Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cd215de3-ab93-37e5-85bc-52d908be3e86.roa
File:                     cd215de3-ab93-37e5-85bc-52d908be3e86.roa (raw, json)
Hash identifier:          SGOpL3QdShQ5LBzN/EFvaF+dFa+xbzvQmS4AvczGvr8=
Subject key identifier:   4A:36:1B:D6:3F:4A:CA:03:B2:C1:FA:D2:AD:39:8B:3D:D7:12:8B:E6
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F2C11C529D0FBAC8A578A0080
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cd215de3-ab93-37e5-85bc-52d908be3e86.roa
Signing time:             Mon 14 Sep 2026 12:26:49 +0000
ROA not before:           Mon 14 Sep 2026 12:26:49 +0000
ROA not after:            Sun 13 Dec 2026 13:26:49 +0000
asID:                     812
IP address blocks:        199.235.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:11:c5:29:d0:fb:ac:8a:57:8a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 14 12:26:49 2026 GMT
            Not After : Dec 13 13:26:49 2026 GMT
        Subject: CN=8e046603-e4ed-4496-8bd4-8bd2384483ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:b6:17:31:41:1a:11:fc:c7:98:6b:de:00:
                    5e:71:87:d2:4d:9e:83:68:4a:19:51:43:a4:5f:c2:
                    78:f3:0b:60:fc:9b:37:59:5c:eb:10:8f:fa:ad:ad:
                    7b:ac:d2:92:31:cb:cd:74:48:8c:5c:98:7b:06:da:
                    2f:d7:be:b4:1a:96:32:fd:97:24:07:f8:f7:90:35:
                    e3:88:b3:7a:75:55:a6:0e:86:0d:82:d5:95:3c:f9:
                    6e:35:fc:39:59:da:6d:09:75:62:23:2d:e8:82:c6:
                    1f:86:62:53:7c:e7:2e:14:9e:c0:5f:28:15:85:f7:
                    75:f8:38:44:70:29:52:c8:d1:ba:a3:82:36:11:52:
                    75:de:ee:30:90:09:30:e9:e6:9c:32:67:7e:ec:35:
                    fd:8c:2e:96:b4:7e:1b:e1:58:e0:93:35:96:59:47:
                    67:6f:64:13:ea:c2:94:ea:78:c0:41:9d:d9:cd:52:
                    47:5e:e0:9d:89:41:6d:63:dc:ba:36:1d:af:7e:4b:
                    3c:1c:9c:05:95:ae:c1:74:4a:f1:fa:cf:12:ca:66:
                    19:2c:7c:be:ec:12:d7:1e:c3:6d:ac:29:af:89:fc:
                    7d:f7:0a:b6:5d:63:0d:bc:49:2c:23:58:07:3a:ca:
                    86:50:3d:2a:70:ce:da:aa:ae:57:5b:a7:4f:c5:21:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:1B:D6:3F:4A:CA:03:B2:C1:FA:D2:AD:39:8B:3D:D7:12:8B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cd215de3-ab93-37e5-85bc-52d908be3e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:25:98:02:a0:a2:c5:5c:d0:97:63:58:93:5d:46:66:7e:
         13:fe:5c:f0:bd:12:8d:cf:c6:db:6d:df:20:66:6e:c3:84:29:
         ff:38:fd:b6:23:52:af:bd:71:ff:fc:2f:a1:fe:fb:52:b1:87:
         85:7e:8a:f1:92:33:9a:93:83:e4:4f:74:7a:65:e3:bc:a1:9c:
         34:47:37:e2:de:85:ac:7d:9b:f6:52:81:8c:84:4f:5e:a1:03:
         ae:cb:99:92:ef:be:70:35:6f:4d:26:bd:ca:19:58:e5:cb:63:
         b1:78:9a:a0:93:aa:ee:77:c3:6c:61:6f:2f:e5:1d:db:9d:79:
         05:ee:26:36:94:2d:72:9a:6a:a7:db:36:43:39:bc:70:3b:98:
         01:dc:32:97:2e:28:6f:06:c8:8a:34:a0:47:82:ac:06:a3:23:
         e6:88:ee:6c:4c:38:60:31:51:ef:37:1e:69:77:e2:c1:6f:d6:
         36:0c:2e:3e:92:3d:6a:fd:30:82:16:f0:06:55:51:4a:5e:c7:
         52:97:8a:3d:82:a4:96:d4:5b:d8:bd:a6:86:34:d9:8b:9a:b8:
         8c:40:47:72:a0:5f:67:f0:04:9c:1d:64:a0:98:0e:04:0e:93:
         50:1b:14:bc:d9:94:b7:a2:5e:66:70:3f:c3:a8:1c:8f:5e:5f:
         a2:31:4e:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sEcUp0PusileKAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDkxNDEyMjY0OVoXDTI2MTIxMzEzMjY0OVowLzEtMCsGA1UEAxMk
OGUwNDY2MDMtZTRlZC00NDk2LThiZDQtOGJkMjM4NDQ4M2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiC2FzFBGhH8x5hr3gBecYfSTZ6DaEoZUUOk
X8J48wtg/Js3WVzrEI/6ra17rNKSMcvNdEiMXJh7Btov1760GpYy/ZckB/j3kDXj
iLN6dVWmDoYNgtWVPPluNfw5WdptCXViIy3ogsYfhmJTfOcuFJ7AXygVhfd1+DhE
cClSyNG6o4I2EVJ13u4wkAkw6eacMmd+7DX9jC6WtH4b4VjgkzWWWUdnb2QT6sKU
6njAQZ3ZzVJHXuCdiUFtY9y6Nh2vfks8HJwFla7BdErx+s8SymYZLHy+7BLXHsNt
rCmvifx99wq2XWMNvEksI1gHOsqGUD0qcM7aqq5XW6dPxSHgBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEo2G9Y/SsoDssH60q05iz3XEovmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvY2QyMTVkZTMtYWI5My0z
N2U1LTg1YmMtNTJkOTA4YmUzZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+uRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABI7JZgCoKLFXNCXY1iTXUZmfhP+XPC9Eo3Pxttt3yBmbsOEKf84/bYj
Uq+9cf/8L6H++1Kxh4V+ivGSM5qTg+RPdHpl47yhnDRHN+Lehax9m/ZSgYyET16h
A67LmZLvvnA1b00mvcoZWOXLY7F4mqCTqu53w2xhby/lHdudeQXuJjaULXKaaqfb
NkM5vHA7mAHcMpcuKG8GyIo0oEeCrAajI+aI7mxMOGAxUe83Hml34sFv1jYMLj6S
PWr9MIIW8AZVUUpex1KXij2CpJbUW9i9poY02YuauIxAR3KgX2fwBJwdZKCYDgQO
k1AbFLzZlLeiXmZwP8OoHI9eX6IxTlY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:38 2026 by rpki-client