Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06d8c075-f655-34c5-8ed5-f030a9b0cdab.roa
File:                     06d8c075-f655-34c5-8ed5-f030a9b0cdab.roa (raw, json)
Hash identifier:          k9IlBrW8PUJPtXyTpGCmoouNXRk6iyCkLgOiReNj7Fc=
Subject key identifier:   CF:3E:79:AF:18:E4:D5:02:56:5E:67:24:A3:07:21:DD:B3:A5:87:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B53B58678D192FE00860
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06d8c075-f655-34c5-8ed5-f030a9b0cdab.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        50.48.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b5:3b:58:67:8d:19:2f:e0:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=0c8fb223-cb7d-48fe-a1bc-d32e1d64a675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:f4:77:85:98:2d:c9:ad:d2:63:fb:38:74:
                    13:4d:a3:32:16:c0:56:8e:fb:bc:05:82:ab:f5:46:
                    c8:52:a2:1f:5e:b7:7d:09:eb:a8:d0:d0:c2:ea:68:
                    d9:4a:2f:4c:ff:29:be:49:96:6a:93:fe:6d:77:c9:
                    26:95:a0:fb:c2:99:1e:fa:9a:7c:30:08:1c:b6:15:
                    71:5f:ac:dc:c7:29:92:e5:f2:9f:f6:32:8b:ef:8e:
                    fc:19:89:9a:bb:2c:1e:5e:b3:1f:e3:02:e5:b3:49:
                    98:54:bd:ce:8d:ea:31:28:b5:2b:1e:8e:6d:df:64:
                    ff:59:45:a3:9b:1a:10:2c:ec:d2:d4:20:7e:0d:bd:
                    ac:c4:39:bc:f6:bb:6c:23:29:7a:9d:2d:44:22:b9:
                    8a:ee:8e:68:62:1f:e8:d5:ee:9d:88:ca:46:be:e1:
                    5b:7c:93:c9:b3:d2:7b:52:81:bc:f9:5d:86:a4:c3:
                    7e:6e:70:f4:f3:03:ca:43:84:78:69:93:04:dc:66:
                    c2:2f:55:b1:57:4a:a0:22:9d:35:44:19:ae:db:1e:
                    93:2b:72:45:9f:0a:fe:75:a0:06:8b:05:8d:74:b8:
                    c5:55:e2:8b:96:d6:41:f0:7e:91:ef:d9:c8:83:e2:
                    d1:6e:55:c3:38:95:4b:e7:3a:1b:1c:ca:77:ae:cd:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3E:79:AF:18:E4:D5:02:56:5E:67:24:A3:07:21:DD:B3:A5:87:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06d8c075-f655-34c5-8ed5-f030a9b0cdab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.48.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:99:d9:5f:8a:7b:61:71:6c:c0:bf:6f:9d:e5:07:5b:08:
         3f:35:53:90:4c:27:3c:ce:11:57:1f:e9:78:0d:2f:af:e1:51:
         d9:d6:30:c7:02:fe:e1:ca:db:54:3d:f1:28:2b:24:53:77:ed:
         11:a2:66:66:d8:93:ef:b1:89:fd:1b:9f:aa:7b:7a:6c:12:9c:
         69:8f:6b:b5:a4:f2:01:a2:f1:37:9a:b7:b2:6f:f6:e8:c0:82:
         49:23:0f:75:d8:8b:f9:d5:a3:ca:56:c8:87:2a:1d:d7:d1:39:
         a1:8a:58:8b:e9:46:bc:be:3b:17:ec:e3:5c:c2:ee:ae:23:21:
         76:95:34:81:60:ae:9b:1a:30:01:1f:c6:59:d0:12:3c:ea:05:
         53:87:bb:05:0a:7d:db:03:f5:40:02:d1:2e:34:da:9e:c0:d8:
         9f:87:4c:4a:7c:81:82:b6:3c:d8:33:74:b5:d1:76:38:75:d7:
         93:d5:bf:60:af:12:15:85:ec:e7:a7:1c:86:89:93:5d:8a:dc:
         e1:4e:bd:19:2d:25:48:72:54:39:be:50:14:07:c6:97:6c:69:
         28:3f:e8:39:8f:f0:db:55:24:ab:68:f9:29:af:b1:89:ca:d2:
         f4:86:49:1a:09:c9:22:2b:23:b4:c7:06:65:97:cb:a4:7c:f9:
         83:ed:9e:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9aMrU7WGeNGS/gCGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MGM4ZmIyMjMtY2I3ZC00OGZlLWExYmMtZDMyZTFkNjRhNjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUX0d4WYLcmt0mP7OHQTTaMyFsBWjvu8BYKr
9UbIUqIfXrd9Ceuo0NDC6mjZSi9M/ym+SZZqk/5td8kmlaD7wpke+pp8MAgcthVx
X6zcxymS5fKf9jKL7478GYmauyweXrMf4wLls0mYVL3OjeoxKLUrHo5t32T/WUWj
mxoQLOzS1CB+Db2sxDm89rtsIyl6nS1EIrmK7o5oYh/o1e6diMpGvuFbfJPJs9J7
UoG8+V2GpMN+bnD08wPKQ4R4aZME3GbCL1WxV0qgIp01RBmu2x6TK3JFnwr+daAG
iwWNdLjFVeKLltZB8H6R79nIg+LRblXDOJVL5zobHMp3rs1+cQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM8+ea8Y5NUCVl5nJKMHId2zpYcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDZkOGMwNzUtZjY1NS0z
NGM1LThlZDUtZjAzMGE5YjBjZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBMjAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiqGZ2V+Ke2FxbMC/b53lB1sIPzVTkEwnPM4RVx/peA0vr+FR2dYwxwL+
4crbVD3xKCskU3ftEaJmZtiT77GJ/Rufqnt6bBKcaY9rtaTyAaLxN5q3sm/26MCC
SSMPddiL+dWjylbIhyod19E5oYpYi+lGvL47F+zjXMLuriMhdpU0gWCumxowAR/G
WdASPOoFU4e7BQp92wP1QALRLjTansDYn4dMSnyBgrY82DN0tdF2OHXXk9W/YK8S
FYXs56cchomTXYrc4U69GS0lSHJUOb5QFAfGl2xpKD/oOY/w21Ukq2j5Ka+xicrS
9IZJGgnJIisjtMcGZZfLpHz5g+2eow==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:54:26 2026 by rpki-client