Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/20bb2156-04b8-3e1f-a89a-5025446c4f44.roa
File:                     20bb2156-04b8-3e1f-a89a-5025446c4f44.roa (raw, json)
Hash identifier:          gYQjfT58Ce53cYswvzBtZQdCbStT3AXVzarfmpjRJNQ=
Subject key identifier:   FF:9B:2E:53:88:EF:E0:46:B9:FD:2B:F3:30:BF:C1:2B:36:7C:3D:FB
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F119CDAC0548200BD9D7CAD00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/20bb2156-04b8-3e1f-a89a-5025446c4f44.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:da:c0:54:82:00:bd:9d:7c:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=92f1d431-6bf7-4615-943a-27e6010b41e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:11:a3:c7:92:36:ee:af:5a:c0:50:6e:b9:
                    ba:2c:8b:ef:9a:60:03:c4:b4:36:c9:46:ba:0b:56:
                    50:49:94:5a:01:22:d9:06:8e:44:d8:3c:ab:82:71:
                    39:af:ec:1c:e8:d1:9c:92:a9:b0:66:f3:70:fd:f4:
                    5f:c5:81:d8:4c:e1:9a:e4:c1:15:3a:86:6e:12:b9:
                    db:d3:17:e7:6b:78:1d:29:ad:03:9e:90:a4:92:14:
                    53:5c:05:0b:e4:bd:b7:d3:f9:1f:98:84:b0:a6:30:
                    04:61:50:06:db:38:ad:66:e6:ea:27:45:2c:ef:a4:
                    29:1c:c8:52:48:5a:c3:9d:3d:b1:51:b2:07:66:a4:
                    78:bc:73:c3:10:9a:c3:c9:ff:7d:6b:b9:53:00:9d:
                    a6:68:17:97:a5:76:d1:b2:86:55:de:81:78:db:af:
                    c2:68:7e:25:96:cb:fa:f3:9b:87:5e:98:5b:51:f6:
                    d3:ef:31:15:b1:a8:e1:70:32:e6:0a:4a:39:a0:0e:
                    10:d0:a6:28:6f:99:fc:b6:d6:08:bf:08:e3:eb:68:
                    a0:77:0f:04:31:0e:74:7f:f7:f7:30:0f:51:5e:91:
                    6f:37:65:96:21:16:77:f3:1b:1f:5e:6a:dd:e7:f4:
                    2d:15:cb:2e:fb:39:fb:45:39:a1:12:df:f4:0c:9c:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:2E:53:88:EF:E0:46:B9:FD:2B:F3:30:BF:C1:2B:36:7C:3D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/20bb2156-04b8-3e1f-a89a-5025446c4f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:69:15:af:ba:1d:21:06:71:23:c8:cb:c4:6c:d6:8c:be:
         db:cc:52:33:32:a9:d2:04:5d:f7:30:9a:8c:3d:e8:43:c2:60:
         03:cb:e1:2a:15:f9:74:aa:f9:48:1b:e9:d6:05:f4:c6:de:c6:
         c0:a2:90:34:dc:16:3c:7d:ab:9d:d7:70:c3:a7:95:0a:a4:b9:
         f0:0f:07:44:8d:14:8b:4b:30:8a:3c:1e:de:7e:34:fd:7b:c0:
         ae:47:c6:29:b6:e1:bd:4f:83:0b:00:ee:da:5c:06:6f:d9:67:
         25:45:f9:b6:4a:1a:8b:68:af:49:ee:c0:3b:28:8e:6e:c3:29:
         d8:85:f4:33:b1:76:16:57:8f:d0:61:c4:ce:c0:d2:51:95:3a:
         67:41:58:e0:ab:a3:ea:14:19:50:0c:1a:73:c4:55:be:71:dc:
         ca:c8:0b:ba:f8:f9:41:8e:3d:d2:9b:20:ee:76:2a:78:19:89:
         8a:28:d3:c2:ca:65:2f:89:39:35:7d:af:2b:0d:4b:69:b1:c4:
         38:18:ba:d0:42:4a:0a:59:98:33:66:1a:44:a3:87:89:ae:ec:
         93:89:1b:3b:27:fd:c6:0f:04:8a:27:e8:f0:b6:10:5a:2a:84:
         05:09:1d:69:ba:b7:af:4f:af:45:9d:c8:1c:e6:15:54:6e:11:
         df:ca:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:19:51 2026 by rpki-client