Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/eac240c0-cac8-332e-8fe7-2369198659af.roa
File:                     eac240c0-cac8-332e-8fe7-2369198659af.roa (raw, json)
Hash identifier:          US6OOb4I7ThGhKfjROdxyPBY3WbtZawDc3Sa5UMroK8=
Subject key identifier:   E5:11:06:C3:D8:E3:4F:3E:B6:8C:B3:25:D2:72:10:9E:AF:10:74:E4
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EA7914B2BF81931C2C60DF900
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/eac240c0-cac8-332e-8fe7-2369198659af.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53787
IP address blocks:        50.58.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:4b:2b:f8:19:31:c2:c6:0d:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa62d217-a6ac-4fb2-b641-53408a3457d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:a9:d2:8b:e6:bb:35:55:6c:e0:55:52:0d:
                    89:ef:ad:4f:e0:11:3e:e5:e1:41:17:77:a1:d5:e1:
                    45:3c:fb:32:29:12:08:66:54:49:71:0d:de:f6:7d:
                    c8:3f:ec:d6:68:a9:ba:1e:22:25:5a:ae:c6:32:19:
                    47:81:8f:6d:a3:ca:22:4a:0a:20:74:fd:cd:13:28:
                    88:23:f3:14:46:6e:ff:2d:a3:36:4e:87:d6:a3:1a:
                    e5:63:b9:ba:4a:65:39:32:b0:6f:26:83:00:63:4b:
                    c4:02:69:8f:d5:01:e7:16:37:2d:20:51:47:eb:91:
                    21:31:11:18:44:59:34:e1:33:ec:4b:b0:10:37:d7:
                    16:54:9c:38:36:a9:a6:38:42:e1:11:c6:fe:e0:37:
                    bf:d8:f8:c8:89:03:8c:11:93:eb:43:aa:d0:a0:ca:
                    a6:83:0f:5f:c2:8b:04:e8:6c:d2:7d:42:1d:49:f1:
                    b2:42:8c:bc:9b:33:b1:4c:47:c9:42:c9:86:ef:13:
                    56:63:3e:b8:89:84:58:b2:88:fc:ae:b3:49:f0:e2:
                    af:8e:9f:42:b3:b3:92:18:51:49:0b:06:9b:25:ac:
                    a0:2b:e1:41:2f:e4:53:2a:50:db:67:40:14:83:4c:
                    2f:fa:e5:06:16:23:fc:0c:aa:7e:5c:82:f0:b0:f6:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:06:C3:D8:E3:4F:3E:B6:8C:B3:25:D2:72:10:9E:AF:10:74:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/eac240c0-cac8-332e-8fe7-2369198659af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.58.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:81:a5:b7:e2:96:40:14:16:8b:c6:22:0f:a6:af:43:6e:
         e3:c4:dc:f7:98:be:e3:85:cd:61:e6:12:2c:b2:a6:ef:86:5f:
         34:68:4d:41:d3:3d:df:8b:86:f9:37:d0:35:fb:72:92:05:56:
         a7:09:8f:fc:25:92:a4:54:82:ed:ec:6b:46:59:82:38:27:a3:
         c5:77:07:23:d6:1b:e1:c5:81:92:1c:81:d5:eb:fe:fb:c0:e0:
         13:f7:02:73:97:35:22:05:b7:04:4e:76:fe:91:9e:87:01:e2:
         77:9f:18:0e:a3:2f:ac:8c:31:3f:bf:0b:9d:49:d0:4a:83:1a:
         a0:c0:7f:3f:7d:5b:e5:8a:e3:b4:fc:27:6a:1b:95:75:96:34:
         db:44:4c:18:3d:a8:62:cf:c0:7b:b6:6c:0f:96:f5:4a:48:cb:
         c4:11:bf:01:12:62:15:bf:1c:dc:e2:7f:5e:68:36:2c:6a:ab:
         f6:c4:98:e7:0a:a0:d5:00:5e:67:68:92:07:58:d2:e0:b1:5e:
         96:2d:2c:97:0b:f6:e9:7f:93:d2:d3:98:f0:08:23:fb:1b:19:
         5f:29:8e:b4:68:56:64:cf:41:14:a8:e5:01:93:ed:f7:8d:f3:
         f1:44:30:c3:09:3d:13:a1:fd:ee:e8:b3:3b:24:ab:51:57:7e:
         70:ee:86:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkUsr+BkxwsYN+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmE2MmQyMTctYTZhYy00ZmIyLWI2NDEtNTM0MDhhMzQ1N2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWOp0ovmuzVVbOBVUg2J761P4BE+5eFBF3eh
1eFFPPsyKRIIZlRJcQ3e9n3IP+zWaKm6HiIlWq7GMhlHgY9to8oiSgogdP3NEyiI
I/MURm7/LaM2TofWoxrlY7m6SmU5MrBvJoMAY0vEAmmP1QHnFjctIFFH65EhMREY
RFk04TPsS7AQN9cWVJw4NqmmOELhEcb+4De/2PjIiQOMEZPrQ6rQoMqmgw9fwosE
6GzSfUIdSfGyQoy8mzOxTEfJQsmG7xNWYz64iYRYsoj8rrNJ8OKvjp9Cs7OSGFFJ
CwabJaygK+FBL+RTKlDbZ0AUg0wv+uUGFiP8DKp+XILwsPbTbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOURBsPY408+toyzJdJyEJ6vEHTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWFjMjQwYzAtY2FjOC0z
MzJlLThmZTctMjM2OTE5ODY1OWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMjqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnOgaW34pZAFBaLxiIPpq9DbuPE3PeYvuOFzWHmEiyypu+GXzRoTUHT
Pd+Lhvk30DX7cpIFVqcJj/wlkqRUgu3sa0ZZgjgno8V3ByPWG+HFgZIcgdXr/vvA
4BP3AnOXNSIFtwROdv6RnocB4nefGA6jL6yMMT+/C51J0EqDGqDAfz99W+WK47T8
J2oblXWWNNtETBg9qGLPwHu2bA+W9UpIy8QRvwESYhW/HNzif15oNixqq/bEmOcK
oNUAXmdokgdY0uCxXpYtLJcL9ul/k9LTmPAII/sbGV8pjrRoVmTPQRSo5QGT7feN
8/FEMMMJPROh/e7oszskq1FXfnDuhsc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:16 2026 by rpki-client