Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa
File:                     b7224c0c-df06-3f39-8925-071b3136bbe4.roa (raw, json)
Hash identifier:          v1PDuwhuVdh1xboODqPtvyYExqZQdXafEoiR8QwLRas=
Subject key identifier:   4A:E9:71:0D:FF:A6:07:51:4C:3D:D2:80:3F:AD:72:DA:BE:A3:46:94
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584F7BB2E9E68AD17962C819DA40
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     201385
IP address blocks:        50.54.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e9:e6:8a:d1:79:62:c8:19:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=d23bac53-06af-4083-b800-227f688dd819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:2a:eb:c3:e3:59:4c:40:7d:4a:c6:80:ea:
                    40:bd:c6:a6:0a:e9:87:57:5d:15:49:1c:4f:5e:db:
                    e7:bc:0c:96:cc:9a:b0:7f:ab:6b:23:ec:8c:78:be:
                    1b:26:bb:b5:c0:5d:99:c5:9a:76:ae:09:bf:ea:25:
                    cb:c9:a3:5e:5f:c0:fc:48:82:61:ed:ec:c6:75:3b:
                    42:a6:ff:48:04:bd:79:a8:d4:48:13:90:de:10:81:
                    b3:3f:ec:bb:0b:5a:1a:47:7a:41:2a:79:34:86:03:
                    c7:c6:d0:d0:5e:f2:61:cf:11:52:e8:9d:bf:7b:09:
                    a0:7d:5d:b6:96:93:38:99:72:44:6a:bc:61:fd:e3:
                    b9:a4:05:23:b3:0a:09:79:5a:bb:1f:ce:f1:01:47:
                    15:52:3b:fb:9a:bf:d2:d7:20:2e:5b:6b:3e:99:57:
                    81:01:da:d9:c8:33:3f:d2:1f:1e:b3:9e:d8:4a:e8:
                    a8:7f:ae:5f:e5:6b:54:23:38:7d:52:44:be:cb:54:
                    07:b2:c7:50:b1:67:e1:ca:2c:72:53:b0:93:01:df:
                    bd:3b:13:8d:d7:36:d8:c7:7d:bd:57:69:53:ae:07:
                    c8:40:66:e4:cf:bf:3e:62:74:ab:ca:23:cb:7a:4b:
                    21:f8:a0:62:1f:81:83:05:e1:e3:0f:cf:84:ee:0d:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E9:71:0D:FF:A6:07:51:4C:3D:D2:80:3F:AD:72:DA:BE:A3:46:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.54.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:a6:84:2a:ed:63:72:7e:ae:8c:20:a4:48:24:68:ca:dd:
         8e:d8:c4:cf:fc:e1:62:5f:f6:19:f9:ed:d0:22:bd:3f:92:9b:
         05:51:ca:63:bf:64:80:d9:09:51:4c:5c:84:db:79:61:6d:6c:
         e7:a6:66:07:24:8a:37:97:18:bd:2f:38:f9:d4:ab:df:f7:c2:
         06:24:4c:aa:b3:39:f7:80:94:a3:8b:2e:8a:03:3d:21:40:a6:
         fb:2f:4a:f0:25:00:86:6d:87:6b:a6:a3:bd:48:73:99:e8:d3:
         77:51:f8:a8:2f:a2:f7:10:bf:87:ca:44:c5:00:12:98:f0:14:
         f4:73:3f:18:4a:e3:05:cd:80:e3:65:3f:87:70:30:60:85:5c:
         2e:1b:37:e4:3c:16:e5:c9:36:ff:f7:95:cc:e3:70:5b:69:94:
         ab:92:36:20:a7:31:e9:ea:6a:a0:65:be:df:6e:01:d8:f2:e3:
         0f:a9:d7:fd:96:40:fa:e8:20:33:03:b6:15:b9:f3:51:c1:13:
         be:66:da:b4:d9:75:b7:01:a6:e1:1a:03:10:38:fa:96:be:ad:
         8f:0f:eb:11:a0:39:6e:69:d8:79:c0:3c:79:7f:c8:55:8a:e1:
         c6:91:4b:d3:ad:46:a7:30:40:46:99:fe:c8:2d:bf:ba:e4:21:
         1d:04:9a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sunmitF5YsgZ2kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk
ZDIzYmFjNTMtMDZhZi00MDgzLWI4MDAtMjI3ZjY4OGRkODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwgq68PjWUxAfUrGgOpAvcamCumHV10VSRxP
XtvnvAyWzJqwf6trI+yMeL4bJru1wF2ZxZp2rgm/6iXLyaNeX8D8SIJh7ezGdTtC
pv9IBL15qNRIE5DeEIGzP+y7C1oaR3pBKnk0hgPHxtDQXvJhzxFS6J2/ewmgfV22
lpM4mXJEarxh/eO5pAUjswoJeVq7H87xAUcVUjv7mr/S1yAuW2s+mVeBAdrZyDM/
0h8es57YSuiof65f5WtUIzh9UkS+y1QHssdQsWfhyixyU7CTAd+9OxON1zbYx329
V2lTrgfIQGbkz78+YnSryiPLeksh+KBiH4GDBeHjD8+E7g08GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErpcQ3/pgdRTD3SgD+tctq+o0aUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvYjcyMjRjMGMtZGYwNi0z
ZjM5LTg5MjUtMDcxYjMxMzZiYmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMjbyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtlpoQq7WNyfq6MIKRIJGjK3Y7YxM/84WJf9hn57dAivT+SmwVRymO/
ZIDZCVFMXITbeWFtbOemZgckijeXGL0vOPnUq9/3wgYkTKqzOfeAlKOLLooDPSFA
pvsvSvAlAIZth2umo71Ic5no03dR+KgvovcQv4fKRMUAEpjwFPRzPxhK4wXNgONl
P4dwMGCFXC4bN+Q8FuXJNv/3lczjcFtplKuSNiCnMenqaqBlvt9uAdjy4w+p1/2W
QProIDMDthW581HBE75m2rTZdbcBpuEaAxA4+pa+rY8P6xGgOW5p2HnAPHl/yFWK
4caRS9OtRqcwQEaZ/sgtv7rkIR0Emmg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:17 2026 by rpki-client