Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
File:                     42bc3cb2-813a-3ca2-a271-89902ea203cb.roa (raw, json)
Hash identifier:          mGI6plOmzZlC0pdQ8sSk0ATV3qRbE3SaNsvcL9qP+w4=
Subject key identifier:   A4:71:58:A1:A1:1A:94:53:29:FB:A9:49:04:05:9C:AB:60:57:E9:87
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E4AEF4C3CFCD1363568E17440
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     61317
IP address blocks:        2604:4500:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4c:3c:fc:d1:36:35:68:e1:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d7563c98-7b2d-42da-885a-85c50e1b6a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:0e:01:e0:92:3a:0d:00:86:75:88:dc:2c:
                    0c:8c:7b:ff:57:71:77:cc:7d:85:b3:7b:ea:2c:06:
                    ab:ab:64:2c:4a:49:ca:d5:76:b5:b6:6d:c8:6e:8d:
                    78:98:ee:08:26:9e:5c:da:4e:53:0c:eb:04:41:0a:
                    6c:05:2f:fe:63:fb:4a:bd:ed:26:93:23:37:c2:1f:
                    09:cc:43:a6:ad:9e:97:29:9b:d4:61:a8:f8:3c:00:
                    03:9f:fd:10:94:3f:18:1c:3f:e8:8e:79:ae:2c:13:
                    c7:c7:84:d7:10:4c:1b:f4:72:7c:c5:a4:d3:86:56:
                    34:81:1e:12:64:b9:8b:33:2d:8f:cc:12:02:37:8a:
                    4c:82:08:05:e6:13:13:35:12:00:15:dc:d0:40:ae:
                    d3:de:7a:09:a8:5c:72:14:3a:77:06:86:74:ab:89:
                    49:e3:cf:67:c1:3e:72:9c:a9:ac:b8:24:85:62:2a:
                    ec:c1:5c:d5:6a:c0:98:f8:f3:2a:5b:25:47:bf:a5:
                    ca:2c:86:d4:34:1c:5a:03:47:8f:1f:c1:4b:d7:5c:
                    42:fd:30:54:02:1d:34:2e:ad:3f:0a:98:da:13:31:
                    14:bd:57:04:bc:b9:92:8f:c4:5a:e0:1c:a0:21:f2:
                    6d:e3:97:02:41:76:1f:14:d1:18:c6:fb:1f:7c:af:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:58:A1:A1:1A:94:53:29:FB:A9:49:04:05:9C:AB:60:57:E9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42bc3cb2-813a-3ca2-a271-89902ea203cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:2c:9e:3f:d7:d2:cb:85:27:01:c9:2a:c1:30:52:ea:20:
         51:23:b8:d2:38:b8:79:47:36:05:5b:27:c6:23:3d:e7:36:9c:
         75:0d:11:b5:c7:62:1f:31:4a:bc:06:3c:f5:de:f8:79:d3:44:
         72:4f:6b:18:90:4b:8a:20:dd:d3:e2:0a:d1:31:43:d2:08:3e:
         7b:db:02:fa:e9:83:47:0a:03:dd:85:1b:ed:7f:bb:ab:55:b4:
         aa:96:05:ec:e5:52:5b:18:30:24:23:f3:99:7a:d3:3e:96:65:
         e1:14:ab:df:13:df:93:dc:d0:b2:c4:36:5b:fb:7f:8a:83:1e:
         1f:11:26:83:8b:68:ca:a4:d7:27:d0:6a:48:51:fb:98:05:3a:
         97:1d:17:56:42:cb:36:1e:dd:cd:77:fa:92:55:69:13:d8:65:
         e8:22:4f:73:ba:e2:43:8c:8e:55:62:e0:d6:7c:20:21:45:54:
         48:99:48:82:35:9e:86:b4:4a:24:aa:70:92:c7:08:82:ab:50:
         f4:ad:b6:f3:c6:f1:99:52:5b:da:ed:ca:04:4c:d8:8d:6c:0d:
         54:d0:fd:2d:4f:d2:1f:2c:7e:eb:50:bd:d9:d6:65:71:25:5d:
         b8:cc:f0:7a:52:46:38:2d:d1:18:be:7b:27:6c:2e:f6:39:3c:
         a3:32:17:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K70w8/NE2NWjhdEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZDc1NjNjOTgtN2IyZC00MmRhLTg4NWEtODVjNTBlMWI2YThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O8OAeCSOg0AhnWI3CwMjHv/V3F3zH2Fs3vq
LAarq2QsSknK1Xa1tm3Ibo14mO4IJp5c2k5TDOsEQQpsBS/+Y/tKve0mkyM3wh8J
zEOmrZ6XKZvUYaj4PAADn/0QlD8YHD/ojnmuLBPHx4TXEEwb9HJ8xaTThlY0gR4S
ZLmLMy2PzBICN4pMgggF5hMTNRIAFdzQQK7T3noJqFxyFDp3BoZ0q4lJ489nwT5y
nKmsuCSFYirswVzVasCY+PMqWyVHv6XKLIbUNBxaA0ePH8FL11xC/TBUAh00Lq0/
CpjaEzEUvVcEvLmSj8Ra4BygIfJt45cCQXYfFNEYxvsffK/sawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKRxWKGhGpRTKfupSQQFnKtgV+mHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDJiYzNjYjItODEzYS0z
Y2EyLWEyNzEtODk5MDJlYTIwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACJuLJ4/19LLhScBySrBMFLqIFEjuNI4uHlHNgVbJ8YjPec2nHUN
EbXHYh8xSrwGPPXe+HnTRHJPaxiQS4og3dPiCtExQ9IIPnvbAvrpg0cKA92FG+1/
u6tVtKqWBezlUlsYMCQj85l60z6WZeEUq98T35Pc0LLENlv7f4qDHh8RJoOLaMqk
1yfQakhR+5gFOpcdF1ZCyzYe3c13+pJVaRPYZegiT3O64kOMjlVi4NZ8ICFFVEiZ
SII1noa0SiSqcJLHCIKrUPSttvPG8ZlSW9rtygRM2I1sDVTQ/S1P0h8sfutQvdnW
ZXElXbjM8HpSRjgt0Ri+eydsLvY5PKMyFyw=
-----END CERTIFICATE-----
Generated at Wed Jul 8 12:28:18 2026 by rpki-client