Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a9ca710-de7b-3988-a598-0fb58e80f529.roa
File:                     8a9ca710-de7b-3988-a598-0fb58e80f529.roa (raw, json)
Hash identifier:          cipPSCr698NW76wv3+Su6brRfifPUsY8HIlKePCA/Ww=
Subject key identifier:   70:8F:4A:47:81:C0:ED:C4:C9:00:34:E8:3C:EF:92:E6:9B:C9:39:58
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E0435E0E5060613B3DD816E40
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a9ca710-de7b-3988-a598-0fb58e80f529.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     8100
IP address blocks:        74.50.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e0:e5:06:06:13:b3:dd:81:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=daabba46-80b3-4bde-9579-ee3ed012bb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:df:54:c6:50:71:66:16:f3:a6:16:f4:12:
                    2a:6f:99:a9:a3:9a:64:52:b3:c3:8d:67:08:b5:45:
                    fb:29:82:d7:1d:4b:52:b3:76:2f:59:37:a8:5b:5e:
                    d3:16:3f:6a:5e:21:22:76:87:91:4c:ad:66:72:89:
                    3b:ed:1c:1c:f4:e7:52:7a:24:fe:15:a8:9d:f2:ee:
                    64:0e:87:54:05:98:95:5d:d8:69:1c:ad:5d:f2:68:
                    18:42:fd:59:56:df:ef:fd:6f:9a:9b:56:95:cb:2b:
                    62:62:7e:e4:58:c6:c0:8a:5c:f6:53:77:9c:ae:48:
                    d2:91:87:27:d9:d0:36:c2:15:d6:3f:67:16:02:22:
                    7d:5e:87:d7:7a:55:14:27:fc:5b:40:56:0c:e8:af:
                    40:2e:8b:68:44:53:20:10:23:35:18:3a:e5:a7:ec:
                    4b:0a:50:88:96:38:45:9b:b8:9a:69:7b:6f:ca:9f:
                    05:61:dd:dd:f4:53:3f:3a:40:b7:96:90:c5:f6:5e:
                    9e:9f:cb:85:32:28:85:c1:32:98:c3:54:2d:c7:54:
                    0a:96:e7:a6:7e:76:1f:71:92:3a:b6:2c:61:e0:d2:
                    f2:08:1b:4c:6f:41:a5:e9:d5:c1:23:0d:b1:84:e5:
                    71:80:5a:72:d8:66:6c:af:dc:0f:37:27:4a:fa:d3:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:4A:47:81:C0:ED:C4:C9:00:34:E8:3C:EF:92:E6:9B:C9:39:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a9ca710-de7b-3988-a598-0fb58e80f529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:75:ab:b4:b0:24:52:40:e2:d9:91:b3:57:4b:7b:6e:bc:
         87:c9:09:68:43:03:6a:9d:bf:f8:a1:1b:df:d7:85:c7:ee:b4:
         8c:62:36:9e:46:91:c0:86:6a:64:f9:9a:26:32:28:44:fa:99:
         ed:18:fb:e7:e2:e3:6c:a5:47:02:ea:8a:25:f3:49:64:c0:32:
         e1:e9:79:af:37:ef:a4:7b:d2:fc:4e:87:65:91:c4:7e:9c:fe:
         a1:9b:bd:2a:9f:95:1a:c5:b5:8b:02:38:8c:f2:fe:c8:89:f3:
         87:32:2d:37:ae:91:80:e0:de:59:f0:15:c2:27:8b:91:e3:c7:
         64:78:28:2a:e9:97:5b:98:41:19:c7:7c:73:09:5f:32:43:bb:
         dd:6f:c2:3e:d6:61:38:4b:6b:df:b5:6f:ca:ae:63:bd:cc:43:
         ea:d2:fe:5c:cc:d7:4f:16:3e:a5:2e:01:ee:c1:7f:e4:45:50:
         86:3c:29:ff:1f:9c:8c:34:fc:57:e8:aa:23:a5:09:cd:66:9b:
         af:44:bd:10:c4:d4:fb:33:8b:5e:a8:46:b5:d9:40:5b:05:51:
         d0:e3:b1:02:04:a9:96:36:6e:61:e4:fb:bc:e4:63:c8:89:fd:
         3b:92:15:cd:33:81:9e:5a:b0:f9:43:46:aa:e8:54:4a:bc:53:
         34:a8:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:09 2026 by rpki-client