Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
File:                     e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa (raw, json)
Hash identifier:          4YZrjhqgfkvYT3qZ0Ozy12H9RYs9QEnuFTdntKNz0Lg=
Subject key identifier:   3D:2F:1E:B0:E2:DF:7D:5D:69:13:3C:8D:D0:1E:F7:22:B6:17:C2:BE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584FB671184E655677EBC6DA53C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
Signing time:             Tue 03 Nov 2026 02:00:13 +0000
ROA not before:           Tue 03 Nov 2026 02:00:13 +0000
ROA not after:            Mon 01 Feb 2027 02:00:13 +0000
asID:                     212238
IP address blocks:        172.94.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:71:18:4e:65:56:77:eb:c6:da:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov  3 02:00:13 2026 GMT
            Not After : Feb  1 02:00:13 2027 GMT
        Subject: CN=7da259ca-12a7-45dc-88fe-f7ccb9d7644c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:d8:c2:c1:e4:c5:60:13:f6:e3:b9:1d:0f:
                    6c:15:4f:5b:b3:4e:d6:b1:04:46:6d:ba:e5:b8:98:
                    04:7a:0f:e8:b2:50:ce:27:d1:05:af:fb:a1:10:28:
                    6c:14:9c:cb:df:5a:43:6b:4a:01:75:47:44:9b:d5:
                    85:56:34:79:17:f4:0f:74:7e:ff:74:b8:6e:4c:68:
                    92:a3:a0:41:09:47:cc:6e:a1:74:ea:9b:4d:f2:e1:
                    be:94:cc:c3:b1:b9:e7:a2:98:29:ff:6d:35:49:e4:
                    97:8b:4a:7f:52:0a:f1:e6:7e:66:d1:43:47:c7:e7:
                    6d:83:1a:20:37:10:d1:c6:74:18:69:ec:0c:6c:b1:
                    0d:87:cc:b3:61:be:6b:04:5b:1e:35:16:39:87:a9:
                    d1:85:19:0b:ea:a7:5c:dc:a6:d2:64:1b:c8:f8:a0:
                    19:7f:c4:13:fa:92:44:76:c9:88:3a:3f:3c:68:4d:
                    d4:fb:f0:c6:4a:34:5f:4d:43:fb:81:88:51:05:45:
                    ca:99:60:15:e4:7c:45:0e:c1:ee:f6:46:4f:db:42:
                    b4:c7:86:8d:2b:e0:37:52:ec:a6:2b:ea:2f:ba:46:
                    79:75:c7:13:3f:02:fa:66:22:7a:d9:1f:96:06:19:
                    30:a9:c5:99:fc:f3:6b:fc:8f:9e:d1:cc:e6:b3:0e:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:1E:B0:E2:DF:7D:5D:69:13:3C:8D:D0:1E:F7:22:B6:17:C2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:28:8e:d2:3d:bd:ab:5d:0a:1a:38:98:28:00:c5:46:46:
         97:73:48:e1:68:9d:fc:37:a5:60:44:84:20:ac:77:21:36:c7:
         66:4c:34:0a:ac:d2:de:86:bf:66:e6:81:05:bf:2c:b3:33:57:
         52:ba:a6:a0:c4:47:e6:1c:d0:30:43:f5:e3:8f:7f:14:72:aa:
         ad:7d:7f:03:0a:50:43:3d:a3:6d:d5:d3:b4:ae:c1:ac:a1:70:
         30:a7:16:f2:df:ce:5b:6c:fc:4b:09:b7:bb:dd:81:22:4b:67:
         2b:95:d9:7c:f9:be:46:08:ac:7c:cc:24:44:fc:b6:82:df:9d:
         4c:51:26:21:99:cc:5c:90:5d:a8:e2:5b:c4:dc:74:95:0f:95:
         f3:2d:06:bb:6d:12:cf:cf:c0:93:a6:15:9a:0c:37:57:dd:ff:
         b0:15:60:97:27:20:0b:7d:52:cc:a7:80:46:80:67:ba:bb:6b:
         35:32:f3:7b:ff:a5:08:c7:99:18:50:00:78:3f:32:d6:c0:7c:
         3c:49:67:e0:01:0b:08:de:5e:11:06:25:98:0a:61:4b:a3:78:
         9a:29:a1:92:24:db:fb:5f:13:0a:63:a1:e2:66:f2:42:fa:bf:
         ac:a4:10:dd:e5:aa:d1:1f:3f:97:d2:f1:34:f4:6f:b0:68:08:
         53:e7:40:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cRhOZVZ368baU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk
N2RhMjU5Y2EtMTJhNy00NWRjLTg4ZmUtZjdjY2I5ZDc2NDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4bYwsHkxWAT9uO5HQ9sFU9bs07WsQRGbbrl
uJgEeg/oslDOJ9EFr/uhEChsFJzL31pDa0oBdUdEm9WFVjR5F/QPdH7/dLhuTGiS
o6BBCUfMbqF06ptN8uG+lMzDsbnnopgp/201SeSXi0p/Ugrx5n5m0UNHx+dtgxog
NxDRxnQYaewMbLENh8yzYb5rBFseNRY5h6nRhRkL6qdc3KbSZBvI+KAZf8QT+pJE
dsmIOj88aE3U+/DGSjRfTUP7gYhRBUXKmWAV5HxFDsHu9kZP20K0x4aNK+A3Uuym
K+ovukZ5dccTPwL6ZiJ62R+WBhkwqcWZ/PNr/I+e0czmsw7HdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0vHrDi331daRM8jdAe9yK2F8K+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTQ1N2FlMGUtMzBlMy0z
YWM0LWEzNmItZDhiZmFjZWUyYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNfKI7SPb2rXQoaOJgoAMVGRpdzSOFonfw3pWBEhCCsdyE2x2ZMNAqs
0t6Gv2bmgQW/LLMzV1K6pqDER+Yc0DBD9eOPfxRyqq19fwMKUEM9o23V07Suwayh
cDCnFvLfzlts/EsJt7vdgSJLZyuV2Xz5vkYIrHzMJET8toLfnUxRJiGZzFyQXaji
W8TcdJUPlfMtBrttEs/PwJOmFZoMN1fd/7AVYJcnIAt9UsyngEaAZ7q7azUy83v/
pQjHmRhQAHg/MtbAfDxJZ+ABCwjeXhEGJZgKYUujeJopoZIk2/tfEwpjoeJm8kL6
v6ykEN3lqtEfP5fS8TT0b7BoCFPnQLM=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:26 2026 by rpki-client