Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/2bede7fb-5a18-3d7b-a2cc-3bb93b79d35f.roa
File:                     2bede7fb-5a18-3d7b-a2cc-3bb93b79d35f.roa (raw, json)
Hash identifier:          ginmSs/Jk74vogsY5bC+VnYmlBUvTuxlrT/rf9yDu3A=
Subject key identifier:   82:E8:93:75:D7:68:22:39:21:23:5E:56:EF:70:12:39:76:1D:54:15
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584ECFF3695464305DA64CA32E80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/2bede7fb-5a18-3d7b-a2cc-3bb93b79d35f.roa
Signing time:             Wed 12 Aug 2026 12:31:17 +0000
ROA not before:           Wed 12 Aug 2026 12:31:17 +0000
ROA not after:            Tue 10 Nov 2026 13:31:17 +0000
asID:                     137409
IP address blocks:        199.235.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cf:f3:69:54:64:30:5d:a6:4c:a3:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 12 12:31:17 2026 GMT
            Not After : Nov 10 13:31:17 2026 GMT
        Subject: CN=d1ac0d00-33c2-42e3-8c39-dbba2e5c1b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:92:19:8d:87:90:f9:dd:1a:28:e3:52:67:
                    65:7d:08:94:2c:67:5c:f0:f5:9a:b8:d9:1f:3b:89:
                    e5:cb:76:e2:c1:65:84:23:36:48:6c:f0:bc:d8:16:
                    c5:d8:64:6c:13:02:72:24:70:7f:8f:68:7a:01:13:
                    05:75:40:35:60:0c:15:bc:75:ae:22:20:c7:29:3d:
                    b6:9e:67:39:58:16:c6:e5:bb:d4:84:05:e8:5c:2c:
                    35:54:34:23:15:e8:ad:ca:90:46:bc:06:d0:eb:a0:
                    b2:17:11:1e:ef:bc:4f:7c:46:3a:ba:df:7e:a6:a8:
                    94:ab:f7:ae:fc:3c:f0:4d:26:c5:59:f1:7f:24:82:
                    a9:00:ac:53:88:94:6c:59:e7:40:02:f7:fa:f1:a6:
                    8e:24:08:c4:3c:4f:61:e3:95:5b:1d:c3:43:2a:c0:
                    7d:19:0f:9a:93:ff:be:79:05:98:e4:17:98:de:39:
                    d4:b9:90:0d:1b:cb:5f:e4:c4:18:d6:01:35:6b:c5:
                    af:2d:dd:dd:bd:e6:1d:18:75:c1:6e:55:55:73:38:
                    33:bb:e8:cf:2e:79:bf:d9:5b:80:4d:33:0b:b8:94:
                    d2:10:54:2e:04:ae:7e:da:a9:c6:f3:48:28:17:f8:
                    5f:ad:8c:90:71:e2:b9:bb:93:14:04:bf:66:a5:7c:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:93:75:D7:68:22:39:21:23:5E:56:EF:70:12:39:76:1D:54:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/2bede7fb-5a18-3d7b-a2cc-3bb93b79d35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:00:0f:2a:0f:f5:ea:d7:ff:89:4f:93:e5:16:8f:d1:dc:ab:
         85:31:17:93:05:64:5a:9e:db:6f:b1:29:e1:d2:0f:3c:13:e4:
         4e:14:56:b6:83:e0:f7:ef:4c:61:1a:67:04:d6:5d:16:0c:b5:
         e4:c1:e1:38:93:b3:81:03:7a:c0:74:7d:34:b7:45:04:57:df:
         83:e1:f2:e9:af:99:8c:e1:1c:75:61:d3:5a:9b:96:e5:28:14:
         14:1c:91:0f:30:83:20:32:2c:9b:a8:57:10:07:89:3d:5d:c3:
         db:0e:18:2b:ef:a9:7a:7e:cf:7f:f4:d3:3e:d4:ed:7b:e6:33:
         8c:b1:53:e3:93:6c:4a:32:4e:9b:34:9e:fe:47:15:34:73:29:
         e2:b7:d8:17:d8:f0:93:0a:89:ff:30:eb:8a:af:cd:26:5c:46:
         0c:3c:20:61:58:19:e7:8b:d4:73:fa:87:bb:e6:96:43:c6:5e:
         cd:c7:87:77:33:3f:77:b4:6b:49:4a:27:c8:d4:6a:5d:c7:92:
         93:01:11:b3:5b:90:33:e2:f6:5f:56:bf:0d:98:5d:ea:b6:f6:
         a1:e2:92:a1:8f:3b:cf:13:ca:96:5d:41:3f:9b:9e:ed:5b:29:
         10:32:63:43:b0:a5:08:f4:be:6a:5f:80:a4:91:b1:1a:e7:92:
         09:f2:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:29:39 2026 by rpki-client