Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/028ebb2d-cfb2-376f-a231-37044257b5cd.roa
File:                     028ebb2d-cfb2-376f-a231-37044257b5cd.roa (raw, json)
Hash identifier:          nrGzGvpLVI6ws50UXDrwL9ju4HcknPF8kUp/upaJh1I=
Subject key identifier:   97:6B:81:CA:B3:22:2D:8A:E6:25:D5:1B:F1:FE:A4:C4:C4:DB:F3:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F119EF6913F0E2D4CF16A1760
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/028ebb2d-cfb2-376f-a231-37044257b5cd.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     18464
IP address blocks:        50.117.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:f6:91:3f:0e:2d:4c:f1:6a:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=301c367a-eb19-4053-aaa4-0d7e5a2e737b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:14:bd:fd:d6:4e:5a:38:75:40:13:91:0c:
                    24:6f:7d:8d:d2:77:a1:a5:d1:23:99:43:9f:97:ab:
                    b0:58:9e:4a:df:fc:10:fa:3d:93:13:4a:98:db:3a:
                    8a:85:f6:a2:33:8d:81:64:47:5e:61:da:75:62:12:
                    cc:85:4f:9c:0e:da:2f:15:4b:da:25:96:b3:e1:74:
                    27:75:b6:60:77:12:04:bf:36:d1:1b:53:f2:14:d3:
                    95:01:7d:8f:bc:49:e1:ed:85:d1:f4:7e:81:04:5f:
                    53:56:33:6f:5c:08:66:f6:c4:3f:d3:a2:2b:bb:f9:
                    55:5b:d1:75:ce:c2:b5:33:a7:8e:2f:ec:cb:05:ed:
                    ee:d2:85:4f:98:a6:51:b6:11:63:47:3f:56:1a:e1:
                    aa:77:f5:ea:4f:dd:45:87:52:b4:7b:28:5d:df:c7:
                    b6:0e:f3:d0:2b:51:66:5f:0d:f9:f4:70:ce:b3:3c:
                    6d:ba:e0:9a:76:27:30:ce:bb:09:59:0a:c0:51:37:
                    14:6a:38:87:9a:b7:dd:f0:03:ec:94:b3:1f:3e:6d:
                    b7:33:e6:12:fb:e8:af:a8:8c:e2:7a:b5:78:92:6a:
                    88:95:07:39:3f:d3:74:74:47:52:89:d4:ef:a4:af:
                    0e:64:8b:07:ad:3f:4b:cf:2c:d6:49:bd:cb:a5:4c:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6B:81:CA:B3:22:2D:8A:E6:25:D5:1B:F1:FE:A4:C4:C4:DB:F3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/028ebb2d-cfb2-376f-a231-37044257b5cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:17:aa:6a:ef:b6:ea:46:c0:81:e0:c2:40:71:d4:78:fb:
         fe:d2:d6:d3:8a:8b:6a:c9:45:b0:74:b2:a7:3f:df:51:2d:fc:
         cf:b3:73:6a:85:d4:81:1b:69:15:50:72:d1:50:e2:7a:a5:ef:
         48:da:8b:66:70:9a:f7:78:5c:a1:10:8b:02:5b:c9:00:8a:85:
         f0:0d:bf:bd:dc:5e:0e:92:96:ad:60:1f:91:ae:12:24:c7:ed:
         4a:cc:0a:f1:9d:6f:61:63:16:43:3d:7e:2c:a6:61:76:c2:c5:
         d0:de:02:79:09:40:6c:6d:4c:58:c9:10:64:69:c0:85:9b:95:
         e2:97:02:cf:4b:7e:df:61:8d:44:f6:36:3a:08:33:76:2e:97:
         75:78:37:89:e6:77:26:b5:a8:0d:39:39:90:c3:a3:82:4d:4d:
         60:c0:83:36:19:59:28:43:ab:83:64:f8:fd:24:b2:a4:37:f2:
         18:8a:ac:1a:7f:63:c3:67:ee:57:af:1b:79:8e:94:9e:5b:b2:
         ae:94:6e:b8:66:0c:d8:9b:f6:3c:92:0e:dd:82:99:25:98:d8:
         97:30:bc:38:ba:1d:2f:7c:d8:74:6a:29:5d:2e:86:20:1c:1e:
         d9:eb:98:7f:6f:c2:d8:59:01:1b:18:b9:53:1f:54:fd:86:c7:
         08:27:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:19 2026 by rpki-client