Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b90b3f07-9b9e-327b-b29d-d0031a453f22.roa
File:                     b90b3f07-9b9e-327b-b29d-d0031a453f22.roa (raw, json)
Hash identifier:          LqZPQby8DxXdTCAe8kOf5+KHuqu1WfVNirmUtRwKUxk=
Subject key identifier:   B0:48:AA:12:63:A6:81:90:3F:5F:A6:46:D2:4A:C5:42:5E:33:AC:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE861C93FD0CF9131CEAD1F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b90b3f07-9b9e-327b-b29d-d0031a453f22.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     21508
IP address blocks:        50.229.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:1c:93:fd:0c:f9:13:1c:ea:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=0151e75d-dc98-4b98-a3fb-223c1ad2950b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:78:10:ff:47:b2:35:fa:b1:b6:39:36:a7:
                    5d:da:5c:7a:37:e4:09:f7:84:14:a1:76:41:75:a9:
                    d0:27:0e:87:ad:1b:43:9d:9a:dc:af:5e:ec:dc:4d:
                    0c:5a:16:69:e9:fd:43:00:93:44:28:d4:18:dd:6e:
                    ad:c2:da:75:ab:49:56:5e:e9:de:0a:92:9b:fb:45:
                    84:d1:6d:2f:92:00:67:a6:33:e8:1d:69:8a:3e:b1:
                    2a:0f:44:69:0d:dd:4d:a6:ca:e8:19:e7:31:c1:73:
                    4e:fd:4b:63:34:55:75:31:c1:04:bc:c6:1a:d1:40:
                    57:c6:8b:27:0f:69:aa:23:50:40:af:3a:65:86:35:
                    54:91:ad:1f:f4:ca:55:af:c2:89:cb:74:b1:12:5a:
                    f6:e3:24:32:7a:51:ae:f5:3c:cb:16:8e:06:e3:ac:
                    17:0c:c1:9e:19:03:76:ac:d1:8c:d6:ca:20:0e:af:
                    f8:3e:9c:82:c1:14:37:39:e3:e8:3f:46:bf:f0:c0:
                    bf:6b:ed:49:03:39:df:c9:94:c0:fa:9e:89:94:0c:
                    f5:8b:76:0b:4e:42:5c:b0:1b:2b:8c:3b:28:89:48:
                    16:76:c5:18:08:45:db:6b:e3:12:b6:a5:46:83:f7:
                    9b:b7:b9:0a:1d:51:b7:24:bd:51:21:61:5f:85:ef:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:AA:12:63:A6:81:90:3F:5F:A6:46:D2:4A:C5:42:5E:33:AC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b90b3f07-9b9e-327b-b29d-d0031a453f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.229.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:95:1a:b2:44:09:10:33:a8:d4:46:70:6a:78:5a:53:59:
         01:3b:43:ba:b8:3c:9c:58:01:70:35:ba:76:96:81:34:88:4f:
         78:45:66:21:5a:ed:ff:25:d0:26:07:b9:c3:e7:a8:89:7f:bd:
         74:f7:4e:21:36:92:5a:eb:4b:de:7d:a5:f3:09:fc:45:1e:f0:
         e1:f2:1e:5d:64:70:41:63:3f:6a:4e:f6:57:ec:58:42:fd:02:
         e6:57:69:d0:7f:b4:db:f9:69:06:b7:47:17:6e:50:7a:db:f1:
         b9:80:09:7b:43:28:94:ed:04:e9:98:bb:41:19:ab:75:46:86:
         ad:f8:fb:33:f2:40:21:08:9d:dc:83:00:c5:16:5d:92:de:6b:
         54:2b:f8:3e:33:5b:44:75:b6:fe:fa:ff:36:9a:a8:d2:df:0d:
         1c:cc:cd:62:6f:37:8b:da:bd:df:63:54:22:4c:16:01:db:19:
         23:bf:bf:f7:ef:bb:00:5d:53:2d:17:e9:96:1d:05:41:3b:a9:
         97:59:b6:b6:08:e3:f6:50:b1:67:6a:0c:4d:a5:fd:e9:cf:41:
         6d:54:8d:66:36:59:c5:07:69:8c:84:d5:d9:45:7b:46:b0:ae:
         23:62:ea:5b:0b:c1:55:9e:37:82:fd:9a:23:9a:9a:95:6f:be:
         10:bb:5a:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehhyT/Qz5Exzq0fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MDE1MWU3NWQtZGM5OC00Yjk4LWEzZmItMjIzYzFhZDI5NTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3d4EP9HsjX6sbY5Nqdd2lx6N+QJ94QUoXZB
danQJw6HrRtDnZrcr17s3E0MWhZp6f1DAJNEKNQY3W6twtp1q0lWXuneCpKb+0WE
0W0vkgBnpjPoHWmKPrEqD0RpDd1NpsroGecxwXNO/UtjNFV1McEEvMYa0UBXxosn
D2mqI1BArzplhjVUka0f9MpVr8KJy3SxElr24yQyelGu9TzLFo4G46wXDMGeGQN2
rNGM1sogDq/4PpyCwRQ3OePoP0a/8MC/a+1JAznfyZTA+p6JlAz1i3YLTkJcsBsr
jDsoiUgWdsUYCEXba+MStqVGg/ebt7kKHVG3JL1RIWFfhe/rvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBIqhJjpoGQP1+mRtJKxUJeM6wUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjkwYjNmMDctOWI5ZS0z
MjdiLWIyOWQtZDAwMzFhNDUzZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuXpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXnlRqyRAkQM6jURnBqeFpTWQE7Q7q4PJxYAXA1unaWgTSIT3hFZiFa
7f8l0CYHucPnqIl/vXT3TiE2klrrS959pfMJ/EUe8OHyHl1kcEFjP2pO9lfsWEL9
AuZXadB/tNv5aQa3RxduUHrb8bmACXtDKJTtBOmYu0EZq3VGhq34+zPyQCEIndyD
AMUWXZLea1Qr+D4zW0R1tv76/zaaqNLfDRzMzWJvN4vavd9jVCJMFgHbGSO/v/fv
uwBdUy0X6ZYdBUE7qZdZtrYI4/ZQsWdqDE2l/enPQW1UjWY2WcUHaYyE1dlFe0aw
riNi6lsLwVWeN4L9miOampVvvhC7WlA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:08 2026 by rpki-client