Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
File:                     42bc3cb2-813a-3ca2-a271-89902ea203cb.roa (raw, json)
Hash identifier:          9Umq1PmYtDqOzJ3fE7UsLKdwHW27MT3ePDtNIGExTPQ=
Subject key identifier:   A1:D6:34:1E:9F:DA:32:7C:70:5C:6C:6F:C8:0B:63:46:83:87:A0:5B
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584EED521C8E170C5F33CA725900
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     61317
IP address blocks:        2604:4500:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1c:8e:17:0c:5f:33:ca:72:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=00e212a0-0bb2-4b1d-b66a-f06c31ea6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:83:74:fb:d7:b8:9a:ff:ea:5a:5f:67:68:
                    60:a2:25:42:03:e9:64:e4:c1:98:b7:1f:8f:86:17:
                    54:f9:e6:fe:62:6f:ce:20:7b:b7:05:37:07:c0:17:
                    51:30:af:70:bf:12:61:0b:52:82:d7:1a:41:ad:9c:
                    fe:f4:09:9c:8a:f6:5e:dc:17:89:fc:45:aa:28:34:
                    cb:b0:df:5c:31:77:b8:e0:74:66:47:43:7c:d9:b3:
                    71:98:76:be:db:05:6b:06:3c:ae:96:33:00:e2:e8:
                    ad:43:b1:e4:b2:6b:b2:38:f3:66:ae:61:60:52:5f:
                    24:08:2c:34:57:0f:12:62:1a:e0:d3:99:83:77:a4:
                    78:cd:cd:8c:b9:5f:1a:35:f9:b0:b8:9d:28:18:dd:
                    25:5f:2e:81:be:a1:12:e1:f9:ad:6e:21:9c:ed:54:
                    8c:1e:dc:9f:2e:55:ae:24:b3:6f:ab:ea:5e:bd:81:
                    4c:82:77:5f:e4:45:5d:50:be:21:22:c7:de:a4:26:
                    de:8a:56:87:69:56:9e:9f:ab:00:92:33:19:87:af:
                    a3:3b:6e:dd:46:d6:18:85:63:c9:f4:ea:ca:ee:74:
                    32:b2:09:a1:73:f0:00:65:4e:4d:93:95:24:b6:d5:
                    55:ef:75:01:71:fd:bf:f6:c0:94:e2:ec:26:7f:0f:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:34:1E:9F:DA:32:7C:70:5C:6C:6F:C8:0B:63:46:83:87:A0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:03:c8:2c:da:13:6d:9f:bf:dc:3c:d4:3f:55:28:63:d5:
         b1:94:63:7b:9a:07:e1:bd:62:65:57:c8:11:0d:29:4c:a2:b8:
         bb:ca:0d:71:59:32:b2:be:86:b0:4d:94:22:32:fc:5c:9a:47:
         4f:a2:92:ae:9f:38:6f:1f:9e:06:ed:67:83:1f:e1:b4:02:9c:
         8c:be:d3:4e:e8:97:41:f2:82:fd:97:80:85:ad:f0:98:19:a7:
         4e:32:8d:68:90:7b:33:ce:be:b1:4a:d9:b9:82:8d:57:44:fb:
         3b:36:5f:35:d6:cf:9e:47:d8:3b:9e:71:dc:5b:d9:9c:43:5d:
         14:ef:0b:28:3d:72:10:cd:37:06:75:8b:59:18:e3:e5:e6:26:
         d5:c6:0b:fe:a0:82:6a:9a:ee:0b:15:cb:47:a3:9d:0a:7c:a3:
         0e:05:72:28:55:3f:3f:6c:89:66:29:7f:e5:e4:18:f7:cd:20:
         91:e0:59:ef:63:5f:1f:2d:2c:cc:5e:86:fb:63:20:4b:ca:8c:
         97:fa:10:74:c7:33:87:3d:da:d3:7c:c1:d1:6e:c6:65:47:78:
         e2:ce:74:52:74:3e:4a:84:29:5c:fb:d8:5c:20:02:7d:58:20:
         e3:30:c1:2b:8e:60:b2:91:18:ee:f2:be:43:c9:b4:7d:3a:6a:
         d5:40:ab:b9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUhyOFwxfM8pyWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MDBlMjEyYTAtMGJiMi00YjFkLWI2NmEtZjA2YzMxZWE2ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP6DdPvXuJr/6lpfZ2hgoiVCA+lk5MGYtx+P
hhdU+eb+Ym/OIHu3BTcHwBdRMK9wvxJhC1KC1xpBrZz+9AmcivZe3BeJ/EWqKDTL
sN9cMXe44HRmR0N82bNxmHa+2wVrBjyuljMA4uitQ7HksmuyOPNmrmFgUl8kCCw0
Vw8SYhrg05mDd6R4zc2MuV8aNfmwuJ0oGN0lXy6BvqES4fmtbiGc7VSMHtyfLlWu
JLNvq+pevYFMgndf5EVdUL4hIsfepCbeilaHaVaen6sAkjMZh6+jO27dRtYYhWPJ
9OrK7nQysgmhc/AAZU5Nk5UkttVV73UBcf2/9sCU4uwmfw9C5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHWNB6f2jJ8cFxsb8gLY0aDh6BbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDJiYzNjYjItODEzYS0z
Y2EyLWEyNzEtODk5MDJlYTIwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHemA8gs2hNtn7/cPNQ/VShj1bGUY3uaB+G9YmVXyBENKUyiuLvK
DXFZMrK+hrBNlCIy/FyaR0+ikq6fOG8fngbtZ4Mf4bQCnIy+007ol0Hygv2XgIWt
8JgZp04yjWiQezPOvrFK2bmCjVdE+zs2XzXWz55H2Duecdxb2ZxDXRTvCyg9chDN
NwZ1i1kY4+XmJtXGC/6ggmqa7gsVy0ejnQp8ow4FcihVPz9siWYpf+XkGPfNIJHg
We9jXx8tLMxehvtjIEvKjJf6EHTHM4c92tN8wdFuxmVHeOLOdFJ0PkqEKVz72Fwg
An1YIOMwwSuOYLKRGO7yvkPJtH06atVAq7k=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:47 2026 by rpki-client