Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
File:                     d3887374-8545-34aa-837d-dd4cb2f0f338.roa (raw, json)
Hash identifier:          9GT4yX9xoyN25nBNjPgGESC5Nr2UkOyDdZ3muZZWvg8=
Subject key identifier:   C0:DF:C4:D3:42:47:57:86:50:01:18:02:2F:BD:C7:5E:31:D1:EF:D5
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584E070088E9BD48D62369744EC0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396982
IP address blocks:        50.116.72.0/22 maxlen: 22
                          50.116.76.0/22 maxlen: 22
                          50.116.104.0/21 maxlen: 22
                          50.116.116.0/22 maxlen: 22
                          108.167.139.0/24 maxlen: 24
                          108.167.174.0/23 maxlen: 23
                          108.167.176.0/22 maxlen: 22
                          108.167.184.0/22 maxlen: 22
                          108.179.206.0/23 maxlen: 23
                          108.179.224.0/22 maxlen: 22
                          108.179.236.0/22 maxlen: 22
                          108.179.248.0/22 maxlen: 22
                          108.179.254.0/24 maxlen: 24
                          192.185.206.0/23 maxlen: 24
                          216.172.164.0/22 maxlen: 22
                          216.172.176.0/22 maxlen: 22
                          216.172.180.0/22 maxlen: 22
                          216.172.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:88:e9:bd:48:d6:23:69:74:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=e42bb665-c6c1-4397-a226-eed93909a48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:f9:9b:66:c2:d8:b8:5a:fc:8a:8c:39:9a:
                    2b:74:22:a2:46:db:d1:02:88:3a:9b:0c:52:cd:ed:
                    e9:05:7e:c4:5a:2b:35:c4:9b:f8:99:53:86:de:b0:
                    75:77:b9:cc:6e:2a:90:61:5e:15:6c:5f:ec:91:38:
                    58:ba:60:bf:6a:af:dd:98:4f:61:e8:f5:2f:b1:ed:
                    eb:fa:ff:79:f6:c2:30:1b:67:b4:d1:4f:da:f9:8f:
                    8b:f8:02:2d:9b:15:6c:32:59:48:a0:ea:9b:72:ef:
                    78:a0:e6:f8:90:89:73:52:57:db:2b:4c:38:9f:48:
                    97:86:21:e3:ae:15:67:d8:5a:b8:3d:e2:9e:69:3d:
                    8e:f4:fa:e2:d6:70:50:28:0d:10:67:fb:c2:be:88:
                    44:e5:0d:97:cb:e9:88:60:6a:c9:77:ee:18:4a:6f:
                    c4:76:14:c8:f1:92:38:9a:8e:21:84:1e:da:3a:c9:
                    62:e1:bf:db:ce:52:58:1a:73:6d:9e:06:73:bc:12:
                    c3:31:9f:5c:50:f7:a2:79:8e:28:cd:00:4d:90:ab:
                    7e:e7:69:72:3d:1f:3d:86:9d:3f:63:e6:d9:b3:21:
                    83:4a:b6:41:07:ba:2a:3d:93:2b:43:31:e9:6f:8b:
                    2f:65:23:6b:27:3b:66:b5:78:5f:ec:3e:08:26:37:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:C4:D3:42:47:57:86:50:01:18:02:2F:BD:C7:5E:31:D1:EF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.72.0/21
                  50.116.104.0/21
                  50.116.116.0/22
                  108.167.139.0/24
                  108.167.174.0-108.167.179.255
                  108.167.184.0/22
                  108.179.206.0/23
                  108.179.224.0/22
                  108.179.236.0/22
                  108.179.248.0/22
                  108.179.254.0/24
                  192.185.206.0/23
                  216.172.164.0/22
                  216.172.176.0/21
                  216.172.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:90:65:49:70:51:ec:59:72:a8:9b:03:83:21:04:dd:56:aa:
         a5:71:21:38:4c:0d:c7:3f:7d:2c:fd:87:76:a0:1e:5f:8a:85:
         35:1f:50:51:3c:38:49:b3:98:2e:e7:e5:aa:44:b3:74:c3:91:
         79:1d:ae:bd:5d:09:d8:a6:b4:55:09:2a:80:d6:ea:fa:b5:6d:
         d8:43:e3:2c:8e:5b:12:2b:fd:ab:46:3c:57:4e:96:2a:8a:d1:
         5f:ce:c9:ed:8d:84:08:8a:0a:1f:6e:53:85:ac:3f:b6:44:88:
         3a:be:b9:9c:83:20:ac:49:c4:9f:e2:fe:28:89:ae:fe:c7:0a:
         bb:6e:ba:c8:87:cf:af:62:49:05:31:89:d1:37:54:4d:95:e2:
         26:c3:9c:5e:ca:d0:ba:d3:a2:80:36:bd:6c:3b:cd:47:24:54:
         e4:40:66:63:ad:08:96:05:a7:e5:3c:f1:a8:6a:e6:b7:d5:94:
         de:78:03:d0:55:ec:25:0a:5b:31:12:ba:8e:92:8d:04:78:70:
         18:34:39:e6:5b:c4:33:5a:91:f4:0a:13:5b:ea:57:aa:34:d8:
         7e:ca:12:ab:bb:b1:eb:07:ff:08:f0:13:85:e0:77:e2:bc:c1:
         e2:85:52:dc:9f:dd:38:33:07:d3:81:1b:98:0e:35:6e:39:3a:
         59:c2:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:33:00 2026 by rpki-client