Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa
File:                     36cc9547-29da-3caf-9d80-fa911a69f909.roa (raw, json)
Hash identifier:          xp2n3B1bftvZUcfzYgycx3uB+vwga7tGKasDXhYvAfs=
Subject key identifier:   F6:9D:29:C0:9B:FC:9C:B3:CA:CF:95:F3:15:76:87:A8:22:AD:7C:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB2B1C42A4A2BE04903E91A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     25893
IP address blocks:        50.117.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c4:2a:4a:2b:e0:49:03:e9:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=5dae8a96-926e-4b4c-94c5-bc5603611dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:fc:30:db:3e:48:8c:84:e5:dd:9b:0c:91:
                    55:f1:98:d5:b9:6e:83:8c:fb:87:50:8f:b1:d6:05:
                    65:ce:91:41:ea:e6:f0:93:eb:10:25:18:0d:a2:75:
                    6c:17:04:54:44:98:55:52:70:5b:3e:d8:34:6b:c4:
                    e0:35:93:a2:7d:85:ed:89:f1:58:b4:04:70:31:25:
                    41:d8:54:19:25:ed:06:c1:31:39:6c:6e:9d:3b:ee:
                    ae:f3:26:61:55:9b:bf:2c:91:cd:ba:78:6d:69:2c:
                    6f:e7:c2:ae:56:1c:b9:de:57:11:16:6c:41:9e:7f:
                    52:45:1b:6e:1b:32:d5:46:2b:34:dd:d1:fc:48:31:
                    66:86:88:f7:84:b9:f4:44:f2:70:05:af:44:36:cf:
                    18:f6:67:8a:6f:f7:4f:60:ae:95:af:68:ba:7c:fa:
                    68:55:bf:cf:5a:32:b9:bd:89:7c:33:86:62:5b:19:
                    89:e3:49:e4:df:71:2c:d2:de:94:5a:a7:d8:d5:7a:
                    82:56:a7:0f:1b:ca:fa:a1:b4:ef:b2:f9:af:3e:dd:
                    f9:36:c9:d7:1e:3c:73:59:f0:f6:4f:5b:3d:b5:dc:
                    57:9d:09:3f:93:91:8f:f1:91:23:5c:17:ac:31:c0:
                    4b:ea:83:b9:08:db:36:fe:65:f0:f4:a0:85:76:45:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:29:C0:9B:FC:9C:B3:CA:CF:95:F3:15:76:87:A8:22:AD:7C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36cc9547-29da-3caf-9d80-fa911a69f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:64:92:24:c4:21:3d:d9:77:5d:5e:0c:0f:72:2c:1b:17:
         1f:0e:72:a1:a3:e9:5f:f8:9c:2c:58:d1:27:ad:e3:25:8d:25:
         6a:61:36:83:f5:58:f6:58:8b:52:35:7d:db:7b:8b:1d:e5:1a:
         eb:94:65:56:90:98:d5:63:8f:ff:59:6a:e2:87:2a:02:d9:3d:
         cd:9f:2b:d1:86:4a:38:6d:a3:5f:75:c4:ab:c3:7e:72:4a:24:
         3e:4c:5b:07:d0:ac:d2:56:02:f8:c6:86:3d:f7:1d:3f:22:a2:
         82:d2:37:c0:9b:8e:b6:01:6f:ba:28:f3:a0:0d:9a:79:0e:90:
         af:0c:77:ea:1a:81:71:91:fa:48:ce:53:f4:7d:05:c4:91:69:
         19:d2:d8:c4:89:08:ff:f0:4c:6a:04:15:b0:c3:6d:38:cb:b9:
         a0:aa:6c:05:3f:73:17:a9:fe:a8:e1:8d:b5:3f:dc:b5:45:52:
         ec:2d:85:39:49:99:b5:c4:51:ed:9a:ad:15:b8:31:b2:1f:91:
         ce:e5:be:90:55:da:0b:ae:54:8b:f2:69:3f:96:fb:7d:78:f1:
         a8:8c:00:6e:38:de:7d:72:ed:85:66:1c:b6:6c:fb:74:94:92:
         37:b6:16:ed:cb:1b:33:9a:84:d9:df:f3:f6:35:eb:ce:4e:66:
         6f:0d:4d:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscQqSivgSQPpGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NWRhZThhOTYtOTI2ZS00YjRjLTk0YzUtYmM1NjAzNjExZGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYf8MNs+SIyE5d2bDJFV8ZjVuW6DjPuHUI+x
1gVlzpFB6ubwk+sQJRgNonVsFwRURJhVUnBbPtg0a8TgNZOifYXtifFYtARwMSVB
2FQZJe0GwTE5bG6dO+6u8yZhVZu/LJHNunhtaSxv58KuVhy53lcRFmxBnn9SRRtu
GzLVRis03dH8SDFmhoj3hLn0RPJwBa9ENs8Y9meKb/dPYK6Vr2i6fPpoVb/PWjK5
vYl8M4ZiWxmJ40nk33Es0t6UWqfY1XqCVqcPG8r6obTvsvmvPt35NsnXHjxzWfD2
T1s9tdxXnQk/k5GP8ZEjXBesMcBL6oO5CNs2/mXw9KCFdkXMxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPadKcCb/Jyzys+V8xV2h6girXy0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzZjYzk1NDctMjlkYS0z
Y2FmLTlkODAtZmE5MTFhNjlmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMnVMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHn7ZJIkxCE92XddXgwPciwbFx8OcqGj6V/4nCxY0Set4yWNJWphNoP1
WPZYi1I1fdt7ix3lGuuUZVaQmNVjj/9ZauKHKgLZPc2fK9GGSjhto191xKvDfnJK
JD5MWwfQrNJWAvjGhj33HT8iooLSN8CbjrYBb7oo86ANmnkOkK8Md+oagXGR+kjO
U/R9BcSRaRnS2MSJCP/wTGoEFbDDbTjLuaCqbAU/cxep/qjhjbU/3LVFUuwthTlJ
mbXEUe2arRW4MbIfkc7lvpBV2guuVIvyaT+W+3148aiMAG443n1y7YVmHLZs+3SU
kje2Fu3LGzOahNnf8/Y1685OZm8NTR4=
-----END CERTIFICATE-----
Generated at Wed Aug 26 12:24:46 2026 by rpki-client