Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e744b6b2-9f1d-3f78-abb6-4509532ba723.roa
File:                     e744b6b2-9f1d-3f78-abb6-4509532ba723.roa (raw, json)
Hash identifier:          HM3p7vm14g9Yd3geRVGzgMZF+i1qZyyQc6WSU70MnK4=
Subject key identifier:   33:4F:23:AF:5D:6C:BC:88:DD:44:29:09:12:F6:0D:BC:05:CB:C1:F2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4972B3AA71FEEA3652069BC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e744b6b2-9f1d-3f78-abb6-4509532ba723.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        50.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b3:aa:71:fe:ea:36:52:06:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a145c5d2-d708-43f6-b06f-3bec7a639dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:bb:1f:e8:41:61:a0:5e:ee:b2:d5:0b:0b:
                    cd:a7:7b:23:cd:07:06:2f:d8:e8:2b:97:90:6f:ad:
                    62:df:82:c9:8d:67:f8:be:cd:19:2f:7f:e3:5c:97:
                    30:8a:e0:07:d5:09:ef:2f:f9:46:26:7e:52:49:39:
                    5d:63:88:a1:4d:e3:6a:21:c5:08:27:58:c3:a8:54:
                    0e:5a:a9:37:ee:d6:8c:6f:6c:fb:3d:fe:f0:a9:53:
                    d8:5c:a2:1d:18:51:73:b9:b3:f9:7a:d1:f2:2c:8e:
                    57:dd:90:ff:7e:19:d8:04:7c:47:1e:1d:ba:78:c3:
                    a1:cc:7c:7a:87:9d:19:bc:dc:19:4c:20:14:0f:dd:
                    a3:b2:89:d2:2f:b5:1a:44:44:4b:6f:bd:8e:56:8b:
                    c4:08:d0:2d:1d:d3:f9:0e:ee:72:cd:38:44:9f:c0:
                    ee:65:d6:05:8e:f5:14:69:ba:85:8a:b5:ff:e9:58:
                    a9:20:4e:be:e0:a6:4c:5a:ee:88:83:9e:5d:a8:9d:
                    bb:f3:d0:0b:e6:f8:43:f1:29:bc:74:30:ac:a8:a3:
                    b5:79:62:38:f3:ae:fb:e7:77:41:28:5a:c0:20:b4:
                    26:ac:89:dc:ca:6e:d4:4e:50:5d:b2:ee:5a:33:f8:
                    80:16:27:de:a9:16:aa:43:a3:9b:85:ec:63:1e:93:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:23:AF:5D:6C:BC:88:DD:44:29:09:12:F6:0D:BC:05:CB:C1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e744b6b2-9f1d-3f78-abb6-4509532ba723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:ee:26:fa:6a:e7:4a:57:9d:8f:c9:bd:90:95:83:86:9d:
         4d:e3:49:db:ef:0d:e1:f8:f9:b1:2c:f9:81:98:73:38:f5:95:
         e3:51:23:de:6a:4b:f0:28:d2:bf:dc:85:95:13:ab:4f:52:43:
         af:a0:83:fe:45:31:e5:87:48:7e:e7:ab:bd:fd:3d:6d:c1:b6:
         79:ba:77:90:51:85:85:90:28:66:26:46:00:9e:9e:f3:4a:d5:
         60:bf:ce:81:70:70:f8:47:b0:59:35:b5:e8:07:93:8f:0e:3b:
         c0:39:c8:e2:9f:5f:58:9a:d6:76:84:8d:0e:d0:7a:94:22:ca:
         76:29:6f:ac:73:06:33:9c:a3:9e:4f:59:cd:77:7c:d7:cc:81:
         7f:5c:ff:fd:a4:e0:55:40:08:1d:86:99:10:39:1d:83:c5:cf:
         27:b1:11:09:69:0e:b3:30:49:4b:7a:24:f1:ed:b2:4e:f3:44:
         9e:45:46:59:3a:b9:bd:0f:48:67:02:0b:b0:c8:82:a2:45:d3:
         03:b5:19:32:0b:48:57:21:0e:d4:7e:56:b7:29:c4:36:3d:79:
         bc:e7:b8:74:00:23:1a:22:9c:90:9b:89:f9:14:3d:7a:02:59:
         ed:2c:9e:fb:0b:8d:5f:15:d3:94:ac:d0:e1:e2:86:c2:8f:36:
         83:dc:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:43:37 2026 by rpki-client