Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ead06018-d1a6-378e-968b-20c3b2ac384d.roa
File:                     ead06018-d1a6-378e-968b-20c3b2ac384d.roa (raw, json)
Hash identifier:          Ubon7jm6NMcjbmKmMmNFjhEBP2USluf259Yf6kAJYTA=
Subject key identifier:   65:B5:EE:8B:71:8A:04:06:D1:AE:E8:C8:37:82:2C:F4:5E:06:41:2B
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF475BB31C3C163BB3A80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ead06018-d1a6-378e-968b-20c3b2ac384d.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f4:75:bb:31:c3:c1:63:bb:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=2609803c-df81-41c8-8f5c-fa372aae6b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:24:6b:5a:ff:3f:ac:62:2d:e3:50:30:04:
                    e8:30:a2:ec:76:dc:56:4f:fd:e9:f4:2d:85:aa:25:
                    5c:bd:ee:7d:8a:4e:18:71:3c:9d:af:96:b1:f2:af:
                    26:06:ba:8c:95:0f:bd:69:25:68:81:1d:8f:39:f4:
                    c2:77:8a:6f:26:0c:36:e0:f7:86:e0:56:19:92:de:
                    46:b9:25:ca:76:a1:c1:11:4f:a6:86:4c:68:46:e6:
                    63:38:fd:ce:d6:97:27:a9:d0:df:0a:e3:51:54:3a:
                    9c:fb:03:43:e2:2c:bf:e4:11:f3:d5:01:47:9f:50:
                    20:b0:c1:00:4d:d1:35:16:25:9b:54:2c:10:0d:de:
                    a5:f8:43:10:aa:f8:d0:9b:d8:c2:3f:ee:27:8d:1c:
                    8a:2c:7d:7c:dc:ab:47:86:17:4c:cf:78:13:44:8a:
                    83:51:5b:d0:33:95:fb:26:71:6c:77:04:64:9a:aa:
                    2f:da:76:ee:ab:00:85:32:d9:ec:92:45:f9:fb:61:
                    26:1c:e7:25:22:2d:3d:d9:42:bf:68:88:b1:2a:75:
                    80:60:66:b0:4c:b9:e6:e9:1e:f8:a2:6c:0c:83:b5:
                    dd:11:1a:ae:0d:7f:29:1d:61:df:b5:92:72:fa:d9:
                    59:66:c0:e9:eb:d8:ec:e5:16:ca:89:49:ed:15:85:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:EE:8B:71:8A:04:06:D1:AE:E8:C8:37:82:2C:F4:5E:06:41:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ead06018-d1a6-378e-968b-20c3b2ac384d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:e3:41:c6:09:4c:13:9e:b6:9b:e4:97:ef:90:9a:ab:52:
         6c:c2:82:89:ef:cf:5a:ad:a6:80:29:40:39:da:77:da:7a:8a:
         82:12:44:e1:1d:2a:26:8f:41:be:29:be:75:16:5c:cb:1d:db:
         6d:5f:7c:87:8b:07:37:20:24:c6:c3:bd:7f:07:02:7b:a4:6d:
         af:ee:b8:2b:cc:31:77:6f:8f:5c:7e:f4:b7:6e:4d:dd:c1:9c:
         6a:88:f2:07:83:86:13:9f:a5:a7:6a:73:39:b1:9c:2c:bd:e7:
         da:50:08:41:92:87:c3:63:aa:80:36:0b:ee:9b:ba:49:f7:0b:
         3c:62:03:7c:f6:f4:cd:c2:5e:53:a8:21:f7:c0:6e:e6:21:dc:
         c7:9e:a0:03:2f:e9:f3:f0:e6:d8:45:8f:64:b7:4a:07:e9:b3:
         a6:18:6f:bc:67:55:c8:a8:47:5a:9a:99:42:e2:98:4e:5a:de:
         99:6f:fa:e7:4c:07:a9:e9:ae:b6:10:b5:df:f0:df:f2:28:5d:
         d4:8b:f5:96:ed:80:cd:d5:2a:e1:81:0e:72:4a:59:34:3d:41:
         55:0a:82:d9:ae:d6:f5:cf:68:a7:e7:09:a6:e6:f6:68:5e:83:
         02:0c:7f:92:c8:f1:64:d9:06:4d:ee:94:02:35:93:0d:bb:de:
         e2:61:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:08:06 2026 by rpki-client