Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
File:                     d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa (raw, json)
Hash identifier:          rX+G7quTexBNXEAHDY3+AcREkFYJvmy+kYwlJV4dG3I=
Subject key identifier:   63:8B:A2:3B:9A:1F:0C:8C:3A:88:82:E3:13:F5:52:D7:77:39:C7:A5
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584F20F7A9BA455C9F18EC9699A8
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     13329
IP address blocks:        50.115.149.0/24 maxlen: 24
                          50.115.150.0/24 maxlen: 24
                          50.115.151.0/24 maxlen: 24
                          199.180.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a9:ba:45:5c:9f:18:ec:96:99:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=e684a6a1-f722-4c66-87af-55314ed93eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:55:81:fa:64:93:f5:fd:3f:a7:8d:6d:58:
                    6f:3c:36:98:55:c2:90:64:0d:c9:50:72:82:91:a8:
                    73:0a:f5:64:8e:20:be:58:c0:c3:3d:41:0f:78:31:
                    44:c6:36:0b:10:57:b4:24:93:cd:92:d2:f8:90:bf:
                    4c:3e:eb:b3:0b:10:3e:39:c4:5d:14:35:71:6d:02:
                    ab:37:b0:3f:ba:04:47:11:ab:df:07:89:04:d4:8a:
                    69:b2:6b:65:e6:47:53:7e:fb:ab:a5:0c:5c:dd:68:
                    dd:79:87:13:54:15:b6:a9:72:d7:d0:ce:ca:5e:02:
                    4c:8a:7e:e5:b3:51:11:a4:ba:9b:18:81:df:2e:f2:
                    d9:0f:82:4d:69:f7:61:e4:72:a0:d9:70:23:a4:d6:
                    3f:1a:d7:3f:37:6a:9f:c8:e0:81:30:69:37:a4:3a:
                    2a:5d:b7:99:c7:67:da:08:ee:c1:62:a8:94:2e:66:
                    07:53:50:ee:99:cc:6e:53:66:e7:54:0d:1c:2d:17:
                    ff:67:30:a4:f9:55:8b:f6:8c:79:16:37:3e:11:51:
                    d4:b1:c1:7c:6b:e3:09:92:c8:bd:aa:c1:3e:41:64:
                    6e:b4:60:b1:40:80:5e:24:04:b7:fb:6a:7d:bf:65:
                    b4:f2:d7:ed:06:64:4a:a7:27:00:43:dd:b7:b5:5c:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:A2:3B:9A:1F:0C:8C:3A:88:82:E3:13:F5:52:D7:77:39:C7:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/d87ec4f0-0722-351f-ae14-2d5a1ff17194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.149.0-50.115.151.255
                  199.180.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:ef:12:8f:96:76:82:ba:40:ce:02:f7:50:8c:c8:86:cb:
         0d:37:f9:5b:12:e9:76:e1:d6:a6:0b:7c:b4:1e:89:6e:79:9a:
         68:a0:32:19:45:21:dd:46:de:36:49:34:e9:9d:e9:ab:bb:96:
         6d:f7:f3:6e:b2:06:65:7c:52:93:84:e2:b4:60:4b:36:cc:c8:
         9f:e0:ba:ec:cf:71:67:40:e0:4c:89:0f:7e:ab:13:0d:8f:13:
         ae:90:10:5d:e8:34:ad:7b:07:05:e1:f6:53:18:ab:d2:cb:55:
         36:a5:24:04:fc:bc:53:b2:60:53:fa:5d:42:53:20:0c:ba:2a:
         46:94:21:5c:9e:13:83:0c:62:ff:69:e3:ad:46:b5:30:0d:ec:
         00:7a:ed:bb:28:6c:62:18:8d:2c:97:9b:50:29:96:fe:f6:91:
         c2:df:b7:93:cc:bc:61:5d:52:5d:c4:c4:07:4a:0e:82:e3:f8:
         2c:70:ed:bb:94:36:16:7a:24:5c:a0:8a:07:64:c6:54:5c:bc:
         33:c3:d9:f9:1d:e9:e1:bf:43:86:c6:46:e0:84:3b:c0:2e:bc:
         3c:19:1c:7b:19:18:bf:65:b7:0f:5b:ca:0f:32:7a:b6:b5:bf:
         ce:10:12:3d:eb:6c:85:41:ad:38:a8:ab:5b:6d:13:9d:e5:2f:
         60:88:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:37:03 2026 by rpki-client