Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ebf349c-1c1e-34d9-982c-3a7438ca01f4.roa
File:                     2ebf349c-1c1e-34d9-982c-3a7438ca01f4.roa (raw, json)
Hash identifier:          xQDvNsUB+8x0h2++kmPZrseMbbe+wyE2wyE4V5kkLjo=
Subject key identifier:   EC:63:36:7A:C1:C5:0F:BD:2C:F7:1D:DF:65:3B:36:C1:81:1A:08:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A89BB72D3C07122E6C000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ebf349c-1c1e-34d9-982c-3a7438ca01f4.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        50.118.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:89:bb:72:d3:c0:71:22:e6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=65f279de-8c8b-43b4-9799-49108b89586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:d2:d1:eb:f9:41:2b:95:77:bb:8f:23:e4:
                    ab:ff:db:2e:e6:c4:67:a3:a9:0f:af:e4:60:7b:2b:
                    1d:ab:2c:af:a3:97:71:53:33:67:ed:1d:f7:89:c2:
                    5b:f5:87:7a:5f:ce:49:9a:73:d3:67:7f:d3:02:b8:
                    8f:07:74:85:ad:d7:7e:c5:b1:37:14:ae:7b:74:e3:
                    5b:eb:26:65:86:3e:9d:17:01:b0:75:96:7c:6f:87:
                    e0:f0:52:5f:f2:8b:af:ba:a9:62:6a:64:58:61:a7:
                    53:41:5a:16:20:6c:2a:bd:64:29:d4:af:be:00:3d:
                    d9:19:66:be:4a:eb:26:69:6f:11:c5:55:05:c6:18:
                    5b:c3:a5:02:73:04:83:c0:9d:d2:62:e5:6d:a8:fd:
                    34:f3:7f:72:25:19:df:52:ab:e4:fb:b2:99:0f:cd:
                    1e:e4:27:69:fd:cd:25:4a:5b:9c:e1:9d:fa:7b:6b:
                    7e:42:9d:ce:9e:6d:0b:d0:1c:79:b1:5e:ee:1a:c3:
                    71:91:65:2a:11:df:68:99:2f:22:cc:b2:83:2e:49:
                    a0:8f:80:fa:9e:ab:43:bf:49:70:75:80:3e:36:7f:
                    d4:fd:cc:40:21:cc:bf:97:f9:c6:3e:b0:6b:41:57:
                    51:b1:d7:bb:6a:89:dc:94:17:4b:41:d5:46:1e:52:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:36:7A:C1:C5:0F:BD:2C:F7:1D:DF:65:3B:36:C1:81:1A:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ebf349c-1c1e-34d9-982c-3a7438ca01f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:19:63:b3:a8:6b:f5:28:8b:07:09:1f:3a:fa:05:47:e4:
         2c:a9:68:45:43:55:c7:3a:8b:8a:76:e8:4c:d3:8d:de:eb:ec:
         e6:13:86:d3:4e:d1:31:7e:02:a9:fa:bf:43:a4:43:a4:ca:2b:
         44:0d:d1:87:33:72:97:49:2b:63:9c:6f:62:a0:4a:08:ec:3a:
         8d:a8:7a:0d:bf:ac:ee:13:4b:c3:a6:c8:05:5f:e0:e6:bc:b9:
         eb:20:6d:e0:c9:85:1e:ab:94:fd:9c:2c:27:c5:c4:ef:5c:60:
         6c:b8:ab:d7:d6:73:4b:4a:9b:6c:a8:3c:56:47:d7:c8:f5:8e:
         79:ed:1c:b3:2e:81:c8:53:9b:e0:8f:19:50:be:f0:e9:33:be:
         14:53:4b:58:28:49:03:f8:3f:c8:c1:57:f2:ab:81:59:82:29:
         ab:4b:1d:c3:74:6b:7f:34:01:d9:29:e5:ea:28:01:f9:b4:64:
         ae:d9:09:0a:7d:1f:e5:ff:d5:8d:3c:22:3b:49:1e:f9:24:00:
         b5:83:bc:54:52:3b:c7:19:e3:38:b2:93:8a:28:bd:ec:2c:b4:
         c0:15:f8:08:78:cb:75:74:bd:bc:1e:fe:b8:67:48:b7:29:34:
         83:80:53:12:5c:36:50:7f:8d:7e:c4:09:fd:de:74:03:08:74:
         84:46:5b:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSom7ctPAcSLmwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NjVmMjc5ZGUtOGM4Yi00M2I0LTk3OTktNDkxMDhiODk1ODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDjS0ev5QSuVd7uPI+Sr/9su5sRno6kPr+Rg
eysdqyyvo5dxUzNn7R33icJb9Yd6X85JmnPTZ3/TAriPB3SFrdd+xbE3FK57dONb
6yZlhj6dFwGwdZZ8b4fg8FJf8ouvuqliamRYYadTQVoWIGwqvWQp1K++AD3ZGWa+
SusmaW8RxVUFxhhbw6UCcwSDwJ3SYuVtqP00839yJRnfUqvk+7KZD80e5Cdp/c0l
Sluc4Z36e2t+Qp3Onm0L0Bx5sV7uGsNxkWUqEd9omS8izLKDLkmgj4D6nqtDv0lw
dYA+Nn/U/cxAIcy/l/nGPrBrQVdRsde7aonclBdLQdVGHlK0kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxjNnrBxQ+9LPcd32U7NsGBGghrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmViZjM0OWMtMWMxZS0z
NGQ5LTk4MmMtM2E3NDM4Y2EwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD6GWOzqGv1KIsHCR86+gVH5CypaEVDVcc6i4p26EzTjd7r7OYThtNO
0TF+Aqn6v0OkQ6TKK0QN0YczcpdJK2Ocb2KgSgjsOo2oeg2/rO4TS8OmyAVf4Oa8
uesgbeDJhR6rlP2cLCfFxO9cYGy4q9fWc0tKm2yoPFZH18j1jnntHLMugchTm+CP
GVC+8OkzvhRTS1goSQP4P8jBV/KrgVmCKatLHcN0a380Adkp5eooAfm0ZK7ZCQp9
H+X/1Y08IjtJHvkkALWDvFRSO8cZ4ziyk4oovewstMAV+Ah4y3V0vbwe/rhnSLcp
NIOAUxJcNlB/jX7ECf3edAMIdIRGWwY=
-----END CERTIFICATE-----
Generated at Thu Mar 12 12:03:51 2026 by rpki-client