Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa
File:                     26ae0c3c-14d9-3d32-908a-838ff6616574.roa (raw, json)
Hash identifier:          RaulpVjZO4UlsofM3q4+nvxn1SQSmw+hUFk+SaucjVE=
Subject key identifier:   50:7E:24:22:0A:6E:9C:C9:56:1F:D0:18:DF:DC:51:7E:13:2F:06:2E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0C1EEF7212AD703D6D655880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     7029
IP address blocks:        50.96.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:ef:72:12:ad:70:3d:6d:65:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=aa10b2c5-3cb0-4fa2-ba20-cdea624fad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:3c:7a:60:44:82:1c:99:c9:6f:cb:6a:10:
                    f9:9d:64:e7:41:b0:f9:26:28:ab:98:fb:3a:cd:3f:
                    dd:a6:49:fa:f2:cf:e0:78:16:bd:6f:bc:fb:e9:21:
                    93:d6:ae:80:8b:6f:f9:27:b0:55:b1:a1:40:1d:49:
                    5d:a3:6d:ad:dc:18:3d:64:4c:f2:b0:b9:b3:b2:47:
                    40:d5:a3:5d:8d:56:e0:7b:ee:8a:f3:99:b3:51:46:
                    69:f3:30:ac:83:57:ac:de:b4:c9:e1:82:7e:92:ed:
                    db:3d:a4:d3:0c:79:04:8a:e3:71:e6:36:4a:27:2b:
                    d6:67:91:bf:60:c9:ed:ac:17:d5:a0:26:94:60:83:
                    c0:04:2a:01:49:e2:6f:04:2d:cf:2f:a1:7e:3c:0f:
                    18:fb:87:00:00:95:91:96:fe:5a:10:74:83:da:5d:
                    d2:fd:fd:b8:1c:5a:40:c7:1f:a0:41:cc:db:d2:1c:
                    68:05:fe:bf:54:89:90:c5:0a:3b:f0:0a:73:d8:a5:
                    38:3e:de:3f:92:15:32:5b:14:ec:7b:51:c7:4f:a1:
                    54:8c:bb:80:67:be:db:92:f6:44:29:2a:ef:e4:d3:
                    21:46:14:af:2f:67:49:da:c9:4c:10:37:5e:98:57:
                    c8:9b:9e:7c:f1:ae:e5:e9:0a:14:7a:62:de:1a:4c:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:24:22:0A:6E:9C:C9:56:1F:D0:18:DF:DC:51:7E:13:2F:06:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:67:af:b8:48:96:65:6b:7e:2e:d0:4b:c5:38:e5:16:31:
         19:35:d6:de:cd:25:41:ee:da:a8:48:4f:03:72:c6:41:3e:5d:
         86:e7:73:85:70:a4:f0:6a:33:31:70:49:8a:cf:bd:c1:be:55:
         32:ac:fb:66:8c:fc:8c:83:75:68:ec:92:35:51:b9:fb:09:c2:
         d4:c2:45:70:ab:90:1a:d7:2b:d2:f2:72:86:83:d4:5a:e5:8a:
         97:1b:c8:43:22:88:24:86:2e:c7:dd:14:c6:8a:ac:25:16:b5:
         24:0c:20:e6:34:ba:7e:3f:b7:99:a0:1f:18:21:08:af:93:75:
         46:73:17:0b:4b:5b:f8:b4:eb:29:3a:c6:b5:7f:b0:2a:a8:fc:
         27:98:d2:78:6e:93:af:9d:d9:f3:e4:5f:07:ec:c2:c2:79:76:
         30:cb:07:10:d8:b5:8f:5c:6f:b2:79:9b:14:ab:6d:aa:67:f1:
         06:85:08:bf:96:fd:b9:57:33:7e:96:21:15:a8:85:a0:29:4c:
         b2:77:2b:01:9d:f0:7f:57:bc:63:a1:cc:8e:88:fa:df:d0:c0:
         c5:d5:8c:7b:c6:98:83:81:5e:cf:b6:de:4a:e7:55:b3:34:b7:
         87:bd:bc:33:75:de:3f:89:c5:d8:ee:ae:2c:15:38:1e:b6:70:
         15:80:3f:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu9yEq1wPW1lWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
YWExMGIyYzUtM2NiMC00ZmEyLWJhMjAtY2RlYTYyNGZhZDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9c8emBEghyZyW/LahD5nWTnQbD5JiirmPs6
zT/dpkn68s/geBa9b7z76SGT1q6Ai2/5J7BVsaFAHUldo22t3Bg9ZEzysLmzskdA
1aNdjVbge+6K85mzUUZp8zCsg1es3rTJ4YJ+ku3bPaTTDHkEiuNx5jZKJyvWZ5G/
YMntrBfVoCaUYIPABCoBSeJvBC3PL6F+PA8Y+4cAAJWRlv5aEHSD2l3S/f24HFpA
xx+gQczb0hxoBf6/VImQxQo78Apz2KU4Pt4/khUyWxTse1HHT6FUjLuAZ77bkvZE
KSrv5NMhRhSvL2dJ2slMEDdemFfIm5588a7l6QoUemLeGkxnrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFB+JCIKbpzJVh/QGN/cUX4TLwYuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZhZTBjM2MtMTRkOS0z
ZDMyLTkwOGEtODM4ZmY2NjE2NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkeZ6+4SJZla34u0EvFOOUWMRk11t7NJUHu2qhITwNyxkE+XYbnc4Vw
pPBqMzFwSYrPvcG+VTKs+2aM/IyDdWjskjVRufsJwtTCRXCrkBrXK9LycoaD1Frl
ipcbyEMiiCSGLsfdFMaKrCUWtSQMIOY0un4/t5mgHxghCK+TdUZzFwtLW/i06yk6
xrV/sCqo/CeY0nhuk6+d2fPkXwfswsJ5djDLBxDYtY9cb7J5mxSrbapn8QaFCL+W
/blXM36WIRWohaApTLJ3KwGd8H9XvGOhzI6I+t/QwMXVjHvGmIOBXs+23krnVbM0
t4e9vDN13j+JxdjuriwVOB62cBWAPwk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:19 2026 by rpki-client