Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a0428570-6e25-3e4f-9be5-7e49d9a4ad2a.roa
File:                     a0428570-6e25-3e4f-9be5-7e49d9a4ad2a.roa (raw, json)
Hash identifier:          zBxpsnXI5OrhRHc85tP+r6UV2G3WhSrN6JWZODbVFrU=
Subject key identifier:   E9:A9:6B:AA:58:C6:7E:96:93:5D:5B:4E:94:69:2E:37:2B:7F:0F:4E
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F04E85DE76918FAF37A65FE80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a0428570-6e25-3e4f-9be5-7e49d9a4ad2a.roa
Signing time:             Mon 31 Aug 2026 11:46:52 +0000
ROA not before:           Mon 31 Aug 2026 11:46:52 +0000
ROA not after:            Sun 29 Nov 2026 12:46:52 +0000
asID:                     834
IP address blocks:        199.235.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:e8:5d:e7:69:18:fa:f3:7a:65:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 31 11:46:52 2026 GMT
            Not After : Nov 29 12:46:52 2026 GMT
        Subject: CN=72b077af-4322-491b-98ab-44a1dc8ec884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:a9:60:6e:68:22:6e:26:ce:e4:c9:ff:07:
                    55:20:46:b0:d0:dd:df:1f:98:1b:1a:e3:45:c7:a1:
                    34:36:62:3a:aa:51:c1:b4:79:a7:52:86:67:16:ce:
                    7d:be:de:07:64:c7:df:d6:32:84:30:c5:c9:fd:31:
                    58:46:d1:b4:89:f2:d2:fc:53:42:e5:06:84:50:b9:
                    68:5e:46:b6:d5:fc:dc:7e:ec:47:f4:2c:da:96:9a:
                    06:6c:d6:f0:b7:aa:12:c3:56:5b:9b:a6:19:cb:a6:
                    d1:a6:c8:99:d0:6c:75:28:d6:4f:44:d2:ea:7a:8a:
                    86:0e:50:93:fa:70:9b:b1:c0:95:d2:7d:c6:9d:e8:
                    7a:6e:03:8f:89:ad:47:e1:7c:db:29:9f:e6:f6:89:
                    2a:01:a8:0e:11:4e:39:9c:fe:61:24:a1:bc:43:f3:
                    ee:1f:99:2f:a2:99:80:7b:cf:8a:0a:d9:e4:7c:89:
                    12:d2:8c:01:8b:dc:8b:75:9d:06:8a:a1:04:8f:12:
                    10:7b:a9:f5:19:fc:35:a7:d9:5b:e5:6d:40:85:35:
                    0d:bc:2d:5e:d7:87:b7:52:b1:e5:03:aa:6f:b7:8a:
                    82:ee:17:96:d0:16:e5:a0:3c:78:16:a0:dc:b2:82:
                    34:5b:90:93:56:f1:97:4a:af:6e:37:b4:5d:c6:28:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:6B:AA:58:C6:7E:96:93:5D:5B:4E:94:69:2E:37:2B:7F:0F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a0428570-6e25-3e4f-9be5-7e49d9a4ad2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:24:7f:a5:4e:13:3c:76:b3:33:6c:42:70:a2:c0:3c:07:b1:
         12:03:fb:e3:26:a3:c8:5f:08:5d:e4:70:5c:b4:d7:d7:3e:95:
         8d:7a:4b:86:5e:21:3b:57:2a:c8:7c:01:d4:98:25:f3:99:27:
         3a:0e:5e:fc:df:ee:12:2b:2e:52:58:66:fb:e7:5f:22:56:de:
         e3:63:04:5b:da:b6:7c:bd:82:29:36:8a:0e:74:bd:36:d4:7e:
         1a:f2:57:f7:30:73:71:1f:02:bc:14:9f:a5:ef:6c:f7:ec:34:
         33:cc:ad:8a:1b:9c:81:7f:30:c9:79:ec:42:58:e2:5e:4b:7e:
         96:b5:e6:8e:36:22:73:e9:f9:44:b1:80:7d:51:d7:59:b4:5c:
         9d:d0:63:11:17:7d:57:04:a9:7f:19:a1:2a:8f:6e:df:05:52:
         16:6a:00:1f:c6:08:14:23:a8:83:46:ef:ad:54:3b:c9:6e:95:
         e5:2f:f9:79:9c:65:54:0a:ba:31:19:3b:1f:05:84:b8:df:3a:
         5a:7f:5c:80:56:22:f7:8b:1c:0a:6c:a7:2f:fc:e0:cb:13:4a:
         b0:51:bd:32:93:6a:83:7c:b7:c2:cd:50:51:cc:3e:5c:bd:9a:
         ba:96:0a:2d:0c:05:1d:f5:d1:d4:88:42:d1:3e:cf:11:50:be:
         15:8d:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:27 2026 by rpki-client