Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9ba0ac5d-44dc-39e6-899f-01234b498243.roa
File:                     9ba0ac5d-44dc-39e6-899f-01234b498243.roa (raw, json)
Hash identifier:          IavEIXZAnMDN9ipM/XGEy4r5nU/6ICIfmyTwCIBq4Bk=
Subject key identifier:   85:16:BF:09:B0:38:6F:C4:28:18:21:A1:E0:C9:9C:17:21:51:DE:22
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E4129E57C54EDB4013D648E80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9ba0ac5d-44dc-39e6-899f-01234b498243.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     19871
IP address blocks:        50.118.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e5:7c:54:ed:b4:01:3d:64:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=23bbc33e-7546-46a4-b05c-446e509a4260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:7a:90:03:94:a6:7a:8f:fe:bf:b9:5d:59:
                    5b:0e:c7:31:d0:bb:50:7c:a1:8e:1e:df:2e:cb:19:
                    92:7b:9c:57:f7:78:b5:9c:35:2f:77:cc:0a:d1:85:
                    8e:0c:78:9e:22:ad:77:38:bf:f5:13:d5:a0:9e:d6:
                    38:82:dc:0a:25:35:03:9b:d4:ac:c8:83:b2:f7:1f:
                    92:1d:65:df:a3:42:d2:c1:fc:ca:9c:77:18:c1:71:
                    ca:a0:b7:2e:d7:56:30:47:5a:d7:e5:7b:2e:07:5d:
                    a9:5e:e3:7b:60:bf:7f:b5:86:ff:87:78:82:37:3e:
                    a9:9d:5d:d0:c0:1f:81:29:35:22:99:28:22:6a:63:
                    3b:41:22:c1:b2:46:50:9c:5e:c8:b8:86:1d:23:d1:
                    92:a0:d2:e6:1d:7a:e5:b0:b5:b7:5c:48:99:67:d6:
                    23:9a:45:2c:f4:18:e9:19:b7:aa:c4:45:86:70:57:
                    ad:d6:0e:87:66:4e:b4:10:e5:48:b7:f1:3e:1f:3d:
                    fd:ea:6c:cd:e5:68:07:bb:dc:30:8d:b8:f9:d3:11:
                    b5:14:f5:62:5a:eb:d6:69:fc:43:35:20:9f:44:12:
                    18:b7:50:7d:ba:83:5d:4e:53:08:29:96:c5:7f:04:
                    8b:da:c8:ba:54:6e:ab:d5:1b:35:b2:45:80:1d:ba:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:BF:09:B0:38:6F:C4:28:18:21:A1:E0:C9:9C:17:21:51:DE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9ba0ac5d-44dc-39e6-899f-01234b498243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:14:a1:84:72:1f:de:e7:9c:5d:db:c9:2c:e6:d0:a5:8e:
         01:ef:34:5b:0f:e1:53:7d:3d:e3:d1:85:4e:89:d4:36:f0:b9:
         ac:10:5c:05:76:f8:4d:68:4e:a9:59:8f:6e:6b:1b:0d:1d:e2:
         9e:1e:82:5d:b0:21:92:dc:86:2e:6d:ea:cd:44:6c:1c:39:d5:
         63:62:5b:3d:77:62:e4:d2:1a:0c:bd:60:f5:f3:2e:3b:a0:c1:
         c5:c9:e3:36:9f:20:b3:67:b2:d5:0e:8d:33:52:a3:e3:a0:d0:
         56:25:43:09:47:48:58:a4:16:d3:65:e0:76:2a:eb:55:d0:a3:
         9e:e9:a1:e3:9b:1f:3e:0d:48:ee:44:9b:6c:8f:fb:e7:d6:ad:
         00:91:82:82:48:04:65:6b:7c:b8:6b:a1:da:37:98:1a:60:e5:
         fd:4f:ae:4d:de:2d:6c:56:4b:c6:08:2a:2b:f2:28:4f:86:71:
         5f:4a:ab:c7:47:2d:b1:cb:a0:11:81:08:34:04:59:f4:cc:28:
         64:f0:86:8c:f0:b5:47:95:ad:52:90:21:56:38:6d:a6:c4:a4:
         76:44:0a:11:f6:82:8a:af:ff:b5:0e:0a:f5:e9:25:dd:c4:f8:
         7f:6b:50:90:a8:67:61:38:e7:9f:6f:1c:17:e6:7f:d5:37:45:
         e5:24:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:05:41 2026 by rpki-client