Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41a1daf-010f-3b7c-be0d-68e9caad0604.roa
File:                     e41a1daf-010f-3b7c-be0d-68e9caad0604.roa (raw, json)
Hash identifier:          uQQnN7pAkmk3lXYJKiiMSiJB9XKN7mE+4omU4ojQmJM=
Subject key identifier:   AF:5A:0B:E2:E5:8B:75:46:5D:D4:92:CE:14:B9:6F:3F:93:EA:6D:96
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E2AD44CE5A8ACD81F6AA56E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41a1daf-010f-3b7c-be0d-68e9caad0604.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     23473
IP address blocks:        50.30.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4c:e5:a8:ac:d8:1f:6a:a5:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=c4a9ff1e-ea55-42d9-9b89-dccd313cbe7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:e3:09:72:30:65:88:e3:9f:c8:7a:4e:96:
                    39:25:54:5a:5a:2e:42:14:5d:72:41:9d:7d:09:29:
                    a0:1c:32:bc:e2:a4:9b:d9:7e:38:13:2a:1b:cf:16:
                    6e:61:c2:8c:6f:cc:2c:4a:17:2d:7c:29:37:00:5f:
                    3a:54:3e:93:7b:49:39:d3:80:46:bb:d9:20:75:88:
                    55:aa:2e:0f:dd:e6:7f:92:df:92:b3:39:8b:72:d7:
                    33:9c:27:c2:61:de:6f:59:aa:3a:ce:ff:42:59:c8:
                    bb:71:27:ca:7b:d6:c8:04:fa:eb:1f:d7:58:15:7f:
                    1f:0e:c7:88:0a:b4:00:2a:77:bd:dd:bd:64:98:59:
                    24:93:50:66:e1:bb:e8:b6:88:59:3a:32:5f:8c:fa:
                    76:9d:6e:f0:a1:87:36:61:33:a5:ef:9d:10:fb:b7:
                    a4:b9:5a:54:33:d7:61:69:80:32:31:e7:8f:f3:d7:
                    7b:30:30:49:1a:79:53:57:a8:29:48:44:ca:07:34:
                    10:6e:82:35:9a:e3:3b:00:fd:58:b1:3e:5f:93:3e:
                    b3:1f:29:a8:1d:45:98:df:97:2e:04:7b:4e:a0:e7:
                    0c:90:db:3b:a7:a4:56:25:69:8d:11:28:5b:a7:67:
                    8e:10:1f:97:46:88:48:dd:6c:48:6c:00:9b:d4:3c:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:0B:E2:E5:8B:75:46:5D:D4:92:CE:14:B9:6F:3F:93:EA:6D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e41a1daf-010f-3b7c-be0d-68e9caad0604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:db:cf:5e:14:f2:cd:3e:63:9e:b1:00:b7:d4:54:a7:74:9c:
         f0:4a:0a:a2:d4:71:5c:67:82:29:dd:f2:b1:f7:13:c7:d7:18:
         1a:f1:9f:5c:67:f1:6d:96:c2:d6:37:4c:37:90:09:73:f2:ee:
         29:22:41:f2:5f:5e:08:64:09:06:4b:5a:e1:2b:d3:da:22:4a:
         96:d1:2b:cc:8c:9d:c1:11:ce:8d:bd:b4:e8:b9:5d:fc:0e:c7:
         47:68:df:77:3d:93:e6:d8:c5:8f:0d:2b:20:9c:eb:86:a3:2b:
         27:d3:5c:2a:ee:e4:c9:1e:fb:84:14:6e:53:cb:63:4b:5d:78:
         23:d6:49:23:9c:57:95:af:fd:05:9b:38:63:ca:b6:da:53:af:
         d3:08:a1:6b:fc:a6:75:52:99:d9:98:48:f6:91:a7:7c:70:5f:
         c7:0e:e9:8e:05:7c:fc:39:b6:21:8c:c0:ff:91:84:3e:0d:1b:
         75:c4:75:5d:aa:0b:dc:ad:2f:7f:9c:c0:c5:8c:a5:fb:b0:b0:
         84:f5:cf:9d:16:0e:f6:06:f6:b5:a8:bf:2e:a7:2e:7e:f6:c1:
         6d:1d:71:77:bd:c0:8b:6e:fa:2d:ed:ac:b9:46:cf:f5:44:49:
         2c:c4:29:86:71:5a:86:40:d6:9d:38:1c:0b:ed:c3:97:53:50:
         04:af:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:31:37 2026 by rpki-client