Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4df8eb2-ab20-318a-b36d-d0462761a70d.roa
File:                     a4df8eb2-ab20-318a-b36d-d0462761a70d.roa (raw, json)
Hash identifier:          7+ZaShHRYL0y1Y6VTIo+kr4zOtcmJmcu3/jDX4wRSrk=
Subject key identifier:   A8:EC:AA:F6:04:A9:1C:79:28:E2:DB:5B:DC:5F:64:C3:55:36:AA:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAFE6F991112C37DB9A207B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4df8eb2-ab20-318a-b36d-d0462761a70d.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        50.96.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f9:91:11:2c:37:db:9a:20:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=12184cf1-f8cd-4100-a290-751c662e3489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:45:da:2b:f8:7d:4f:fe:d7:52:d5:0a:35:
                    c4:94:dc:df:e0:e4:d7:33:4d:c2:52:4b:32:cf:30:
                    1b:b4:1a:5d:cd:fa:3c:04:ca:e5:2d:17:a2:c6:fa:
                    65:af:aa:81:d2:5e:dc:6c:15:c1:63:35:a3:c5:9f:
                    b3:91:50:ee:3c:b2:51:fc:4c:10:1c:b9:2d:46:ca:
                    41:5e:91:ab:74:b8:e3:94:2f:2a:56:1b:89:07:5c:
                    c1:82:f2:a2:5a:dc:15:dc:0b:de:8c:fa:ca:fd:12:
                    31:3a:80:58:6b:51:eb:cb:2b:57:7e:79:d0:d2:8f:
                    8a:92:3b:42:2c:e8:2a:db:95:28:a7:b9:d4:a5:56:
                    29:d7:f0:7a:cc:df:7b:52:9a:3e:8e:f4:e8:1e:54:
                    c7:98:ac:db:df:b5:dd:1c:8c:a0:36:97:7b:b1:45:
                    57:21:12:62:f7:cd:3f:2b:bd:4c:26:50:0d:90:57:
                    7d:58:c1:44:22:a0:f4:5c:6d:d3:05:21:64:bf:53:
                    61:4a:2c:97:71:89:5b:75:d0:a4:e3:56:5a:bf:b6:
                    0b:9c:fd:2a:4e:b1:56:77:84:82:67:b6:f4:00:35:
                    6b:3f:7b:e9:61:97:09:a0:d9:5d:38:58:a8:c9:7d:
                    b3:89:a7:9a:db:11:88:5a:c7:4f:b1:31:85:77:38:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:AA:F6:04:A9:1C:79:28:E2:DB:5B:DC:5F:64:C3:55:36:AA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4df8eb2-ab20-318a-b36d-d0462761a70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:da:28:14:03:70:c6:68:07:44:c0:3d:3d:92:76:d6:a0:04:
         30:98:12:ff:90:00:7d:a6:97:cd:01:e6:ef:7a:77:81:08:ec:
         8c:ec:c5:75:c8:13:80:15:15:df:23:4e:9c:77:6c:7d:59:5d:
         10:bc:77:76:5c:9c:fa:ce:b4:3e:04:cf:e8:13:af:24:c4:64:
         80:0d:24:9d:db:5c:86:b3:95:80:ed:6a:52:c9:ff:b6:69:c6:
         45:85:0e:c3:3d:2c:c0:0d:40:3a:7e:00:4a:59:af:d9:1a:44:
         90:0f:88:5d:79:99:c2:eb:d9:35:1e:f6:fd:75:56:ec:cd:e7:
         85:38:b0:0d:e6:d7:86:45:ad:78:63:69:8f:09:89:65:4e:85:
         82:3e:2b:68:55:55:b6:50:3f:ba:7a:99:e6:e2:69:60:a6:e2:
         68:66:12:98:d4:65:e5:ab:57:53:e4:99:26:1b:fe:89:8d:28:
         cf:54:e3:a5:99:e7:54:20:27:57:58:01:0d:05:1e:11:e1:e2:
         ae:22:41:99:23:ff:11:e4:89:b8:f8:b5:72:48:44:c3:75:dc:
         03:29:c3:3a:2a:e6:4f:b9:cd:dc:32:b5:65:3c:ce:2e:b1:c7:
         09:f6:d5:04:72:78:d8:7f:b6:61:80:31:d6:71:23:36:a3:37:
         82:11:05:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vmRESw325oge4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
MTIxODRjZjEtZjhjZC00MTAwLWEyOTAtNzUxYzY2MmUzNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXtF2iv4fU/+11LVCjXElNzf4OTXM03CUksy
zzAbtBpdzfo8BMrlLReixvplr6qB0l7cbBXBYzWjxZ+zkVDuPLJR/EwQHLktRspB
XpGrdLjjlC8qVhuJB1zBgvKiWtwV3AvejPrK/RIxOoBYa1HryytXfnnQ0o+KkjtC
LOgq25Uop7nUpVYp1/B6zN97Upo+jvToHlTHmKzb37XdHIygNpd7sUVXIRJi980/
K71MJlANkFd9WMFEIqD0XG3TBSFkv1NhSiyXcYlbddCk41Zav7YLnP0qTrFWd4SC
Z7b0ADVrP3vpYZcJoNldOFioyX2ziaea2xGIWsdPsTGFdzjkdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjsqvYEqRx5KOLbW9xfZMNVNqrPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkZjhlYjItYWIyMC0z
MThhLWIzNmQtZDA0NjI3NjFhNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmA+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzaKBQDcMZoB0TAPT2SdtagBDCYEv+QAH2ml80B5u96d4EI7IzsxXXI
E4AVFd8jTpx3bH1ZXRC8d3ZcnPrOtD4Ez+gTryTEZIANJJ3bXIazlYDtalLJ/7Zp
xkWFDsM9LMANQDp+AEpZr9kaRJAPiF15mcLr2TUe9v11VuzN54U4sA3m14ZFrXhj
aY8JiWVOhYI+K2hVVbZQP7p6mebiaWCm4mhmEpjUZeWrV1PkmSYb/omNKM9U46WZ
51QgJ1dYAQ0FHhHh4q4iQZkj/xHkibj4tXJIRMN13AMpwzoq5k+5zdwytWU8zi6x
xwn21QRyeNh/tmGAMdZxIzajN4IRBW4=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:08:49 2026 by rpki-client