6C:B1:3D:31:51:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E1280E94C4576AAE7572C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.80.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:28:0e:94:c4:57:6a:ae:75:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=efc10e62-4a36-45bb-b879-4a8480151f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:02:4d:0b:4a:36:80:3d:38:a8:12:1d:c0:
                    88:be:01:c8:35:28:e9:dc:d0:82:2a:d6:88:b3:4c:
                    04:fd:b4:d1:e1:ce:ac:e3:01:df:eb:37:49:3b:a3:
                    dc:3c:7b:e1:5e:6b:a5:22:08:8c:b6:a9:18:78:06:
                    76:99:27:39:4f:61:d1:1a:05:ef:49:06:4d:70:b2:
                    df:8b:24:1a:34:d2:30:30:16:88:90:10:08:2e:9d:
                    7c:b6:d5:ae:c7:7e:71:5e:0d:97:64:fa:ba:79:e4:
                    a8:44:16:f7:69:ec:25:d1:ee:80:17:c0:0c:a7:05:
                    17:6c:09:5f:5f:a5:b9:b5:f4:ea:24:e0:73:7b:3b:
                    2a:a8:a2:f4:7b:83:22:11:24:4d:27:57:d7:d0:ec:
                    80:f5:68:f6:8d:d2:75:26:b9:f2:e8:19:6c:b6:01:
                    35:1f:58:ec:d4:8b:31:d8:dd:bd:2b:20:4e:60:2b:
                    f6:4e:e1:1d:22:04:a7:71:d6:de:75:19:07:43:0f:
                    fe:bd:32:1f:81:38:01:9c:66:80:c5:d9:6d:ec:aa:
                    98:82:62:26:34:1c:2c:27:f4:ad:0f:17:3c:17:db:
                    9e:3f:35:15:fe:9f:38:43:90:89:4e:73:08:9d:97:
                    2e:6f:f8:ef:23:e4:8e:d8:95:23:e5:69:9a:f7:c4:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:6E:B6:5F:DE:D6:D8:49:76:A1:7D:64:0C:6C:B1:3D:31:51:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e09cc814-dfc7-3d7c-bd1a-b070bc604133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:54:1b:86:4e:a4:8f:5d:e3:6e:55:6b:62:36:dd:5d:1e:14:
         27:a4:8b:10:12:8b:3a:c0:1c:2d:0a:7e:24:cb:1b:19:d4:88:
         7b:88:5c:8f:5b:77:9d:d4:95:7a:9a:14:7d:03:00:60:e7:3b:
         d7:84:b6:4f:ab:36:4b:33:85:a9:ca:3d:65:eb:6f:7a:52:f0:
         6a:48:95:2a:aa:41:31:f8:8d:75:e2:f4:29:01:bc:3c:40:bf:
         b1:83:3c:e8:4c:94:b5:5b:ac:eb:cf:09:6d:6c:88:21:23:1f:
         02:d6:9f:63:c8:7b:78:6f:fe:de:93:01:31:e3:01:44:ff:54:
         f2:e6:fe:4b:77:16:11:bd:d3:65:63:e0:d7:45:23:31:0a:92:
         fe:64:02:fc:79:80:7d:20:19:6d:34:75:af:5d:59:98:e2:01:
         53:ff:0f:ed:d5:47:3b:89:36:a5:10:19:79:24:69:c4:63:38:
         80:48:45:cc:62:b5:ae:28:3a:04:f7:09:20:75:6d:35:37:54:
         4b:df:93:93:69:0f:43:4d:d5:3b:0e:8b:96:85:80:fe:59:10:
         84:b4:cb:71:fd:6d:41:82:02:d9:e5:d1:5f:f6:e5:01:a9:58:
         6c:2d:d8:77:51:69:4d:cc:c6:ff:75:0d:96:22:9c:26:c9:fb:
         ea:5f:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:51 2026 by rpki-client