Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/35d8cbde-1e4b-353e-a059-a49378c8e6e4.roa
File:                     35d8cbde-1e4b-353e-a059-a49378c8e6e4.roa (raw, json)
Hash identifier:          nRiVMOOXbj6729Mp1Dzx5G1xda1gWExj4j2MRuBltVc=
Subject key identifier:   44:70:CB:FB:4F:20:7C:10:E0:49:C7:26:6A:E5:A1:14:3E:C2:68:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2C10510574137088E7270
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/35d8cbde-1e4b-353e-a059-a49378c8e6e4.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        50.117.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c1:05:10:57:41:37:08:8e:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=1c5da2e1-9cd7-489e-8287-dacf87c0093a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:0c:c9:6b:bc:57:0d:48:ca:32:11:e6:61:
                    26:0e:67:0f:d4:96:38:55:b6:d0:58:b6:b9:f9:d6:
                    af:dc:46:ca:d6:80:95:ad:63:76:1c:c7:27:ef:77:
                    d1:87:ea:25:f7:f5:40:89:ef:b7:9d:37:bb:b5:a2:
                    9b:b6:42:29:5d:cd:b4:80:d6:c3:85:d5:10:ee:53:
                    bf:70:f1:c2:81:1e:09:58:52:84:07:a6:f8:12:88:
                    8c:d5:e0:24:ff:bf:82:eb:6c:7d:dc:1d:97:10:f7:
                    1a:02:07:ff:94:9e:25:7a:e5:28:62:80:f8:6a:90:
                    65:e4:96:82:eb:23:73:ff:de:af:9f:02:78:61:14:
                    fd:fd:ca:7a:2a:e5:6f:b7:70:7f:55:ee:e3:38:e0:
                    65:35:a8:c9:d7:8e:bd:f0:1d:73:de:13:a7:fe:e3:
                    5f:bc:e1:51:fb:b5:74:53:92:14:57:0d:56:c1:d3:
                    44:b0:ad:4b:69:dc:31:26:9a:7b:c8:f0:8b:51:b5:
                    8e:72:83:ef:b2:cf:65:14:09:c0:83:58:8f:a6:f4:
                    7c:74:36:2c:29:e6:33:41:4e:17:dd:b0:b3:d9:50:
                    ba:00:9d:83:c4:c9:46:f8:f5:c9:45:77:85:2e:86:
                    6e:dd:3a:60:a4:f8:60:e2:2b:7a:61:29:8f:73:dd:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:70:CB:FB:4F:20:7C:10:E0:49:C7:26:6A:E5:A1:14:3E:C2:68:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/35d8cbde-1e4b-353e-a059-a49378c8e6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:d0:98:d0:44:f8:ab:64:3d:6e:c2:18:b7:6f:97:0a:04:
         0c:a3:09:6f:d2:f4:dd:3d:ba:d3:ea:02:c4:8a:e3:f9:ef:d3:
         c8:4e:c7:29:72:b5:18:6b:6b:31:3e:46:ec:26:a0:ea:bd:19:
         30:7f:f8:90:ef:24:1d:4f:22:27:6d:eb:8d:07:d0:74:fc:40:
         60:14:26:23:87:f7:c5:8f:0b:bb:55:bb:a3:57:78:5b:ee:17:
         be:f4:77:0d:98:2f:d9:4d:b0:73:2a:bd:4b:17:e0:9b:81:e2:
         c3:cf:6e:b4:74:93:21:14:bf:35:ae:3f:68:d3:30:0e:52:32:
         37:78:28:43:b5:72:15:62:19:21:bd:7a:de:c7:83:d6:03:c4:
         35:2f:41:db:02:6c:81:33:e0:fc:8c:f7:99:82:46:47:96:66:
         2a:db:38:14:6e:fa:54:6a:24:68:2a:f6:8b:69:e4:86:60:43:
         69:1c:81:c6:9e:5d:8e:5d:ad:9f:4f:81:67:83:e3:71:96:4e:
         3b:85:e7:4b:a2:33:e0:9e:09:30:cb:59:d0:54:26:04:54:97:
         06:91:67:e3:3e:20:cf:ce:ab:47:93:ea:a6:1f:09:81:25:da:
         16:7e:87:7d:17:bb:19:b8:04:ba:27:f3:e4:1e:92:28:3e:d6:
         a0:bd:21:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0sEFEFdBNwiOcnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MWM1ZGEyZTEtOWNkNy00ODllLTgyODctZGFjZjg3YzAwOTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG0MyWu8Vw1IyjIR5mEmDmcP1JY4VbbQWLa5
+dav3EbK1oCVrWN2HMcn73fRh+ol9/VAie+3nTe7taKbtkIpXc20gNbDhdUQ7lO/
cPHCgR4JWFKEB6b4EoiM1eAk/7+C62x93B2XEPcaAgf/lJ4leuUoYoD4apBl5JaC
6yNz/96vnwJ4YRT9/cp6KuVvt3B/Ve7jOOBlNajJ14698B1z3hOn/uNfvOFR+7V0
U5IUVw1WwdNEsK1LadwxJpp7yPCLUbWOcoPvss9lFAnAg1iPpvR8dDYsKeYzQU4X
3bCz2VC6AJ2DxMlG+PXJRXeFLoZu3TpgpPhg4it6YSmPc93+4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERwy/tPIHwQ4EnHJmrloRQ+wmj+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzVkOGNiZGUtMWU0Yi0z
NTNlLWEwNTktYTQ5Mzc4YzhlNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnUsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwg0JjQRPirZD1uwhi3b5cKBAyjCW/S9N09utPqAsSK4/nv08hOxyly
tRhrazE+RuwmoOq9GTB/+JDvJB1PIidt640H0HT8QGAUJiOH98WPC7tVu6NXeFvu
F770dw2YL9lNsHMqvUsX4JuB4sPPbrR0kyEUvzWuP2jTMA5SMjd4KEO1chViGSG9
et7Hg9YDxDUvQdsCbIEz4PyM95mCRkeWZirbOBRu+lRqJGgq9otp5IZgQ2kcgcae
XY5drZ9PgWeD43GWTjuF50uiM+CeCTDLWdBUJgRUlwaRZ+M+IM/Oq0eT6qYfCYEl
2hZ+h30Xuxm4BLon8+Qekig+1qC9IfY=
-----END CERTIFICATE-----
Generated at Tue Sep 29 16:43:45 2026 by rpki-client