Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d08b1ed1-372e-3671-8bce-77ef0528a074.roa
File:                     d08b1ed1-372e-3671-8bce-77ef0528a074.roa (raw, json)
Hash identifier:          fRcXBZzd4eWpp73+dA6Jtjx6SohN3PcEqd/xwzN9i6c=
Subject key identifier:   4D:77:C3:07:9C:17:5A:9B:B8:C3:6B:A3:B5:F5:B5:7D:91:BC:C6:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78CC2CE798411745AD01300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d08b1ed1-372e-3671-8bce-77ef0528a074.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33489
IP address blocks:        50.193.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:c2:ce:79:84:11:74:5a:d0:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=da66bf60-7ede-46ad-bafc-4aa037ab4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:49:30:2e:ff:22:d7:a5:ae:71:01:c3:e1:
                    94:00:8e:c6:25:27:6c:ee:b5:72:ee:73:32:aa:64:
                    c5:21:ae:eb:7d:0d:c4:5d:60:7d:d8:8f:21:e3:b0:
                    1e:94:3a:15:c2:39:78:54:7b:87:03:4a:da:b0:cf:
                    a0:df:c7:cd:67:32:a3:61:01:de:84:72:c2:a4:27:
                    52:f6:e5:60:b8:6e:82:1f:cd:00:09:ee:6c:a6:79:
                    58:7c:89:01:05:42:bf:51:ff:85:2e:21:b8:da:7c:
                    2b:83:71:69:31:f7:3b:ec:74:d2:78:7f:66:d5:d5:
                    47:40:98:87:31:8b:b4:55:35:78:cd:5a:f3:52:dd:
                    04:9f:47:2c:7a:57:6e:9b:26:4b:b7:e2:57:1e:c9:
                    20:3a:24:af:1f:61:b1:00:ab:0e:1d:93:08:ce:83:
                    5e:89:ef:08:a6:9f:e9:19:46:85:3d:e8:60:02:41:
                    af:f5:9b:cd:31:c7:8a:6a:5a:80:db:95:bf:b9:e8:
                    3e:9c:b4:45:27:fc:e9:a4:86:ee:aa:3a:d2:3b:20:
                    f9:70:28:f6:6d:0a:05:07:41:de:9f:e3:8c:17:2d:
                    75:95:7e:aa:ea:6b:1b:3e:fa:42:f3:8e:3a:74:ca:
                    d8:03:7c:5b:a4:d4:ae:a4:c9:78:af:03:f8:fb:b8:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:C3:07:9C:17:5A:9B:B8:C3:6B:A3:B5:F5:B5:7D:91:BC:C6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d08b1ed1-372e-3671-8bce-77ef0528a074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.193.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:aa:b2:e4:bf:07:89:14:fd:c1:20:e8:2a:0f:22:a4:7d:80:
         a0:8e:e8:4d:18:37:84:12:4c:e3:ef:50:62:bf:71:b7:c2:e3:
         94:38:94:33:53:f0:42:44:18:a8:c9:12:40:b3:7f:81:bf:6c:
         1d:15:bf:9a:e6:8d:9c:51:80:6e:80:87:f9:6f:42:e5:ec:8b:
         70:ab:bd:eb:33:58:c8:86:9d:32:4d:a7:3c:59:80:11:05:71:
         67:d9:ab:3f:47:50:e7:a0:cd:2e:0c:e5:23:38:7f:aa:81:88:
         54:23:82:52:ea:52:08:04:45:c3:2b:5f:e6:f3:2e:96:01:1f:
         59:86:3b:61:66:ca:5b:16:33:7f:18:fa:1a:17:01:63:8e:5e:
         3d:04:6f:e7:10:92:4a:b2:eb:78:51:bf:56:ed:99:d1:ef:e7:
         b8:aa:6c:5f:c4:dc:f5:9e:f1:cc:da:c2:4d:85:79:c8:d2:1e:
         b7:78:2c:b9:7a:d3:c1:5b:a2:5c:36:d7:70:5f:16:b6:94:00:
         98:04:3b:97:36:ad:d9:73:3f:6e:8b:09:7b:17:d3:72:30:b5:
         42:b6:1a:88:ff:ee:89:15:39:20:0d:87:a5:98:e6:e0:f7:20:
         66:15:e5:09:e7:d9:ad:73:2c:02:79:be:82:87:13:87:64:04:
         25:c7:ee:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njMLOeYQRdFrQEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGE2NmJmNjAtN2VkZS00NmFkLWJhZmMtNGFhMDM3YWI0YjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrpJMC7/ItelrnEBw+GUAI7GJSds7rVy7nMy
qmTFIa7rfQ3EXWB92I8h47AelDoVwjl4VHuHA0rasM+g38fNZzKjYQHehHLCpCdS
9uVguG6CH80ACe5spnlYfIkBBUK/Uf+FLiG42nwrg3FpMfc77HTSeH9m1dVHQJiH
MYu0VTV4zVrzUt0En0cseldumyZLt+JXHskgOiSvH2GxAKsOHZMIzoNeie8Ipp/p
GUaFPehgAkGv9ZvNMceKalqA25W/ueg+nLRFJ/zppIbuqjrSOyD5cCj2bQoFB0He
n+OMFy11lX6q6msbPvpC8446dMrYA3xbpNSupMl4rwP4+7iDTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE13wwecF1qbuMNro7X1tX2RvMYqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA4YjFlZDEtMzcyZS0z
NjcxLThiY2UtNzdlZjA1MjhhMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMsHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANyqsuS/B4kU/cEg6CoPIqR9gKCO6E0YN4QSTOPvUGK/cbfC45Q4lDNT
8EJEGKjJEkCzf4G/bB0Vv5rmjZxRgG6Ah/lvQuXsi3CrveszWMiGnTJNpzxZgBEF
cWfZqz9HUOegzS4M5SM4f6qBiFQjglLqUggERcMrX+bzLpYBH1mGO2FmylsWM38Y
+hoXAWOOXj0Eb+cQkkqy63hRv1btmdHv57iqbF/E3PWe8czawk2FecjSHrd4LLl6
08Fbolw213BfFraUAJgEO5c2rdlzP26LCXsX03IwtUK2Goj/7okVOSANh6WY5uD3
IGYV5Qnn2a1zLAJ5voKHE4dkBCXH7n8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:17:43 2026 by rpki-client