Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305230b7-9f82-36ee-8b09-89c964c2cee2.roa
File:                     305230b7-9f82-36ee-8b09-89c964c2cee2.roa (raw, json)
Hash identifier:          XxM1kFoRgD7F0ORGmA6YUrJKk6FUd7nbePhgWrXxvHo=
Subject key identifier:   4A:CD:5D:9F:04:D5:CA:68:3D:B0:40:D4:7A:88:34:5B:DB:C7:0F:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86C0F52809318FD6927C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305230b7-9f82-36ee-8b09-89c964c2cee2.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        50.174.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:c0:f5:28:09:31:8f:d6:92:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=353b1f42-c83a-4262-93e6-55083b26e33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:66:db:e3:c6:67:67:21:5a:89:18:43:60:
                    22:08:c7:89:e7:5b:96:11:2b:26:7d:e9:37:13:d3:
                    a0:f9:e3:7f:a5:19:e8:66:06:bf:b2:f1:14:39:de:
                    0b:f3:98:86:1d:3d:28:62:9c:a8:e0:b9:b0:8f:3d:
                    14:1b:d3:a5:01:40:85:b6:55:d9:66:99:a0:7d:69:
                    bf:0a:d1:99:94:25:78:73:32:45:11:e9:41:68:01:
                    50:47:ed:0d:22:9c:80:61:aa:52:e8:2f:c9:a6:67:
                    46:64:3b:bf:a4:75:03:e0:a5:22:8c:4d:92:37:a8:
                    0c:63:6e:2b:75:9c:d1:22:f2:26:b7:c1:3a:9d:14:
                    6f:df:ec:2b:c6:8f:f8:84:8d:f7:cc:a6:9b:8d:10:
                    39:e9:5e:2e:d5:bd:d0:f6:7a:30:09:74:03:b1:fb:
                    6a:43:25:95:8b:e2:a1:18:ad:fe:46:da:7b:3f:1c:
                    d9:92:41:6c:0b:08:55:75:12:5c:7a:59:ce:81:e8:
                    fe:0e:fe:a8:1b:be:39:60:f3:cc:c4:61:c2:95:f4:
                    98:d6:29:31:f5:a8:79:16:c1:2d:a1:d5:34:ff:e5:
                    8d:8b:69:c8:28:25:e8:35:ef:d6:da:01:e7:d4:f1:
                    43:4a:28:2d:4f:09:83:24:ab:95:8c:ac:29:49:f5:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:5D:9F:04:D5:CA:68:3D:B0:40:D4:7A:88:34:5B:DB:C7:0F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/305230b7-9f82-36ee-8b09-89c964c2cee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.174.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:f8:e4:74:05:91:fd:88:10:d6:c7:29:c6:2f:ff:a3:41:
         b2:a2:c3:06:90:4a:9c:dd:59:d2:8c:89:da:07:e4:ba:db:64:
         8e:06:82:33:06:48:c8:b0:9c:fe:7d:66:86:ad:8b:29:57:65:
         ca:0d:83:7b:02:99:12:01:9b:f4:18:29:0c:ff:c6:8a:3e:8d:
         fc:8e:bc:31:73:2e:d1:2f:5c:c6:5f:bc:48:52:d1:8f:38:d0:
         5b:e6:0a:52:f4:33:5a:a3:64:e5:80:8e:c4:af:9f:08:f6:02:
         fe:da:b6:aa:b8:d5:f6:dd:22:22:bf:c0:10:9a:70:4c:2b:70:
         1c:53:88:ff:8a:df:6d:45:da:52:db:3b:73:ef:f1:92:27:c8:
         23:f4:03:04:a7:b9:89:74:33:39:bb:94:5f:15:f5:e3:86:7c:
         08:59:12:1d:1f:01:36:a4:b9:fd:dc:1e:ad:5d:9b:af:9a:39:
         9b:67:ab:3d:95:97:33:db:f8:c5:6a:9d:16:ec:5b:29:ce:a1:
         2a:b6:3d:34:11:ca:29:13:5b:7f:df:b2:ff:97:72:07:7d:e2:
         35:e4:00:38:9a:f0:2d:48:4c:ca:ae:b0:32:ac:c6:c6:bb:81:
         fd:1f:5a:70:f2:67:25:89:f0:9f:6e:c3:99:36:a8:26:c6:a0:
         87:96:de:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehsD1KAkxj9aSfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MzUzYjFmNDItYzgzYS00MjYyLTkzZTYtNTUwODNiMjZlMzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfBm2+PGZ2chWokYQ2AiCMeJ51uWESsmfek3
E9Og+eN/pRnoZga/svEUOd4L85iGHT0oYpyo4Lmwjz0UG9OlAUCFtlXZZpmgfWm/
CtGZlCV4czJFEelBaAFQR+0NIpyAYapS6C/JpmdGZDu/pHUD4KUijE2SN6gMY24r
dZzRIvImt8E6nRRv3+wrxo/4hI33zKabjRA56V4u1b3Q9nowCXQDsftqQyWVi+Kh
GK3+Rtp7PxzZkkFsCwhVdRJcelnOgej+Dv6oG745YPPMxGHClfSY1ikx9ah5FsEt
odU0/+WNi2nIKCXoNe/W2gHn1PFDSigtTwmDJKuVjKwpSfUpMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErNXZ8E1cpoPbBA1HqINFvbxw+eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzA1MjMwYjctOWY4Mi0z
NmVlLThiMDktODljOTY0YzJjZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMq4dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpU+OR0BZH9iBDWxynGL/+jQbKiwwaQSpzdWdKMidoH5LrbZI4GgjMG
SMiwnP59ZoatiylXZcoNg3sCmRIBm/QYKQz/xoo+jfyOvDFzLtEvXMZfvEhS0Y84
0FvmClL0M1qjZOWAjsSvnwj2Av7atqq41fbdIiK/wBCacEwrcBxTiP+K321F2lLb
O3Pv8ZInyCP0AwSnuYl0Mzm7lF8V9eOGfAhZEh0fATakuf3cHq1dm6+aOZtnqz2V
lzPb+MVqnRbsWynOoSq2PTQRyikTW3/fsv+Xcgd94jXkADia8C1ITMqusDKsxsa7
gf0fWnDyZyWJ8J9uw5k2qCbGoIeW3qA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:08:25 2026 by rpki-client