Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0cd29f0-bf8b-3b4e-9c84-0fb799f40e8d.roa
File:                     e0cd29f0-bf8b-3b4e-9c84-0fb799f40e8d.roa (raw, json)
Hash identifier:          Juf3VL0pqEAnVjNCUinuslesVYzU4l3T8HQxorqkmpM=
Subject key identifier:   99:AC:43:C7:D6:68:EA:FD:51:45:E8:37:2A:F7:C3:0F:46:5F:85:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4989C111B9BBCBA89B3D1360
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0cd29f0-bf8b-3b4e-9c84-0fb799f40e8d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.83.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:c1:11:b9:bb:cb:a8:9b:3d:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=697d9661-3da9-45b7-9be4-c8530626c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:dd:44:1a:a3:8c:02:e1:0e:ab:73:97:2f:
                    75:48:e8:67:7c:a8:fb:e5:f8:bb:b4:c7:87:85:40:
                    18:3f:46:28:37:b3:78:05:31:21:61:d2:71:69:13:
                    49:be:77:16:d8:06:4f:59:b1:a2:14:ab:10:7a:45:
                    6e:a3:ed:1a:65:15:bc:a3:fd:12:90:61:24:8f:b2:
                    b4:61:54:a6:48:f7:d3:64:3e:4f:cf:ea:73:fc:ac:
                    81:af:28:91:6b:72:c7:13:27:55:c2:ee:c9:15:ee:
                    f3:85:37:1d:75:74:22:75:fb:19:98:1e:9e:88:cd:
                    65:38:39:ae:f9:80:28:e1:06:53:c8:91:8d:62:e1:
                    01:c5:dc:9b:5c:22:26:6c:28:35:38:a3:e2:42:d2:
                    79:05:39:9a:df:f7:03:fa:cc:fe:98:f7:18:4c:e8:
                    e6:40:fa:9d:0d:ff:57:f8:6d:8d:44:45:5e:de:55:
                    ac:c0:ae:de:f3:4c:3d:58:f7:41:cc:4d:ae:9b:28:
                    cd:ad:e7:f2:51:73:fe:cc:e6:84:77:3a:fe:47:aa:
                    cd:8f:5e:a7:13:dd:8c:77:1c:a6:68:90:bc:74:c0:
                    e3:5b:f9:8a:0e:ef:23:71:0a:b3:e9:94:62:ee:f9:
                    75:51:41:29:89:67:63:3e:a8:c2:2f:53:69:9a:bd:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AC:43:C7:D6:68:EA:FD:51:45:E8:37:2A:F7:C3:0F:46:5F:85:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0cd29f0-bf8b-3b4e-9c84-0fb799f40e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:d6:8d:21:81:d0:c3:43:5f:66:e7:1e:b2:18:ef:5c:be:
         43:94:b3:0a:e1:ff:cc:63:3e:8c:8d:a9:8d:72:5d:10:27:8a:
         e7:57:96:8f:66:2e:bd:c2:a0:b6:27:5d:8d:d0:ef:95:64:54:
         16:c2:46:47:25:ea:70:83:5b:71:80:56:be:72:b9:76:54:4a:
         13:75:0c:32:8d:7c:48:8b:4f:1f:3d:fe:ae:52:93:80:11:ae:
         a8:e8:47:29:f9:c8:03:7f:99:e2:93:a4:24:c5:f6:d1:3f:27:
         84:5b:4d:f4:0c:bb:11:dc:d0:d7:53:22:a6:58:45:52:47:fe:
         aa:85:6d:ff:1c:86:bc:16:09:2a:39:19:1e:3d:87:75:24:28:
         df:82:00:35:73:de:68:42:57:ad:62:13:53:20:97:7e:f7:97:
         eb:6a:01:52:35:0d:44:5d:e0:05:9d:4f:d2:45:c1:14:db:07:
         3a:3f:ca:f0:5a:cc:41:d3:5e:69:39:68:92:f0:d0:90:b8:c0:
         ca:f0:27:46:83:7c:e8:f9:02:3c:d9:d1:ad:f9:9f:34:31:7a:
         bd:a5:7d:f5:3d:a8:99:4f:63:31:a2:d3:b7:32:a0:95:78:40:
         83:d9:22:56:f4:fe:af:78:0f:c1:6e:41:1f:1d:6a:af:3a:68:
         df:99:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:27 2026 by rpki-client