Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/b1d68b55-8be6-3153-94e8-941fca358182.roa
File:                     b1d68b55-8be6-3153-94e8-941fca358182.roa (raw, json)
Hash identifier:          +kZ9qdqpcNUPyB0ykCMBpcqfmq0eP+XFwTyOIZdelNU=
Subject key identifier:   6E:94:EE:BD:46:78:0A:A1:2C:5C:4E:43:CE:F2:4E:97:34:AB:91:79
Certificate issuer:       /CN=50f687ca-a5b3-4928-af6a-4e374f70dc51
Certificate serial:       010D0C9F4328584EDE77E02334F42D7EB5F1BBC0
Authority key identifier: E3:6F:2B:EE:62:39:5A:91:AE:F4:52:0E:BF:5A:71:3F:1B:FE:92:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/b1d68b55-8be6-3153-94e8-941fca358182.roa
Signing time:             Mon 17 Aug 2026 17:19:30 +0000
ROA not before:           Mon 17 Aug 2026 17:19:30 +0000
ROA not after:            Sun 15 Nov 2026 18:19:30 +0000
asID:                     1299
IP address blocks:        67.215.192.0/20 maxlen: 24
                          104.242.0.0/17 maxlen: 24
                          104.242.128.0/19 maxlen: 24
                          104.242.160.0/19 maxlen: 24
                          104.242.192.0/19 maxlen: 24
                          216.235.0.0/20 maxlen: 24
                          2001:4900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/50f687ca-a5b3-4928-af6a-4e374f70dc51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/50f687ca-a5b3-4928-af6a-4e374f70dc51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:de:77:e0:23:34:f4:2d:7e:b5:f1:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f687ca-a5b3-4928-af6a-4e374f70dc51
        Validity
            Not Before: Aug 17 17:19:30 2026 GMT
            Not After : Nov 15 18:19:30 2026 GMT
        Subject: CN=0371e559-7b7c-4a41-aa0c-cd39b15b917d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:3a:a7:d9:a7:3d:4d:b2:8a:d7:39:64:67:
                    4f:2c:b6:bf:6b:57:7b:63:9a:b5:51:c5:60:8c:9e:
                    8b:5f:0f:1f:b9:bb:75:ca:92:c8:1a:70:8a:e5:ed:
                    b0:c7:23:00:75:31:db:38:09:7c:48:c6:39:07:8e:
                    8a:da:8c:bb:e5:b0:52:16:97:cc:b3:74:82:f7:13:
                    1e:f3:97:b3:b8:c9:b9:8e:74:51:d2:ea:a0:c4:5e:
                    ec:ef:33:db:73:4f:39:fb:75:67:e3:7d:84:cf:ae:
                    b6:81:2e:f9:96:05:1e:15:4c:e8:e2:02:4e:6a:86:
                    a5:37:f4:8c:a0:b8:2f:24:93:39:11:ab:30:b5:d5:
                    ef:50:d8:38:9b:82:6e:52:4b:75:9d:e3:a2:2b:d1:
                    0f:3b:01:26:e0:83:ec:b1:0d:04:28:9f:55:dc:ff:
                    8a:76:ea:5b:76:90:06:f9:c0:7c:83:29:37:1b:1a:
                    f9:10:4d:db:fc:68:a5:66:3c:d6:ad:d2:72:04:76:
                    30:7d:cf:87:68:af:ff:66:a5:19:2d:79:11:d0:f7:
                    29:6c:35:a5:13:f3:2e:95:cf:26:ec:4c:44:8c:f1:
                    c4:48:f0:a1:21:e3:4b:21:09:f7:16:7b:63:23:50:
                    c0:4f:18:95:18:06:cd:9f:50:ac:91:7e:94:37:24:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:EE:BD:46:78:0A:A1:2C:5C:4E:43:CE:F2:4E:97:34:AB:91:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/b1d68b55-8be6-3153-94e8-941fca358182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51/50f687ca-a5b3-4928-af6a-4e374f70dc51.crl

            X509v3 Authority Key Identifier:
                keyid:E3:6F:2B:EE:62:39:5A:91:AE:F4:52:0E:BF:5A:71:3F:1B:FE:92:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/50f687ca-a5b3-4928-af6a-4e374f70dc51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.192.0/20
                  104.242.0.0-104.242.223.255
                  216.235.0.0/20
                IPv6:
                  2001:4900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:17:14:f2:47:66:30:4e:fa:2c:d5:0c:19:81:10:16:1f:
         25:4b:16:53:94:25:0e:cd:34:f4:94:b8:c3:1a:c4:02:c8:66:
         5f:d1:db:fa:63:8a:3f:b8:9b:90:25:cd:b3:4a:e8:ba:b0:31:
         35:41:6c:4d:8b:49:85:ab:53:18:ee:c9:7f:b3:5c:36:e3:12:
         57:8d:6c:a4:eb:3e:e9:91:1c:e6:2b:41:25:cb:75:0e:51:90:
         18:2e:a8:41:49:be:24:44:54:05:30:97:59:58:f7:68:74:7b:
         f1:b9:d5:a5:5d:34:f0:dc:6f:e7:2f:42:6c:6a:8b:91:7d:91:
         10:8a:75:fc:bc:09:d8:80:dd:2f:7a:3a:f4:52:47:58:1e:9d:
         c1:76:6e:1a:1f:70:23:45:87:b4:6d:41:22:a1:af:33:18:48:
         39:a9:e4:0b:e7:99:eb:31:3a:66:6b:06:5f:00:33:91:30:a3:
         62:fc:a7:0d:72:21:38:0b:ef:77:d6:e0:4d:05:d8:33:37:4f:
         0c:9c:bf:dc:67:c1:08:63:ef:b2:66:a9:f8:08:d9:40:1b:3f:
         cb:2d:8c:eb:aa:cf:05:6f:65:87:8d:f6:33:28:db:73:ac:2e:
         97:12:e6:96:9d:0c:0d:f9:1b:3c:a1:fe:b1:fe:52:7b:31:3a:
         c2:8e:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:45:16 2026 by rpki-client