Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3aa375c-00fd-33a1-9c51-39071de7554b.roa
File:                     a3aa375c-00fd-33a1-9c51-39071de7554b.roa (raw, json)
Hash identifier:          dKVFZEXvfUzQO5n+433nt6XiOK8CEqYXjZvbrNM866A=
Subject key identifier:   03:9F:E2:AE:5C:51:F4:E2:0B:1E:EE:08:2A:44:D0:8C:4F:2D:0C:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F6292BADF25D229B29A53C700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3aa375c-00fd-33a1-9c51-39071de7554b.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     400209
IP address blocks:        50.172.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:ba:df:25:d2:29:b2:9a:53:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d551a0f9-7e90-4e7e-af28-25c19c3f4389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:38:31:bd:11:ef:40:87:8c:4a:a1:d0:6c:
                    e6:41:a8:5c:d4:23:bc:87:6d:03:5e:a3:21:42:75:
                    01:6d:83:81:10:33:2d:1a:2b:9c:00:9e:a9:bf:06:
                    b1:fb:d1:08:01:3d:6a:64:75:6c:3b:9e:43:1b:4c:
                    49:a7:e4:73:2c:57:d0:6f:97:67:fc:e5:0d:ae:2a:
                    10:5a:1d:d8:d8:7c:6c:7e:f7:93:7a:95:72:75:64:
                    59:75:24:b8:13:3b:52:49:b3:2b:41:fc:2c:d6:e2:
                    17:d3:60:d5:57:13:41:c8:25:c3:e7:91:55:03:99:
                    11:a8:cb:c5:59:bf:45:88:35:86:51:aa:4c:1e:86:
                    d5:7a:b1:a8:7d:be:e1:8f:35:fe:52:f3:7f:ee:69:
                    44:72:37:7c:9b:02:ac:d1:9d:2a:03:c5:47:f2:c8:
                    cd:c3:dd:03:6c:39:10:01:34:f8:3a:ca:b3:f3:0e:
                    30:a6:d4:f8:61:9e:c8:4d:b3:06:b4:09:a4:d6:57:
                    45:82:da:10:8b:81:ff:3f:62:3d:c0:a1:7f:60:f0:
                    63:b4:81:81:09:13:c7:b3:40:92:61:a8:29:98:72:
                    bf:40:f8:41:31:84:dd:3d:d3:71:ad:e0:b9:71:61:
                    02:6f:a7:02:1d:87:dd:13:1b:30:7e:5a:f1:9b:89:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:E2:AE:5C:51:F4:E2:0B:1E:EE:08:2A:44:D0:8C:4F:2D:0C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3aa375c-00fd-33a1-9c51-39071de7554b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.172.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:66:ff:86:b2:95:08:ea:8e:3b:2d:27:e9:71:e0:a4:43:
         b5:2a:0a:29:af:c9:3a:30:39:cf:3a:e2:36:d8:e6:75:e6:1d:
         15:a9:d7:5a:74:b5:f2:6f:d5:88:1c:63:54:88:cd:d7:7e:9e:
         cc:f0:bf:0f:96:a9:63:82:34:65:ca:78:b9:e9:58:89:a6:3b:
         23:11:0e:f7:27:e5:2c:fc:d3:f9:70:ed:e6:d8:76:9e:6e:8a:
         09:80:98:4b:55:f6:e4:41:86:ef:14:e1:86:83:b7:c1:d3:a6:
         5c:c6:68:64:2a:5a:e7:6a:3b:40:d9:4c:f8:44:c4:52:b8:72:
         a0:73:80:41:43:70:8b:94:5a:08:96:30:ff:3d:5e:2d:19:0f:
         47:6d:09:11:ce:4c:e9:3e:f8:ad:43:39:52:71:0f:4e:b6:53:
         6f:1e:e1:32:5d:d8:b4:c3:03:3a:4d:2a:a4:33:bf:59:57:43:
         00:69:a0:71:24:70:42:09:66:6e:cb:c0:62:ac:e2:ee:aa:ff:
         2d:4d:2f:bb:45:8e:28:f0:75:a4:e8:e4:a3:94:e2:d5:b2:f8:
         87:06:e4:32:91:1e:96:83:78:dd:74:23:dc:71:56:d7:61:2c:
         bc:9d:2b:9a:c7:0a:7e:c9:27:b8:b8:62:d8:c3:05:17:31:65:
         68:7b:24:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrrfJdIpsppTxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZDU1MWEwZjktN2U5MC00ZTdlLWFmMjgtMjVjMTljM2Y0Mzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCE4Mb0R70CHjEqh0GzmQahc1CO8h20DXqMh
QnUBbYOBEDMtGiucAJ6pvwax+9EIAT1qZHVsO55DG0xJp+RzLFfQb5dn/OUNrioQ
Wh3Y2HxsfveTepVydWRZdSS4EztSSbMrQfws1uIX02DVVxNByCXD55FVA5kRqMvF
Wb9FiDWGUapMHobVerGofb7hjzX+UvN/7mlEcjd8mwKs0Z0qA8VH8sjNw90DbDkQ
ATT4Osqz8w4wptT4YZ7ITbMGtAmk1ldFgtoQi4H/P2I9wKF/YPBjtIGBCRPHs0CS
YagpmHK/QPhBMYTdPdNxreC5cWECb6cCHYfdExswflrxm4lDEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOf4q5cUfTiCx7uCCpE0IxPLQxRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNhYTM3NWMtMDBmZC0z
M2ExLTljNTEtMzkwNzFkZTc1NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqy/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg9Zv+GspUI6o47LSfpceCkQ7UqCimvyTowOc864jbY5nXmHRWp11p0
tfJv1YgcY1SIzdd+nszwvw+WqWOCNGXKeLnpWImmOyMRDvcn5Sz80/lw7ebYdp5u
igmAmEtV9uRBhu8U4YaDt8HTplzGaGQqWudqO0DZTPhExFK4cqBzgEFDcIuUWgiW
MP89Xi0ZD0dtCRHOTOk++K1DOVJxD062U28e4TJd2LTDAzpNKqQzv1lXQwBpoHEk
cEIJZm7LwGKs4u6q/y1NL7tFjijwdaTo5KOU4tWy+IcG5DKRHpaDeN10I9xxVtdh
LLydK5rHCn7JJ7i4YtjDBRcxZWh7JHs=
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:37:55 2026 by rpki-client