Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/be8c7004-011c-3647-86ce-3eede98e9bb9.roa
File:                     be8c7004-011c-3647-86ce-3eede98e9bb9.roa (raw, json)
Hash identifier:          McpYv4M3/MXqpbSfXXX7nKVOnmmZsCNARzhCEPKIh2M=
Subject key identifier:   5A:5B:43:FB:93:AF:02:A1:6C:72:33:05:AF:7B:24:4C:DE:C1:97:94
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F04E7D305259C853D13E8B740
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/be8c7004-011c-3647-86ce-3eede98e9bb9.roa
Signing time:             Mon 31 Aug 2026 11:45:47 +0000
ROA not before:           Mon 31 Aug 2026 11:45:47 +0000
ROA not after:            Sun 29 Nov 2026 12:45:47 +0000
asID:                     834
IP address blocks:        199.235.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:e7:d3:05:25:9c:85:3d:13:e8:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 31 11:45:47 2026 GMT
            Not After : Nov 29 12:45:47 2026 GMT
        Subject: CN=33a8a4b5-20f9-4de8-945c-acc48bd5fb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:07:bd:c4:63:b9:ba:06:ff:7a:c1:b3:26:
                    a4:e5:ca:ef:19:65:b6:ee:a3:34:d7:88:94:e1:1a:
                    cb:53:ad:70:49:ea:50:f8:e7:63:39:3e:c2:68:06:
                    64:7f:90:53:4b:0a:c2:ee:73:17:74:5f:48:98:e5:
                    8f:75:5a:d8:37:c1:1c:82:ef:3f:f9:4b:bf:cf:ac:
                    77:6d:33:5b:23:8a:f6:6b:d2:ca:0a:36:de:8d:ca:
                    51:06:81:87:47:2c:2e:89:05:9d:61:08:81:9b:54:
                    94:07:45:68:56:f1:ef:8a:f9:60:6a:55:a0:37:b5:
                    61:9d:73:6e:a1:f2:03:ed:b1:d8:93:f5:dc:7e:cf:
                    ac:00:1a:19:71:ad:1d:c4:18:31:02:c8:83:ec:83:
                    10:1c:bf:03:93:b2:f9:70:b8:91:4a:37:f7:ec:51:
                    8a:e3:00:40:f9:4c:13:0f:94:c7:c1:6d:24:15:93:
                    c8:97:94:75:54:6b:06:d9:8e:25:0e:b0:3a:76:97:
                    90:86:a2:dd:60:98:6d:50:22:d5:eb:20:93:fc:6e:
                    2c:7d:05:9a:6f:f9:89:e6:3b:71:e1:b3:83:c9:4a:
                    a7:8d:bf:a5:53:75:69:96:61:53:c2:4e:0f:12:50:
                    c4:95:c5:32:50:6d:7e:98:97:f8:d9:26:99:61:db:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5B:43:FB:93:AF:02:A1:6C:72:33:05:AF:7B:24:4C:DE:C1:97:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/be8c7004-011c-3647-86ce-3eede98e9bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:d2:5d:0b:0f:93:89:e6:26:1e:6f:19:5c:2a:ab:1f:2d:
         fb:38:2e:23:77:95:c9:06:31:9f:fd:99:03:82:06:79:47:9e:
         d7:75:be:11:32:df:d0:0a:4c:f6:44:14:ab:57:05:e7:41:3f:
         3a:a9:c7:bb:f5:0e:d8:d4:a4:5c:11:eb:da:6e:3e:85:d8:76:
         13:2e:f8:89:64:b9:ae:9a:89:ba:f4:9d:c2:15:db:bd:2f:c9:
         c5:39:d6:70:5f:81:d8:47:ae:e6:bd:97:ea:e7:46:2b:ef:18:
         98:6e:27:de:32:13:ce:4f:19:d2:5b:ff:d6:07:45:cd:59:2f:
         32:0e:4d:64:73:8c:61:79:e5:2d:ab:4d:e7:4a:4b:ca:ce:2b:
         c3:76:59:bb:89:c3:9e:b4:d0:bc:9f:c8:bb:02:87:55:61:4c:
         cf:9b:92:d1:80:af:e6:15:b5:95:c3:93:da:1a:6a:58:66:96:
         17:db:ae:55:71:a6:3e:64:65:48:35:f3:6c:c8:73:51:54:97:
         e6:8b:66:cb:c1:8c:a6:0d:b8:89:f3:73:8b:00:49:bb:6a:49:
         2e:c4:49:b5:20:40:ab:3c:db:c0:44:84:d1:a2:fe:96:e9:0c:
         49:26:ee:82:d6:41:99:61:de:50:68:1c:27:88:76:48:9e:f7:
         ee:19:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:30 2026 by rpki-client