Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9c2ce200-37e8-32ad-9089-9c68213de2fb.roa
File:                     9c2ce200-37e8-32ad-9089-9c68213de2fb.roa (raw, json)
Hash identifier:          cCN73Yzxx1V09WL0MOdMTRgqTIVbGutfTOwkic+84zA=
Subject key identifier:   CE:9A:CA:C0:16:DD:E8:AA:78:29:32:AF:CE:63:7E:E0:14:A4:DC:CD
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF431EEA9D0632DB0DE40
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9c2ce200-37e8-32ad-9089-9c68213de2fb.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f4:31:ee:a9:d0:63:2d:b0:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=582c9638-13f4-4641-b5eb-0bc48ddff195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:64:5e:2d:7c:e0:72:dd:4b:37:93:3b:79:
                    1a:08:45:3b:21:84:04:42:8a:d5:dd:19:38:77:08:
                    76:83:fb:60:cc:28:21:86:d9:95:63:8b:81:94:ac:
                    53:6c:fe:df:b2:a6:ca:a6:56:c5:4d:e4:bf:cd:55:
                    46:60:b5:59:e1:d5:d9:eb:00:da:b4:f3:4a:62:86:
                    5c:4d:47:03:45:8e:f0:82:08:7d:bd:5b:e1:f3:67:
                    12:75:7d:95:8d:a8:4e:93:9e:89:81:fa:26:71:92:
                    3a:0a:b8:d2:d0:ec:46:4f:7e:00:4f:4b:df:4a:a2:
                    08:78:52:1d:32:77:1b:6a:62:c7:0b:1a:3b:c5:14:
                    cf:5a:ee:ac:fc:79:f4:88:61:c2:65:3c:b3:3f:33:
                    a6:b6:34:d8:cb:1c:85:75:74:1e:98:88:c5:6f:55:
                    67:fb:b9:13:bc:ab:0c:8f:38:a3:e7:3a:f1:90:c2:
                    8a:d5:3a:d1:40:f3:52:76:e2:78:4b:c7:49:24:eb:
                    43:67:b9:8a:c7:96:39:a4:31:53:a8:30:b8:3d:46:
                    09:e4:a2:57:73:f5:25:07:df:b9:9a:1c:04:1e:e3:
                    36:48:01:d5:4c:11:13:08:c3:25:72:40:5f:2f:cf:
                    bf:e6:83:77:0b:56:7b:cb:2e:d6:8c:f0:4f:d4:c8:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:CA:C0:16:DD:E8:AA:78:29:32:AF:CE:63:7E:E0:14:A4:DC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9c2ce200-37e8-32ad-9089-9c68213de2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:52:36:09:92:46:64:83:0e:1c:88:47:ec:07:5b:78:09:2e:
         75:51:7f:0a:4f:5e:2f:31:59:60:fe:8f:9e:d5:d5:2e:d0:24:
         0d:d8:e5:d0:f3:f4:22:1e:b8:05:80:83:41:a8:7d:47:7d:72:
         94:49:c5:7a:e8:95:af:3e:f1:ba:56:70:d0:e8:98:31:c8:fe:
         4a:ad:4b:db:a2:91:0a:b7:34:99:a3:43:56:bc:a0:3b:9f:db:
         5e:a4:95:6f:6e:8a:c2:52:fb:18:c3:2f:21:86:ae:3c:e4:e7:
         c9:8a:96:6a:54:8f:16:6c:e9:f9:e1:07:00:7e:65:9b:45:d4:
         f4:b0:88:67:cf:c4:b3:8e:d3:e2:70:9a:14:6c:9f:af:ee:aa:
         02:90:76:cd:62:ec:f4:c4:9e:42:cb:86:04:3f:e6:21:bf:45:
         a8:16:34:05:2e:b3:97:7c:fa:3b:0c:dc:c0:ca:ac:d7:18:27:
         12:43:4c:97:7b:31:d0:30:13:13:0a:52:73:b5:f2:2a:0a:d3:
         43:c1:52:1e:94:4e:21:03:8d:dc:4e:bd:b7:73:26:c8:89:43:
         e5:2c:f6:7d:25:0a:b3:f4:b4:1b:51:48:05:28:b9:1e:45:84:
         aa:0c:58:ba:cd:56:5e:91:b9:fd:2f:ba:d0:c9:33:4c:8c:14:
         86:4e:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:20:02 2026 by rpki-client