Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa
File:                     50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa (raw, json)
Hash identifier:          u4U+XPykqafS2HEnbXVz6WqR+P2GtUbeu1I53to4DP4=
Subject key identifier:   45:FF:17:F9:83:01:C5:13:19:66:4B:5C:8C:AB:D2:C0:56:BF:A9:A0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC407905175DD22904A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21552
IP address blocks:        204.101.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c4:07:90:51:75:dd:22:90:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=45e2dbb1-2266-4736-9a95-70471994d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:99:8b:20:ed:42:26:f3:06:78:98:2b:26:
                    04:65:be:68:f2:dc:11:0d:c4:51:fc:6c:59:34:72:
                    c8:b8:96:fb:4d:be:a6:33:4e:64:5d:64:c9:a2:05:
                    1b:bd:f4:97:03:19:51:77:cb:ea:0e:fe:cf:bf:2b:
                    08:cd:0e:ca:61:e8:e0:f6:e9:cd:3e:cd:9d:83:eb:
                    96:84:7d:a2:3f:3d:dd:10:f5:fc:ea:d1:00:53:e6:
                    a3:58:01:86:24:f5:d7:0a:c6:63:20:46:8b:07:d9:
                    3c:6d:90:d1:a1:7e:09:ef:1b:8b:2d:60:f2:48:d1:
                    9c:b6:73:d9:8e:d4:64:a5:06:fd:23:cd:eb:3b:db:
                    28:2e:16:43:89:c5:a1:92:2e:4e:32:5d:fa:a0:fc:
                    59:e0:f5:eb:d7:d5:1f:4e:e8:00:17:b9:e7:24:bc:
                    c5:39:1f:18:6e:e2:dd:dd:46:69:36:cc:94:73:e8:
                    f7:34:5b:26:6b:b5:74:2f:52:46:3f:c8:78:81:24:
                    01:45:3e:31:83:22:8c:52:94:5e:ec:76:a2:49:49:
                    6b:44:f6:9f:3c:80:d4:bc:ed:7e:46:ff:92:00:f0:
                    a1:7d:ac:56:d5:27:a7:d5:35:54:ae:57:e7:12:06:
                    95:3d:99:ff:cf:b0:07:49:59:a2:e2:31:b2:fd:1a:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:17:F9:83:01:C5:13:19:66:4B:5C:8C:AB:D2:C0:56:BF:A9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:da:ca:59:06:95:eb:18:ef:f1:27:ee:92:ec:05:db:3e:
         c9:1e:96:54:cf:77:61:00:b3:58:43:69:88:61:06:55:cc:38:
         c7:15:ee:67:3d:02:ca:3b:fa:bc:2f:79:dc:a7:17:78:23:9d:
         d3:75:2e:01:be:1f:8d:01:2e:07:2e:2d:5d:70:30:bd:84:71:
         39:4b:e1:0f:47:94:18:77:f4:c2:78:ce:d3:a1:23:48:d9:3e:
         db:ac:a0:7a:2d:19:82:03:c2:34:84:c3:69:b7:fa:d4:8c:66:
         9c:d8:39:2e:4e:09:f9:18:c1:7a:07:b5:dd:6d:73:3d:65:50:
         89:e0:80:b0:db:bd:eb:15:bc:c5:5b:83:67:64:81:a9:8a:5d:
         05:ad:55:1f:04:8f:78:72:3c:b5:7e:a2:ca:3f:dc:65:28:df:
         82:30:ad:38:a6:77:c3:53:46:30:21:4a:df:f7:0d:e7:08:a5:
         26:74:d8:be:5d:42:f9:6f:71:70:8d:4b:17:10:4c:69:d1:27:
         13:13:69:2a:35:5b:08:03:45:ba:05:79:43:6a:b1:83:13:72:
         72:c2:71:37:e3:b2:42:9c:22:d9:26:89:01:cc:b2:04:c7:8b:
         07:ff:70:2b:59:42:c2:b1:0a:b4:70:5c:85:9a:e9:cf:14:b9:
         1c:b1:d6:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD8QHkFF13SKQSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NDVlMmRiYjEtMjI2Ni00NzM2LTlhOTUtNzA0NzE5OTRkNDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveWZiyDtQibzBniYKyYEZb5o8twRDcRR/GxZ
NHLIuJb7Tb6mM05kXWTJogUbvfSXAxlRd8vqDv7PvysIzQ7KYejg9unNPs2dg+uW
hH2iPz3dEPX86tEAU+ajWAGGJPXXCsZjIEaLB9k8bZDRoX4J7xuLLWDySNGctnPZ
jtRkpQb9I83rO9soLhZDicWhki5OMl36oPxZ4PXr19UfTugAF7nnJLzFOR8YbuLd
3UZpNsyUc+j3NFsma7V0L1JGP8h4gSQBRT4xgyKMUpRe7HaiSUlrRPafPIDUvO1+
Rv+SAPChfaxW1Sen1TVUrlfnEgaVPZn/z7AHSVmi4jGy/RobRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX/F/mDAcUTGWZLXIyr0sBWv6mgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTBmYTYxOWMtYjVhZS0z
YzJkLWE3OTMtY2Q2NzI2MGMwY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApB2spZBpXrGO/xJ+6S7AXbPskellTPd2EAs1hDaYhhBlXMOMcV7mc9
Aso7+rwvedynF3gjndN1LgG+H40BLgcuLV1wML2EcTlL4Q9HlBh39MJ4ztOhI0jZ
PtusoHotGYIDwjSEw2m3+tSMZpzYOS5OCfkYwXoHtd1tcz1lUInggLDbvesVvMVb
g2dkgamKXQWtVR8Ej3hyPLV+oso/3GUo34IwrTimd8NTRjAhSt/3DecIpSZ02L5d
QvlvcXCNSxcQTGnRJxMTaSo1WwgDRboFeUNqsYMTcnLCcTfjskKcItkmiQHMsgTH
iwf/cCtZQsKxCrRwXIWa6c8UuRyx1ss=
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:54:37 2026 by rpki-client