Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/7694b744-2bfd-3056-b305-2aa8b2f7b719.roa
File:                     7694b744-2bfd-3056-b305-2aa8b2f7b719.roa (raw, json)
Hash identifier:          cC8MgGi0Q+mZkpuaFUAFlslGJEw9km9xLJKso2pqYt0=
Subject key identifier:   24:5A:95:EC:3B:BB:58:18:4F:5E:8B:A4:D0:44:F2:43:55:73:B8:30
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584F3CE29EA9227EDA7CCF490500
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/7694b744-2bfd-3056-b305-2aa8b2f7b719.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7992
IP address blocks:        50.115.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9e:a9:22:7e:da:7c:cf:49:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=34e3aba4-9c58-4492-ac59-74973fccd067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:ac:ac:32:86:57:16:e6:1f:d3:30:c4:a8:
                    88:b1:50:b5:ef:2f:dd:d0:a2:ff:54:98:33:54:f1:
                    1b:01:16:62:bb:a6:e7:f7:d5:52:12:05:9c:30:6a:
                    0c:31:a8:44:07:2a:d1:23:ea:5e:93:35:b4:a8:58:
                    18:ed:01:cb:f6:33:2d:66:ef:4d:07:6c:02:61:cd:
                    b3:b1:17:98:c7:76:ba:09:1d:2a:56:34:df:2b:c1:
                    ed:61:3c:98:e1:89:ef:97:e0:ba:32:59:df:31:6d:
                    4e:6e:5a:77:d4:a0:f8:43:c1:67:36:47:07:9b:dc:
                    c9:78:bc:be:bf:11:c7:da:59:c8:8c:2e:a1:07:68:
                    b8:1e:5b:06:2b:c9:dd:2b:51:5f:fa:60:d8:46:7c:
                    38:2e:eb:8e:16:c1:e6:8f:e9:b3:1e:db:f0:7d:09:
                    cb:79:46:d2:64:23:80:f3:7e:de:07:99:30:85:e4:
                    12:4f:67:67:55:6e:e3:7a:95:1f:a0:08:0e:07:ce:
                    5f:61:42:1e:7d:d2:72:94:65:18:b1:d9:11:80:a9:
                    a4:fb:da:b6:9c:18:8d:6b:68:ca:62:df:19:aa:3c:
                    0e:2c:81:30:f7:76:a5:10:09:93:94:ae:56:0c:8b:
                    b0:34:de:5c:d7:02:fc:6f:7c:39:a8:a9:c7:e3:65:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:95:EC:3B:BB:58:18:4F:5E:8B:A4:D0:44:F2:43:55:73:B8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/7694b744-2bfd-3056-b305-2aa8b2f7b719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:67:d0:77:ad:a0:36:14:09:3b:82:d9:6f:81:26:fa:32:
         60:51:39:26:fd:c3:8f:73:a3:fa:da:e5:94:2d:2f:7b:2f:a3:
         3d:8a:56:32:81:30:4c:c4:12:f5:e1:ec:0a:08:d2:d1:ee:e0:
         94:3b:d6:35:e3:09:6e:ab:91:84:00:ac:0f:67:58:2a:c3:86:
         52:ec:47:bb:b3:75:18:09:63:88:76:4f:70:ef:86:04:cf:32:
         47:2c:ed:db:43:39:f6:5e:59:b6:56:1b:f8:8d:f1:bf:38:16:
         9e:a0:a3:e2:2c:3e:3c:29:e4:4d:a3:64:38:9f:84:87:1c:1a:
         3c:e0:ee:27:f3:ff:83:f3:af:34:dc:51:d9:7e:be:da:6c:64:
         ba:2e:56:3d:62:a1:98:f0:f9:86:c9:98:d2:45:21:fb:f7:f1:
         cc:90:f6:d3:c0:ce:f7:11:37:14:4e:d9:e0:2a:30:9a:31:de:
         4f:1c:a6:5e:70:f0:60:46:73:b1:69:8a:5c:e1:ec:7c:43:2d:
         98:49:24:90:8d:63:a8:90:bd:5a:2c:9e:6f:b2:8b:9b:6f:66:
         2a:69:df:46:86:cd:27:09:0f:c4:a3:b0:73:44:fe:14:2b:d1:
         18:b0:43:90:62:51:af:d5:60:b8:6a:7a:8f:6e:86:1d:7c:36:
         eb:14:bd:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p6pIn7afM9JBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MzRlM2FiYTQtOWM1OC00NDkyLWFjNTktNzQ5NzNmY2NkMDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJmsrDKGVxbmH9MwxKiIsVC17y/d0KL/VJgz
VPEbARZiu6bn99VSEgWcMGoMMahEByrRI+pekzW0qFgY7QHL9jMtZu9NB2wCYc2z
sReYx3a6CR0qVjTfK8HtYTyY4Ynvl+C6MlnfMW1Oblp31KD4Q8FnNkcHm9zJeLy+
vxHH2lnIjC6hB2i4HlsGK8ndK1Ff+mDYRnw4LuuOFsHmj+mzHtvwfQnLeUbSZCOA
837eB5kwheQST2dnVW7jepUfoAgOB85fYUIefdJylGUYsdkRgKmk+9q2nBiNa2jK
Yt8ZqjwOLIEw93alEAmTlK5WDIuwNN5c1wL8b3w5qKnH42Uh4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRalew7u1gYT16LpNBE8kNVc7gwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvNzY5NGI3NDQtMmJmZC0z
MDU2LWIzMDUtMmFhOGIyZjdiNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMnOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ+Z9B3raA2FAk7gtlvgSb6MmBROSb9w49zo/ra5ZQtL3svoz2KVjKB
MEzEEvXh7AoI0tHu4JQ71jXjCW6rkYQArA9nWCrDhlLsR7uzdRgJY4h2T3DvhgTP
Mkcs7dtDOfZeWbZWG/iN8b84Fp6go+IsPjwp5E2jZDifhIccGjzg7ifz/4PzrzTc
Udl+vtpsZLouVj1ioZjw+YbJmNJFIfv38cyQ9tPAzvcRNxRO2eAqMJox3k8cpl5w
8GBGc7Fpilzh7HxDLZhJJJCNY6iQvVosnm+yi5tvZipp30aGzScJD8SjsHNE/hQr
0RiwQ5BiUa/VYLhqeo9uhh18NusUvXk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:56:35 2026 by rpki-client