Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dd5aa360-99be-39f2-86b0-7f432e019e62.roa
File:                     dd5aa360-99be-39f2-86b0-7f432e019e62.roa (raw, json)
Hash identifier:          Kd/ApJHikeLy+jfdIKAb89h33OiVDkdMF293MEMzz9o=
Subject key identifier:   FA:00:42:90:89:E3:91:B2:D9:7B:D0:9F:3D:84:94:1B:C6:A3:4D:68
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA787F1ADCB81CA5C13DEC6A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dd5aa360-99be-39f2-86b0-7f432e019e62.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        50.30.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f1:ad:cb:81:ca:5c:13:de:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b6b84744-ef1d-48e4-a9c1-be940529f983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:c8:95:78:26:9b:c6:98:1a:80:a9:1d:b0:
                    e4:30:82:88:aa:b2:68:e0:91:ea:81:87:ba:3d:0e:
                    ca:ad:4e:4d:b2:d3:00:f3:e4:3e:67:1f:f2:39:e2:
                    a7:b1:76:13:0f:d5:56:51:b1:b3:47:9e:69:a5:d9:
                    87:68:68:d6:ab:dc:1a:10:86:80:a2:3a:bc:12:7c:
                    ad:f3:bf:16:6d:12:cf:fb:db:34:19:d1:33:27:2a:
                    a9:18:5e:15:b1:3f:80:2a:6a:71:70:8b:d9:c7:19:
                    ca:0b:63:b1:30:93:aa:69:c7:bc:8f:90:02:03:a0:
                    ed:70:2b:e9:f5:88:4a:04:ec:4f:04:ae:09:b0:80:
                    2d:0b:6f:88:e5:67:20:af:1b:ef:90:a4:5a:38:10:
                    6d:6e:ed:74:54:3d:88:f1:b2:9f:93:6d:5a:1b:fe:
                    3b:50:86:f6:20:df:87:51:83:1f:a9:cb:bf:5f:b7:
                    26:46:85:01:0a:84:8e:77:24:6d:31:36:65:b7:d6:
                    17:85:b0:f9:96:11:48:f7:d7:57:92:b6:27:e4:48:
                    17:d6:07:fa:57:57:12:1e:8a:12:f1:81:79:c3:2a:
                    93:97:e8:8b:18:cd:f1:6f:5f:d3:2b:3d:14:fa:37:
                    6d:45:cd:56:e5:50:fe:3e:cb:b6:ad:68:7a:f0:d8:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:42:90:89:E3:91:B2:D9:7B:D0:9F:3D:84:94:1B:C6:A3:4D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dd5aa360-99be-39f2-86b0-7f432e019e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:eb:36:88:40:48:ee:31:72:ff:44:5f:41:5e:81:93:68:71:
         3e:4d:be:cd:28:cb:62:b9:da:c7:57:8f:f1:5a:cd:de:a5:4b:
         51:0e:f1:3d:5e:59:c0:60:3f:83:46:94:ab:87:8b:1d:4f:ed:
         95:c2:a7:01:e1:f5:c1:54:a6:58:b8:ae:c0:ef:df:b4:0a:1c:
         10:b3:ef:cf:3c:46:05:7f:91:d9:6e:23:39:80:8d:38:2b:8b:
         74:a3:0c:f4:e0:3a:a3:d6:db:f0:d2:c3:eb:99:90:01:6f:dd:
         9a:0b:43:82:7a:25:68:18:f6:99:cf:6b:a2:a2:36:14:ff:64:
         60:c7:4d:69:ed:64:fb:e7:1d:5c:8c:51:27:a7:00:7b:eb:35:
         11:46:19:25:bb:e5:75:11:65:87:78:91:f8:30:ab:df:fa:41:
         b6:e5:e4:e3:13:77:aa:f7:c8:f0:43:84:4d:86:e7:a6:73:d3:
         e2:03:fe:4a:6a:2f:cb:fe:b0:13:48:07:bb:c8:99:08:88:25:
         8a:12:c9:a6:09:11:98:50:2b:62:0a:22:0e:55:99:e3:ea:d7:
         dd:97:9b:55:2c:0c:ed:66:77:4a:c4:16:4c:ac:07:19:57:ac:
         8b:eb:1f:e2:61:01:a8:44:4d:21:20:7a:e6:51:76:a5:99:12:
         e6:c5:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:02 2026 by rpki-client