Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f821efb-d1cf-36de-8dcc-be2904bb24a8.roa
File:                     0f821efb-d1cf-36de-8dcc-be2904bb24a8.roa (raw, json)
Hash identifier:          tARUPAvOgmW/B0B6/UA0NBnY9zAAFx5VN4BEWEYRbug=
Subject key identifier:   32:CF:FA:30:85:F5:AA:EC:E9:FE:6F:8B:73:D6:1B:CE:52:22:44:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49803F768D22DA0EF5B06760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f821efb-d1cf-36de-8dcc-be2904bb24a8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33661
IP address blocks:        50.236.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:3f:76:8d:22:da:0e:f5:b0:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e172668-4bfd-4afa-9b42-dc344213d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:aa:a2:0d:55:d6:aa:46:b9:1a:60:8b:1e:
                    05:5d:d6:a7:f4:4d:a4:ea:b1:1b:e2:8c:3b:21:1b:
                    51:fe:a8:60:a9:a3:bf:ec:42:01:1d:fe:7b:7d:ff:
                    5f:f2:f5:0f:18:5b:04:eb:a6:b4:99:a7:84:db:a3:
                    7e:8c:1c:9e:f7:0c:1f:3b:67:71:fd:75:dd:e0:80:
                    0a:78:ff:24:1d:c4:fb:ce:4b:7e:3a:3c:ff:35:74:
                    54:46:0b:4e:29:e2:55:4a:89:e8:ec:d8:b3:59:22:
                    fb:f3:4d:c1:6a:f5:17:95:2a:0f:32:c6:b8:8d:ef:
                    cd:75:2b:97:d0:f9:37:1c:f6:cc:c4:23:81:b4:c6:
                    cf:e9:77:f3:d1:16:cc:70:6c:77:05:2f:49:6b:fa:
                    b7:e2:5c:92:fc:0f:17:72:20:1e:f1:23:a9:db:f4:
                    82:2e:f5:84:dd:ab:2b:30:2d:9a:5e:ce:cf:ba:88:
                    36:2f:1e:9a:97:09:19:4c:dc:27:7e:3d:13:51:7e:
                    11:32:42:15:e9:01:f1:4e:29:4a:e7:b7:0b:8c:59:
                    9b:0f:fb:8f:81:76:6d:0d:fa:af:4b:c4:33:0f:d6:
                    6c:1b:23:c6:d3:5f:8c:7b:b4:e5:0d:f5:3a:5b:6d:
                    cf:f8:33:3b:55:44:e5:53:b3:dc:22:d4:5f:46:b3:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:FA:30:85:F5:AA:EC:E9:FE:6F:8B:73:D6:1B:CE:52:22:44:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f821efb-d1cf-36de-8dcc-be2904bb24a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.236.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:99:c8:29:17:75:7d:45:9b:89:4c:eb:74:d8:57:63:9d:09:
         ef:f6:12:3c:eb:f1:b8:b1:88:bd:4c:65:6f:62:81:49:9a:63:
         fa:c4:4c:4f:e5:ee:f3:cc:c2:94:7f:7b:38:ca:21:b1:ee:70:
         c8:b8:f4:75:7b:b1:e7:45:66:23:59:2d:48:8a:d0:08:77:93:
         5a:52:88:25:30:5b:89:7b:9e:b0:d4:a3:8d:c8:e9:50:51:6f:
         41:42:03:da:47:0d:52:c0:dd:92:37:56:42:4b:71:e1:eb:2c:
         69:03:28:c9:0b:2b:2c:6c:f7:4f:8a:f8:0f:0b:89:68:ed:4a:
         a0:64:5e:12:a6:d1:04:b8:a0:cb:7e:18:d3:a1:69:4b:26:54:
         dd:27:19:18:a8:5a:bb:eb:5d:e5:d4:65:ed:a3:08:7a:37:29:
         a5:60:4a:db:6e:e5:9f:ef:63:51:d8:25:46:22:97:7a:31:51:
         f0:e0:9f:8f:43:95:b6:db:f1:c4:68:d1:c9:a7:b3:f1:7d:1c:
         9c:ee:7b:68:6a:31:0d:15:35:86:6c:a3:ff:ea:b5:aa:09:33:
         99:09:78:c3:61:47:1d:e7:91:e1:68:f0:02:64:96:87:45:c9:
         75:30:35:f9:da:ae:05:bf:3c:91:33:84:2e:1f:f5:4a:49:2b:
         20:2a:48:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgD92jSLaDvWwZ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGUxNzI2NjgtNGJmZC00YWZhLTliNDItZGMzNDQyMTNkNmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoECqog1V1qpGuRpgix4FXdan9E2k6rEb4ow7
IRtR/qhgqaO/7EIBHf57ff9f8vUPGFsE66a0maeE26N+jBye9wwfO2dx/XXd4IAK
eP8kHcT7zkt+Ojz/NXRURgtOKeJVSono7NizWSL7803BavUXlSoPMsa4je/NdSuX
0Pk3HPbMxCOBtMbP6Xfz0RbMcGx3BS9Ja/q34lyS/A8XciAe8SOp2/SCLvWE3asr
MC2aXs7Puog2Lx6alwkZTNwnfj0TUX4RMkIV6QHxTilK57cLjFmbD/uPgXZtDfqv
S8QzD9ZsGyPG01+Me7TlDfU6W23P+DM7VUTlU7PcItRfRrMtswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLP+jCF9ars6f5vi3PWG85SIkStMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY4MjFlZmItZDFjZi0z
NmRlLThkY2MtYmUyOTA0YmIyNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuybMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyZyCkXdX1Fm4lM63TYV2OdCe/2Ejzr8bixiL1MZW9igUmaY/rETE/l
7vPMwpR/ezjKIbHucMi49HV7sedFZiNZLUiK0Ah3k1pSiCUwW4l7nrDUo43I6VBR
b0FCA9pHDVLA3ZI3VkJLceHrLGkDKMkLKyxs90+K+A8LiWjtSqBkXhKm0QS4oMt+
GNOhaUsmVN0nGRioWrvrXeXUZe2jCHo3KaVgSttu5Z/vY1HYJUYil3oxUfDgn49D
lbbb8cRo0cmns/F9HJzue2hqMQ0VNYZso//qtaoJM5kJeMNhRx3nkeFo8AJklodF
yXUwNfnargW/PJEzhC4f9UpJKyAqSD8=
-----END CERTIFICATE-----
Generated at Fri Oct 23 10:20:11 2026 by rpki-client