Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/afcab867-7df6-3c39-88f9-c0e33a498cb7.roa
File:                     afcab867-7df6-3c39-88f9-c0e33a498cb7.roa (raw, json)
Hash identifier:          D20ZDeLkUIf0TygvE8l8UFpeieu4l+QddBwEEjGnM/k=
Subject key identifier:   72:84:18:4D:DC:6A:8E:AE:24:33:A5:1D:3A:4D:A3:95:29:88:AF:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA78894CB569086E152067700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/afcab867-7df6-3c39-88f9-c0e33a498cb7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400759
IP address blocks:        50.117.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:94:cb:56:90:86:e1:52:06:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d8f4e4e-24df-465d-88db-aeedc999d9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:86:a5:83:e5:52:e1:a8:6d:e4:22:3d:7b:
                    40:e4:10:43:e2:86:59:96:cd:fe:e8:6c:61:34:7b:
                    47:a3:c2:31:0c:2b:41:c6:15:9b:5e:01:98:67:29:
                    ba:fb:b4:03:cc:bd:db:fa:a0:3d:75:03:ac:3d:db:
                    76:7b:e6:7f:49:38:91:a1:67:b8:f5:ab:86:02:78:
                    5b:62:9d:14:1a:c8:82:cf:81:28:ab:64:3b:60:6d:
                    fd:05:46:ba:c4:05:9a:07:c1:82:1a:dd:93:d4:87:
                    db:b7:94:dd:16:be:dd:ea:d0:26:e2:57:3e:8f:af:
                    38:20:8f:9f:94:e6:dc:2b:f3:a6:d0:ac:a1:ed:71:
                    95:fa:62:fe:a6:27:5b:72:f9:65:68:b4:34:68:a3:
                    6c:48:08:7b:12:8a:93:6d:7d:00:a5:fa:bb:82:66:
                    42:7c:22:71:16:80:0e:23:8e:5a:fc:08:70:85:c6:
                    90:ee:7a:0a:00:e9:03:9f:a2:b7:31:42:09:bf:9c:
                    81:fd:19:15:53:01:d7:5e:91:30:01:23:fa:fb:73:
                    59:e9:d9:83:e8:b2:9b:a7:ae:62:6e:f2:1a:c7:ec:
                    55:74:16:dc:78:be:7c:ce:ab:4f:6f:68:f0:ea:56:
                    f3:cc:79:e0:68:4d:cd:c5:8b:a3:c0:44:b2:82:d0:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:18:4D:DC:6A:8E:AE:24:33:A5:1D:3A:4D:A3:95:29:88:AF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/afcab867-7df6-3c39-88f9-c0e33a498cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:9f:5c:ce:23:86:c6:47:a3:4a:e4:db:34:03:fe:37:49:
         2c:92:eb:0a:6b:b5:33:36:49:f8:2f:9c:bb:b4:86:08:67:69:
         8e:d0:31:38:91:1f:13:90:aa:80:fa:aa:b3:a1:48:c5:3c:83:
         90:d6:7f:e9:24:9e:18:51:49:aa:c7:25:e9:3f:7d:3f:f4:ca:
         69:20:18:2c:f6:b6:93:67:25:2d:a4:e7:00:3f:af:88:1e:db:
         cc:bb:58:3c:24:db:6a:04:39:74:00:dd:a9:85:86:df:78:4d:
         90:c6:b2:df:ef:47:3a:4c:3b:b9:bb:81:45:79:e4:d8:6d:d3:
         98:cc:1a:95:a8:f5:1e:82:47:ce:25:70:4f:d7:e9:76:64:95:
         88:82:2d:c1:23:25:4b:e3:05:e9:b5:1e:2a:1f:3a:0a:b9:29:
         25:83:a6:0b:b9:67:78:52:51:cb:2e:6d:9d:45:04:e1:3f:b3:
         f6:bb:61:06:d8:bf:72:53:65:16:72:0c:c0:34:57:69:fd:22:
         a9:3a:a6:4d:58:01:24:fb:dc:76:b3:ff:6c:13:cc:58:78:94:
         b1:93:e2:c6:be:42:34:8f:b6:80:83:b3:33:80:0b:2b:37:e6:
         8e:2c:ca:2a:af:c2:ae:66:9e:50:33:6a:f3:55:60:17:29:5b:
         eb:03:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:59:48 2026 by rpki-client