Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa
File:                     72b08e34-6b25-320b-9e68-f2d20789a74a.roa (raw, json)
Hash identifier:          seHe9TW3K1k1oRR0oRL2NYUraCbbcU/8/OdiZ+dJCiA=
Subject key identifier:   50:BD:68:54:0D:FD:FD:22:B8:FF:C4:E8:C2:9B:C1:D9:FC:9D:64:D2
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E296EFBC7C85C31C2D3CED160
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14555
IP address blocks:        198.23.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fb:c7:c8:5c:31:c2:d3:ce:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=dd83f674-56fe-479a-b8ff-1ac7404cadb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:50:f8:7e:2b:2b:a0:44:1d:6a:70:07:92:
                    66:6a:a7:b6:0a:f7:1c:01:cd:68:36:4d:4a:a1:9c:
                    91:27:c0:4a:40:39:00:e6:a5:54:ad:e0:7c:59:55:
                    52:4e:47:fa:61:52:31:fd:9a:9c:ef:b7:a7:9e:30:
                    3f:33:5f:23:8c:ef:93:48:b2:8b:43:1c:7b:e9:07:
                    0d:14:e4:a8:f2:1a:19:18:80:f5:18:0e:fd:3e:1a:
                    b9:1c:1f:f0:49:85:dd:bc:0b:49:6c:57:3a:ec:d8:
                    43:51:80:04:82:5a:67:81:9b:50:45:f3:2e:83:ae:
                    cf:3e:5d:1c:66:f4:03:18:0d:9f:23:88:2b:1c:05:
                    bc:ec:0c:84:9d:f2:16:10:b7:51:1d:40:55:82:d5:
                    29:59:87:09:11:9d:a8:b2:ce:23:b8:1a:d7:12:17:
                    db:8e:4e:9b:d7:72:e9:b7:16:ed:32:77:b4:dd:de:
                    86:7f:b8:30:3c:bb:ed:08:a5:07:a0:ba:27:fc:3f:
                    cc:41:3f:d6:59:07:a9:32:49:b2:03:43:61:2c:14:
                    65:62:3e:87:f5:f2:3d:2a:7c:3a:5a:a9:93:b3:d8:
                    0e:5a:7e:b6:67:98:c1:28:5b:7c:ab:bc:a2:f0:e7:
                    df:87:c3:8e:51:ce:86:f6:0e:68:f4:6c:d0:a8:cb:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BD:68:54:0D:FD:FD:22:B8:FF:C4:E8:C2:9B:C1:D9:FC:9D:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7f:3f:a1:c5:e1:23:da:40:e7:a1:8a:c6:c9:f1:0a:c6:4d:
         cc:84:86:a9:eb:c6:e2:fa:67:ac:c9:7c:ce:8c:b7:cb:7b:cc:
         ea:a0:3d:47:af:d4:4a:ee:c9:20:32:5f:c1:68:14:90:05:ed:
         9d:e7:4e:ac:4f:38:3f:8c:6c:38:32:61:03:00:ab:f4:49:72:
         dc:23:ef:00:da:43:da:6d:ba:e5:4a:17:ce:ae:39:2a:fc:ea:
         a1:a7:0e:81:83:11:f7:3b:ce:68:b1:05:b1:1d:2a:00:1f:04:
         37:f2:e9:2a:c3:34:54:f3:3f:9f:db:81:50:a7:7e:d2:78:2d:
         12:03:a7:3a:18:04:96:9a:f7:2c:49:84:82:e2:11:c9:25:59:
         e0:e2:4d:31:1a:46:74:60:d2:a6:7e:8b:3d:0e:f2:73:92:00:
         a0:c9:fc:2c:29:cf:23:4e:d6:88:69:52:bd:88:00:fd:56:d0:
         42:91:31:bf:45:13:4a:72:7b:15:c3:4c:d7:5d:c8:7b:1c:65:
         31:89:8f:08:7c:2d:71:6a:9e:30:d1:15:f0:ed:61:5c:bf:e7:
         23:99:6a:40:6f:f6:25:b1:02:43:7a:92:e1:ac:f5:d2:61:90:
         35:6a:6d:95:c6:db:bf:e6:97:23:7a:ec:53:5b:47:85:68:5b:
         60:22:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:50 2026 by rpki-client