Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a9d4a6ec-6686-3ea5-97de-b34a6ed4c1cb.roa
File:                     a9d4a6ec-6686-3ea5-97de-b34a6ed4c1cb.roa (raw, json)
Hash identifier:          3qZNRaIhpAoEo19CW67433glk+MO0tBdqvYsIffdoS0=
Subject key identifier:   9D:33:20:8F:62:18:63:E6:B7:E8:38:39:A7:B3:4E:96:BD:8B:BD:76
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF3A250F699675EBAB380
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a9d4a6ec-6686-3ea5-97de-b34a6ed4c1cb.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f3:a2:50:f6:99:67:5e:ba:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=c00060fd-8e48-4810-924e-9b12cb0816ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:fe:ca:88:d2:a6:cc:17:b9:83:04:bd:6d:
                    c8:e7:75:88:49:cb:f4:77:f6:07:5d:4e:bc:2a:1c:
                    bf:0c:4b:7d:8b:40:fd:c7:7f:17:63:69:b7:f5:32:
                    6d:a4:b7:6d:d7:79:f2:b5:28:e9:bc:3d:94:22:a3:
                    77:20:0c:58:f1:f0:50:83:65:8e:e1:a1:0e:4e:81:
                    d8:d9:5b:22:25:17:53:99:28:79:a4:c2:52:fd:d7:
                    c7:c6:9b:4f:42:58:cf:1b:94:b7:86:1b:a3:c9:f7:
                    11:d8:08:85:76:d3:05:20:94:01:80:8a:67:e6:96:
                    6a:ca:3a:19:15:0a:22:bd:e1:8a:1c:40:58:ad:0a:
                    f8:f3:ed:98:7b:a9:42:02:69:64:e4:41:8d:0a:f7:
                    01:59:de:b1:71:de:2c:0f:38:59:6a:f4:e9:7a:3b:
                    25:8c:67:ff:98:b5:53:37:ab:6f:d5:51:6a:5b:f7:
                    52:e0:96:52:e6:e7:92:59:6c:52:25:9e:3e:d0:0e:
                    aa:d4:be:ed:18:ae:1c:86:31:87:9f:6b:44:c4:a2:
                    6f:90:68:6b:e7:a2:62:59:e1:14:82:bd:e6:8d:d8:
                    ec:0f:8b:27:43:6a:c9:83:c2:3e:fb:70:5b:50:9d:
                    3c:d0:d5:90:f3:74:07:c0:01:3e:82:b0:c5:86:d2:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:33:20:8F:62:18:63:E6:B7:E8:38:39:A7:B3:4E:96:BD:8B:BD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a9d4a6ec-6686-3ea5-97de-b34a6ed4c1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:60:56:56:6c:55:a7:ea:15:13:b7:d6:f9:ba:0a:39:bc:
         66:c1:71:22:ba:6a:b6:ae:d9:b0:c0:20:e1:bc:c4:5d:69:a3:
         15:48:f0:61:55:fb:74:74:3e:ad:b9:61:a2:4b:92:90:7f:c6:
         96:a5:78:67:52:f7:9b:de:77:eb:e0:45:3a:16:d1:3c:c9:f9:
         37:6e:26:70:46:50:56:f1:7e:97:88:c6:7d:c8:80:b1:a9:b4:
         80:34:cf:85:57:58:b2:5d:35:95:4e:20:99:10:68:92:04:94:
         18:b7:24:71:69:28:ee:0f:f8:36:83:71:0d:27:85:39:64:0e:
         5d:ff:9e:15:7f:22:85:64:38:22:8e:59:7b:c1:6c:e4:98:c9:
         a3:7b:9b:80:72:c7:5d:19:e9:5b:b7:fc:57:8f:68:fc:6e:6a:
         ff:64:e2:cf:9c:78:e9:77:20:08:51:8d:ee:e2:56:2e:56:7e:
         ce:73:de:ab:47:18:61:f6:ca:35:5a:0b:cc:47:73:9a:d9:a6:
         0a:0e:0b:e1:5b:c7:f1:9b:62:c5:ee:35:41:5f:a7:76:de:4a:
         46:dd:1f:b3:c1:03:c9:09:c3:4d:97:ba:83:18:51:9c:ec:1f:
         fc:17:40:7b:15:40:0b:58:a7:fd:a6:b8:d4:8e:a7:83:97:f9:
         6f:cb:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:31 2026 by rpki-client