Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/338a1ab0-0c19-35c1-a5a1-3c1083cf5c59.roa
File:                     338a1ab0-0c19-35c1-a5a1-3c1083cf5c59.roa (raw, json)
Hash identifier:          FjC5Vxt3gs/EDC9tI98ccDWBfqusiByLtZNQj9o8Gs8=
Subject key identifier:   71:34:35:0D:D6:E4:B0:A0:3A:53:C0:48:79:91:1D:48:BA:5A:BF:C9
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E7F1C3BB4AC1A9D45D575C400
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/338a1ab0-0c19-35c1-a5a1-3c1083cf5c59.roa
Signing time:             Tue 14 Jul 2026 13:33:04 +0000
ROA not before:           Tue 14 Jul 2026 13:33:04 +0000
ROA not after:            Mon 12 Oct 2026 13:33:04 +0000
asID:                     834
IP address blocks:        199.235.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:1c:3b:b4:ac:1a:9d:45:d5:75:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul 14 13:33:04 2026 GMT
            Not After : Oct 12 13:33:04 2026 GMT
        Subject: CN=cc291e2a-1420-47b4-98a6-226b9f93314e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:19:e7:c5:15:10:ad:a1:73:41:3c:a6:ec:
                    e9:12:00:5b:89:00:91:16:20:27:13:5e:62:da:87:
                    52:3f:2e:df:f6:65:15:9c:6a:9a:df:b8:77:41:ae:
                    44:66:ff:eb:11:74:6d:91:b1:61:71:3f:08:70:e0:
                    4e:27:26:62:e0:44:98:c8:0f:63:9d:52:59:d1:5a:
                    1e:1f:73:d0:35:4f:5f:18:d1:7e:66:08:2a:5d:7c:
                    44:58:af:c9:e3:4e:28:1a:a1:20:84:d3:bc:f0:49:
                    43:cf:2e:dd:c8:57:17:38:69:ba:e4:91:66:c1:a0:
                    24:39:4d:dc:1d:01:9e:f9:40:57:ef:1a:20:be:be:
                    9c:5d:c5:6b:a7:4b:ae:e9:09:f3:c9:7f:38:f7:79:
                    52:a1:14:e4:24:3a:22:b9:63:19:10:91:e6:33:87:
                    36:90:03:f5:9a:9d:ac:5d:0a:da:b4:a0:0a:47:8c:
                    e5:eb:7d:41:5e:af:f0:f4:9a:89:69:62:67:32:a2:
                    f1:79:46:62:d1:36:64:74:a9:0a:20:25:7e:89:7a:
                    89:22:90:c5:33:6b:7d:7c:ee:59:54:24:01:ed:ae:
                    b2:9b:ef:82:9e:07:3d:37:48:e2:4e:66:db:e0:56:
                    e1:0e:43:ae:41:fb:41:91:98:41:90:a7:c2:2c:38:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:35:0D:D6:E4:B0:A0:3A:53:C0:48:79:91:1D:48:BA:5A:BF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/338a1ab0-0c19-35c1-a5a1-3c1083cf5c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:01:a8:39:42:79:35:f1:3c:2e:dc:01:a0:7f:82:b4:29:41:
         c1:a0:78:08:17:1e:6a:7f:d2:fd:a8:1c:7e:9a:e3:d6:19:d9:
         35:73:fe:4a:26:dd:a5:c2:a2:bc:72:6d:81:36:45:bc:e4:e5:
         9c:b6:26:c9:2f:a2:3a:73:3b:26:b2:88:53:33:d6:ae:43:3d:
         32:82:2a:ac:7c:43:14:68:39:e2:83:5d:4a:73:70:dd:8b:1f:
         0e:21:d4:e8:97:a9:a5:de:8f:33:63:0b:89:6d:00:dc:0f:92:
         cf:4e:28:2f:2e:5f:4d:33:9f:3e:b2:8b:1b:a5:5f:15:60:83:
         03:3c:2e:8d:2f:fb:c3:6e:40:e9:0c:02:5f:a6:69:5a:fe:92:
         9b:84:a1:06:7e:89:69:13:92:20:ad:b3:ef:d4:50:4d:5f:40:
         c1:75:7e:0e:88:28:9f:53:8b:a1:25:52:ad:a0:40:2a:0b:3f:
         e3:be:1f:ca:9d:7c:56:f0:21:41:ff:16:4a:a1:7b:18:22:f3:
         f1:72:5b:ba:3e:9d:92:0b:5e:cf:de:48:4a:9a:a3:92:a6:fd:
         4a:ef:c8:98:a6:a3:41:47:36:b9:c2:66:b6:23:89:8b:50:3e:
         0b:4e:34:79:97:ac:15:c8:40:76:f2:89:49:05:74:c1:29:84:
         d8:07:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:21:08 2026 by rpki-client