Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa
File:                     25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa (raw, json)
Hash identifier:          +MK+Bi+6NU9cSVWZkH3kgdug4coX2adn1sekmTNbe3I=
Subject key identifier:   93:0E:E9:FF:F2:F8:AE:37:49:53:87:99:43:82:41:C8:E4:55:AF:B1
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F20F7AF51FFA133301F837100
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     29802
IP address blocks:        2604:8380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:af:51:ff:a1:33:30:1f:83:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=b6d16145-2042-48c0-86ee-5a3e646caf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:6a:6f:40:14:54:f6:55:12:02:61:84:03:
                    41:c5:01:45:9c:b7:02:1a:5d:9b:ce:bd:c9:73:ec:
                    ce:98:04:4c:a5:6c:6b:76:6d:be:69:b6:e7:c3:11:
                    af:1f:24:66:1a:23:4b:2b:dd:6f:c8:c7:bb:d1:40:
                    d8:87:73:bb:8b:ac:21:17:5d:33:11:8d:c5:d0:44:
                    44:17:fb:79:8b:f3:5d:88:37:38:31:1a:f7:f5:2c:
                    f4:92:c0:45:d0:f1:ba:19:f0:c6:ec:64:8c:bd:ec:
                    e1:5f:e7:f1:9a:f2:e1:38:f1:2c:2d:40:8e:6f:1d:
                    a2:75:4d:b4:bf:81:77:7f:b7:2b:05:98:19:8c:e1:
                    4c:15:84:8a:85:32:61:bc:c7:2e:6c:4b:63:72:c1:
                    76:3a:89:81:4c:20:86:43:a2:75:fd:8b:84:4c:50:
                    56:70:a2:66:ff:11:09:5c:c7:cd:11:77:c6:a9:2f:
                    f7:98:38:bb:b3:04:3f:cf:eb:e2:a6:a7:54:d2:4d:
                    b9:e1:99:70:f5:74:ef:de:41:d1:cd:1d:28:e0:26:
                    bc:fe:53:9f:60:e5:cd:35:d1:a7:05:64:60:55:21:
                    d6:9f:c2:27:53:9d:a3:69:c3:f5:45:ac:2e:64:41:
                    1b:64:c5:9e:98:9c:76:0c:e5:3d:83:5b:04:74:bf:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:E9:FF:F2:F8:AE:37:49:53:87:99:43:82:41:C8:E4:55:AF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:b6:d8:74:66:92:9f:df:b0:84:32:b9:ba:a7:d2:5e:c4:
         88:e0:23:5f:21:eb:4c:95:aa:64:b7:cd:35:30:b5:31:7b:af:
         db:38:b4:9f:de:f8:1e:56:8e:da:f8:01:9c:8f:31:3b:d5:aa:
         b4:89:1e:02:7e:d4:b9:76:7d:08:e1:a5:ad:ed:fa:30:ef:2f:
         78:2f:d1:85:ac:1e:0d:0a:00:09:b4:1f:f2:07:d4:5b:f3:5e:
         36:d0:d4:93:f3:26:6f:03:f0:35:93:ff:9f:b0:8a:1c:1c:d5:
         4b:04:ce:8b:a2:58:fc:2c:93:74:42:3e:72:c0:0a:eb:f8:b0:
         5f:ca:dd:39:0b:90:d0:8b:ca:05:ac:d6:ea:26:74:e6:95:38:
         59:86:c0:9b:a6:24:de:00:8b:c8:82:8b:b1:a0:f3:5f:af:c1:
         b8:ad:bf:cc:b0:d2:ef:9c:62:49:9d:68:d7:70:9d:c8:0d:6f:
         bb:40:ea:68:0d:5d:ff:c5:4c:61:50:d5:06:cc:2a:c9:ee:08:
         e2:7e:77:b1:4e:99:5a:76:47:4d:84:f1:69:15:8f:21:df:58:
         03:32:d9:ae:b7:2a:51:41:56:ab:8f:ec:a4:e5:b8:f7:43:2e:
         cc:a5:47:d3:8e:1c:d8:ab:4d:c7:44:36:32:e1:fa:04:a9:37:
         d2:f4:fa:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8g969R/6EzMB+DcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
YjZkMTYxNDUtMjA0Mi00OGMwLTg2ZWUtNWEzZTY0NmNhZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoFqb0AUVPZVEgJhhANBxQFFnLcCGl2bzr3J
c+zOmARMpWxrdm2+abbnwxGvHyRmGiNLK91vyMe70UDYh3O7i6whF10zEY3F0ERE
F/t5i/NdiDc4MRr39Sz0ksBF0PG6GfDG7GSMvezhX+fxmvLhOPEsLUCObx2idU20
v4F3f7crBZgZjOFMFYSKhTJhvMcubEtjcsF2OomBTCCGQ6J1/YuETFBWcKJm/xEJ
XMfNEXfGqS/3mDi7swQ/z+vipqdU0k254Zlw9XTv3kHRzR0o4Ca8/lOfYOXNNdGn
BWRgVSHWn8InU52jacP1RawuZEEbZMWemJx2DOU9g1sEdL8aGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJMO6f/y+K43SVOHmUOCQcjkVa+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjVlNWI5ODYtODFlMi0z
ZWViLTkyZTUtZWQyMTUyNGNmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSDgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCGCrbYdGaSn9+whDK5uqfSXsSI4CNfIetMlapkt801MLUxe6/bOLSf
3vgeVo7a+AGcjzE71aq0iR4CftS5dn0I4aWt7fow7y94L9GFrB4NCgAJtB/yB9Rb
81420NST8yZvA/A1k/+fsIocHNVLBM6Lolj8LJN0Qj5ywArr+LBfyt05C5DQi8oF
rNbqJnTmlThZhsCbpiTeAIvIgouxoPNfr8G4rb/MsNLvnGJJnWjXcJ3IDW+7QOpo
DV3/xUxhUNUGzCrJ7gjifnexTpladkdNhPFpFY8h31gDMtmutypRQVarj+yk5bj3
Qy7MpUfTjhzYq03HRDYy4foEqTfS9Pr1
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:40 2026 by rpki-client