Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea2ca1bc-8bb8-370e-9e1d-2da7a3174977.roa
File:                     ea2ca1bc-8bb8-370e-9e1d-2da7a3174977.roa (raw, json)
Hash identifier:          Ca2jEfiCp8mGkbZoYtjr5/2jXYAjMKRKNPzfeLkwZRw=
Subject key identifier:   73:E0:60:D3:59:B4:DF:3F:69:CA:48:AA:05:A1:BA:27:77:94:DE:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF90167C82473BC955E700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea2ca1bc-8bb8-370e-9e1d-2da7a3174977.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.80.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:90:16:7c:82:47:3b:c9:55:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1e4ec144-66ff-4083-ae0e-fe5cf1d77deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:a5:5f:f7:ba:6a:1a:35:bc:7b:5b:cd:5d:
                    04:d9:8e:55:8a:31:01:55:29:95:a3:9f:2b:ed:bf:
                    1d:d6:e3:ee:1f:e2:2f:03:83:9b:26:0c:c6:37:95:
                    8e:92:56:6d:64:dd:a6:5f:33:ae:bf:2b:cf:c0:41:
                    62:c3:b0:bc:9c:e5:7a:47:a6:c5:d4:eb:2b:63:63:
                    ce:80:95:6c:d8:c1:00:81:4f:3a:0b:03:a3:ba:76:
                    d4:5b:1a:b5:db:38:31:60:c9:59:71:0f:2e:a6:af:
                    78:07:06:2e:eb:3e:a3:e7:f5:29:cc:3f:ed:87:62:
                    40:33:bc:e6:a5:19:f9:1c:74:6f:41:41:0f:67:9e:
                    27:ae:44:0d:c0:a2:22:f7:4d:7d:bc:e9:38:40:b1:
                    9f:72:bd:83:17:d7:50:52:f0:1e:1c:5e:d2:5a:41:
                    d4:be:b2:1c:12:87:e3:49:13:71:22:99:fc:b7:7d:
                    f4:f5:27:a4:2a:76:c5:8d:a0:e1:4a:d7:c3:ca:21:
                    5b:09:a7:99:3a:04:3a:a5:9b:d5:7f:55:f6:5d:28:
                    28:fb:76:46:a4:ed:e1:91:b0:39:3d:92:3b:9d:ed:
                    69:54:ee:74:64:73:99:4d:98:0f:51:17:ef:88:da:
                    55:c9:04:34:94:9a:c2:35:75:51:0a:0b:d9:fc:dd:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E0:60:D3:59:B4:DF:3F:69:CA:48:AA:05:A1:BA:27:77:94:DE:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea2ca1bc-8bb8-370e-9e1d-2da7a3174977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:a0:9c:93:58:c1:74:86:8f:c5:b9:5d:11:10:98:07:9f:
         e8:5a:8f:56:ac:9e:9d:6f:ca:8d:28:c6:f0:5c:e9:80:e5:c4:
         27:da:0d:c9:89:35:c0:50:55:ec:cb:b6:a3:3a:8b:bd:75:43:
         e5:ec:a0:e5:b0:d4:1b:81:7a:17:2b:a2:9f:67:eb:6b:20:d2:
         d9:86:74:55:60:08:6e:ad:22:3f:2a:60:b0:4a:c1:80:ee:44:
         7a:74:d8:27:5b:ba:d7:c4:92:a9:cf:53:b0:03:38:34:ac:64:
         cd:24:49:f0:f8:6e:94:9e:76:9b:4a:de:a1:8d:c1:07:fb:b3:
         07:19:28:cb:22:7f:6e:d3:22:24:a6:b7:0c:89:fb:d7:4e:d9:
         f5:76:35:a5:85:1a:e5:d5:43:0e:c1:8c:5d:76:37:35:91:1e:
         18:09:6d:3c:c2:d7:de:11:96:8f:55:10:e4:34:4c:b2:28:bc:
         fe:58:aa:16:fe:29:f3:e2:01:d1:95:22:e5:8e:0f:65:c0:cd:
         42:cd:80:d4:1f:33:84:8a:a4:43:20:0d:fa:c0:48:d5:4f:d1:
         7d:79:a5:9c:3a:6e:0c:36:47:c6:e3:6d:54:bd:79:94:3a:07:
         66:59:12:c9:43:e1:55:01:34:ed:ab:1d:e3:07:e9:1d:ce:61:
         11:49:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:34 2026 by rpki-client