Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e48aafb5-f57e-34a4-8ff2-d362e00af55d.roa
File:                     e48aafb5-f57e-34a4-8ff2-d362e00af55d.roa (raw, json)
Hash identifier:          vQPgjfjyN8KQmt9Kmq4jWBLbfOGT4xArnyKEv9LQGFc=
Subject key identifier:   84:51:D1:1A:90:92:07:F3:1C:5C:CF:CC:5D:04:8C:FC:5A:EE:39:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F02423DE29D2AA6C9FCB94C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e48aafb5-f57e-34a4-8ff2-d362e00af55d.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     36040
IP address blocks:        50.151.215.0/24 maxlen: 24
                          50.151.215.0/26 maxlen: 26
                          50.151.215.64/26 maxlen: 26
                          50.151.215.128/26 maxlen: 26
                          50.151.215.192/26 maxlen: 26
                          2001:559:0:9f::/64 maxlen: 64
                          2001:559:0:be::/64 maxlen: 64
                          2001:559:0:bf::/64 maxlen: 64
                          2001:559:0:11c::/64 maxlen: 64
                          2001:559:0:11d::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3d:e2:9d:2a:a6:c9:fc:b9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=4ce2b92b-cf0d-4a8a-8fb4-5fc417486d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:0d:44:20:ff:9e:4e:cb:35:74:93:c7:70:
                    64:58:64:77:ef:75:c2:43:38:54:55:d7:64:4e:e2:
                    79:be:e8:b7:ff:ac:10:a2:7c:54:a4:e0:31:fe:f9:
                    3a:cf:c3:eb:bb:0d:3c:b7:fe:31:e5:be:8e:9f:67:
                    3b:d8:ce:01:95:64:dd:8b:fd:03:b9:c8:1c:12:f0:
                    97:2a:6b:09:d2:5b:3c:3a:17:46:5d:13:a1:e3:3e:
                    8a:11:7c:e9:45:a8:b9:89:e7:59:ce:c5:70:d5:1c:
                    6b:83:06:68:63:c4:da:0b:74:31:5a:c9:1d:a2:32:
                    39:68:50:57:e3:95:62:53:6e:36:2f:b3:bf:d6:81:
                    0b:02:7b:5d:1d:83:6b:26:04:aa:d0:5b:84:80:d8:
                    7c:50:70:a9:e4:3f:ff:ab:ad:d4:6c:c5:7a:a8:5c:
                    6a:0f:a9:23:80:8d:89:9d:d7:0e:28:d3:c3:d5:0a:
                    71:b3:bc:ab:c9:f6:3b:f8:85:43:1a:9f:12:b0:cf:
                    ee:9b:53:7c:30:07:06:c2:64:80:fc:fb:6c:a7:70:
                    e5:9a:4a:eb:fa:fe:5f:99:b4:b1:8e:29:37:9c:75:
                    10:08:b1:d5:15:0b:f0:b4:04:25:8c:52:2d:cb:2e:
                    38:f6:92:0d:a4:74:0d:86:1b:2a:12:a8:bb:9a:f0:
                    97:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:51:D1:1A:90:92:07:F3:1C:5C:CF:CC:5D:04:8C:FC:5A:EE:39:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e48aafb5-f57e-34a4-8ff2-d362e00af55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.151.215.0/24
                IPv6:
                  2001:559:0:9f::/64
                  2001:559:0:be::/63
                  2001:559:0:11c::/63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:55:b7:06:1e:ec:73:0f:7f:bf:8b:21:30:db:2b:34:b5:0b:
         c5:d4:76:57:2e:83:c7:0c:38:9c:08:11:24:2e:8a:a5:93:70:
         64:03:af:ca:0b:25:2b:fe:84:8f:10:f3:4e:3b:46:31:9f:9c:
         aa:54:82:bc:aa:6b:7f:a4:c9:10:f8:b2:34:72:b5:d6:b6:0b:
         27:5b:a6:93:38:cc:f0:a4:bd:2a:ad:cc:47:86:0c:6f:8d:e0:
         4a:df:4a:4e:6b:39:90:92:25:c3:36:6a:2b:b6:b8:fd:95:cb:
         a7:3d:97:a5:d2:1b:8d:3e:82:39:42:76:48:2e:77:88:50:45:
         04:66:c2:36:a9:d0:80:fa:0d:d4:7a:03:5a:d3:c3:4b:ac:7a:
         95:7e:d0:15:bb:fc:2c:66:24:50:e2:78:49:1a:e4:14:c5:3d:
         4a:35:37:1d:36:c0:d9:fe:cb:67:c5:d4:d2:23:e1:f7:9e:40:
         87:c1:93:07:bb:03:f9:f9:45:f8:9b:83:c9:01:c2:cf:f6:f3:
         a0:79:1b:e1:cf:e2:21:cf:89:6c:11:43:ec:8b:9f:b4:4c:f7:
         9f:37:7d:bc:fc:6d:9d:a6:07:fb:4e:09:8b:2f:e5:e4:42:85:
         f7:50:e8:90:61:c2:36:97:f1:da:e4:d8:95:98:b1:06:18:20:
         ff:62:65:26
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWE8CQj3inSqmyfy5TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
NGNlMmI5MmItY2YwZC00YThhLThmYjQtNWZjNDE3NDg2ZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHYNRCD/nk7LNXSTx3BkWGR373XCQzhUVddk
TuJ5vui3/6wQonxUpOAx/vk6z8Pruw08t/4x5b6On2c72M4BlWTdi/0DucgcEvCX
KmsJ0ls8OhdGXROh4z6KEXzpRai5iedZzsVw1RxrgwZoY8TaC3QxWskdojI5aFBX
45ViU242L7O/1oELAntdHYNrJgSq0FuEgNh8UHCp5D//q63UbMV6qFxqD6kjgI2J
ndcOKNPD1Qpxs7yryfY7+IVDGp8SsM/um1N8MAcGwmSA/Ptsp3Dlmkrr+v5fmbSx
jik3nHUQCLHVFQvwtAQljFItyy449pINpHQNhhsqEqi7mvCXQQIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFIRR0RqQkgfzHFzPzF0EjPxa7jnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQ4YWFmYjUtZjU3ZS0z
NGE0LThmZjItZDM2MmUwMGFmNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzAMBAIAATAGAwQAMpfXMCcE
AgACMCEDCQAgAQVZAAAAnwMJASABBVkAAAC+AwkBIAEFWQAAARwwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
2VW3Bh7scw9/v4shMNsrNLULxdR2Vy6Dxww4nAgRJC6KpZNwZAOvygslK/6EjxDz
TjtGMZ+cqlSCvKprf6TJEPiyNHK11rYLJ1umkzjM8KS9Kq3MR4YMb43gSt9KTms5
kJIlwzZqK7a4/ZXLpz2XpdIbjT6COUJ2SC53iFBFBGbCNqnQgPoN1HoDWtPDS6x6
lX7QFbv8LGYkUOJ4SRrkFMU9SjU3HTbA2f7LZ8XU0iPh955Ah8GTB7sD+flF+JuD
yQHCz/bzoHkb4c/iIc+JbBFD7IuftEz3nzd9vPxtnaYH+04Jiy/l5EKF91DokGHC
Npfx2uTYlZixBhgg/2JlJg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:29 2026 by rpki-client