Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
File:                     ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa (raw, json)
Hash identifier:          7cdXp/QACzOrhaTn3cqfzitNCCcAUDrpMCHXobMnJpo=
Subject key identifier:   6A:A9:65:71:55:1F:9D:64:ED:14:37:52:8A:CD:3B:60:B4:B7:4B:0A
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F23C2522FC51F0C5AE5BAF360
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     29802
IP address blocks:        66.206.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:52:2f:c5:1f:0c:5a:e5:ba:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=5e3fa29c-3d2d-4340-ae33-194b56c5acf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:0a:f6:2f:40:af:60:4f:36:bc:05:62:06:
                    d7:c7:01:76:ea:86:6e:51:46:7b:63:a6:d4:29:0f:
                    39:a4:4a:dc:e7:ec:c2:44:db:ab:74:4f:13:7d:12:
                    5e:0f:ba:5c:19:53:20:4f:8d:b7:25:e5:29:54:96:
                    dd:0e:a8:2f:1a:19:2d:9e:98:9c:a7:96:ac:79:b7:
                    c1:d9:25:61:b1:79:88:ac:df:b2:bb:34:04:de:a1:
                    24:62:47:83:05:9b:70:9d:74:fa:f9:0a:c6:63:4e:
                    01:08:71:50:26:50:33:99:58:1d:e6:0f:8a:e6:3b:
                    63:35:e1:59:06:eb:c8:54:41:c9:71:a9:49:07:2f:
                    0b:2f:fc:fa:3f:68:11:85:4a:26:61:0d:cb:3d:a1:
                    85:a7:92:bb:3b:c3:b9:51:51:0e:98:14:58:f6:34:
                    9f:3b:d5:8d:b0:3e:c5:dc:8f:d7:26:40:be:4c:3e:
                    32:a6:43:b8:9f:81:bf:3f:81:7d:e3:dc:a0:bc:2e:
                    c4:df:e0:e7:55:4f:39:f0:51:e3:69:44:33:bb:e6:
                    c5:0d:95:a2:f5:a0:15:c9:5d:02:d6:2f:a3:c1:b0:
                    8f:06:eb:75:4b:18:c9:f8:e1:aa:a6:1a:fa:83:9f:
                    34:5a:13:aa:da:67:44:5a:10:d5:2a:df:a0:b7:a2:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:65:71:55:1F:9D:64:ED:14:37:52:8A:CD:3B:60:B4:B7:4B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:d7:71:d4:0b:f0:35:c8:fa:a2:21:bd:e4:45:96:8b:e5:
         fb:49:9b:b0:59:f5:b2:38:52:1a:af:3b:69:eb:49:cc:30:4b:
         26:63:b4:7e:7b:47:6c:3d:40:fa:7e:55:22:0d:61:12:3e:d8:
         20:5d:a9:37:c9:b4:f6:15:d0:11:46:2b:33:9c:f6:16:5e:65:
         23:9a:06:dd:2e:2a:cc:e8:79:b7:8d:eb:0b:89:c7:22:91:e1:
         3d:37:06:39:77:b5:b1:88:7b:6c:5c:b7:68:3d:3f:7e:a4:17:
         6b:c1:97:d6:d4:91:2f:c7:91:d9:6f:fd:fa:97:b1:2f:e6:60:
         db:16:90:63:a5:74:80:79:27:1b:f5:5e:e4:2d:e4:ea:eb:d7:
         33:4e:4b:c8:1f:f0:d4:76:c6:c8:28:58:7d:ec:e3:8d:76:a6:
         14:77:10:a4:8d:ee:67:cf:c3:42:fc:f2:04:5a:f8:ec:49:a8:
         ba:b8:b6:d2:37:8c:79:be:dd:36:e4:b6:b4:39:f7:87:c6:f9:
         08:cf:2b:44:70:6b:3a:7c:de:ce:35:9f:3c:fc:24:40:46:c6:
         3f:ca:31:21:1c:2c:ae:7c:96:0c:cd:04:33:10:f6:bc:c7:ba:
         2e:8f:46:65:47:3a:3b:1f:a6:63:47:05:4f:83:cd:b4:b2:13:
         f7:69:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:57:43 2026 by rpki-client