Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/73dbd963-7ecf-3018-970c-091f09ee6e93.roa
File:                     73dbd963-7ecf-3018-970c-091f09ee6e93.roa (raw, json)
Hash identifier:          ugV1S5JGkUdXZruPV/mQtGDLxXoQXfGr6dXICvaCsCM=
Subject key identifier:   1F:0E:61:61:E3:81:C2:59:7B:51:C0:B4:D3:AC:BE:97:13:3B:BC:9C
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E6E2447389E03F22263B80F00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/73dbd963-7ecf-3018-970c-091f09ee6e93.roa
Signing time:             Wed 08 Jul 2026 11:40:32 +0000
ROA not before:           Wed 08 Jul 2026 11:40:32 +0000
ROA not after:            Tue 06 Oct 2026 11:40:32 +0000
asID:                     834
IP address blocks:        199.235.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:24:47:38:9e:03:f2:22:63:b8:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul  8 11:40:32 2026 GMT
            Not After : Oct  6 11:40:32 2026 GMT
        Subject: CN=cddb5e73-ba1d-4635-be23-d23dc987bcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:ed:70:64:ea:be:be:5a:71:4c:6b:b4:90:
                    59:e8:89:ca:6f:d2:24:50:53:cb:10:34:f1:4f:fa:
                    6e:13:3b:59:a5:1e:2a:ca:e3:29:39:c9:79:2d:a3:
                    a7:71:df:52:cd:22:f0:82:1a:43:e1:50:4c:90:00:
                    40:a1:38:d7:06:af:ae:03:b8:64:49:44:d5:a3:bd:
                    56:bd:52:0f:02:ff:77:70:40:95:f9:1d:a2:a8:ec:
                    c2:22:45:f5:61:d9:e7:8b:14:4b:dc:76:5b:d8:ad:
                    9f:e0:51:cc:58:a9:9c:11:6e:82:6e:0e:7b:fd:87:
                    17:0b:07:b7:4b:38:d3:e4:ee:43:f1:04:0c:33:c9:
                    7a:e5:d4:d0:58:06:3d:43:a2:0c:f7:97:df:ef:b2:
                    2c:94:48:ba:78:e8:f1:e6:7c:d3:09:ca:46:84:b1:
                    fe:a0:1b:b6:80:4e:c3:d6:4d:2b:bd:2d:07:83:cf:
                    34:55:d7:e2:24:a4:9e:44:31:f9:52:65:6f:3e:29:
                    47:53:43:db:3c:0f:19:58:f8:79:f4:0b:58:b2:ee:
                    a7:6f:9f:e3:9f:0b:c0:33:26:64:89:32:3e:13:10:
                    2a:a4:7f:73:e4:55:e5:15:33:30:61:5b:da:be:69:
                    b9:bd:73:c9:70:ac:a1:0f:ab:09:37:55:ef:6c:70:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:61:61:E3:81:C2:59:7B:51:C0:B4:D3:AC:BE:97:13:3B:BC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/73dbd963-7ecf-3018-970c-091f09ee6e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b6:34:95:da:58:e8:22:7b:11:0c:c3:f9:4b:80:26:63:9f:
         b8:fc:ca:2f:b0:cc:70:48:04:c1:55:90:3c:4b:ed:98:90:be:
         94:cb:57:d4:ce:84:f0:c3:c6:a8:50:1a:92:68:ed:b0:3f:4c:
         d8:3d:53:87:89:9d:d7:a2:c1:93:05:ed:ac:52:96:c4:bf:03:
         a0:1c:4b:27:77:5c:a9:1f:f4:1d:52:8f:ed:e7:c9:3b:e0:1a:
         a2:64:54:ac:82:89:2b:39:84:38:f1:0e:e3:61:45:57:33:2b:
         10:11:29:1b:9a:1d:d2:05:2b:c5:03:2a:0a:d4:61:73:8a:12:
         43:44:a5:6d:e1:c4:5a:95:c1:c2:3b:18:8d:8e:9e:8f:49:94:
         ad:b0:cd:3f:93:6b:fb:93:fb:db:0f:e4:3f:6d:65:c6:ac:bc:
         76:49:ea:83:b8:ee:71:22:2e:b9:4c:1e:09:d5:e4:d4:2c:6a:
         a2:3f:f9:ac:cc:a4:60:34:50:d3:f2:c6:59:73:94:a5:b6:58:
         66:5b:09:12:d9:c9:95:00:85:54:8f:fb:b0:45:fa:12:8a:56:
         cd:4f:25:83:e1:ae:05:e9:01:5f:ea:c2:dc:da:d9:f9:88:d8:
         eb:57:5e:7e:4e:64:fb:f3:a2:f2:c5:cf:86:56:1d:2c:01:59:
         13:2d:3f:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5uJEc4ngPyImO4DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDcwODExNDAzMloXDTI2MTAwNjExNDAzMlowLzEtMCsGA1UEAxMk
Y2RkYjVlNzMtYmExZC00NjM1LWJlMjMtZDIzZGM5ODdiY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ3tcGTqvr5acUxrtJBZ6InKb9IkUFPLEDTx
T/puEztZpR4qyuMpOcl5LaOncd9SzSLwghpD4VBMkABAoTjXBq+uA7hkSUTVo71W
vVIPAv93cECV+R2iqOzCIkX1YdnnixRL3HZb2K2f4FHMWKmcEW6Cbg57/YcXCwe3
SzjT5O5D8QQMM8l65dTQWAY9Q6IM95ff77IslEi6eOjx5nzTCcpGhLH+oBu2gE7D
1k0rvS0Hg880VdfiJKSeRDH5UmVvPilHU0PbPA8ZWPh59AtYsu6nb5/jnwvAMyZk
iTI+ExAqpH9z5FXlFTMwYVvavmm5vXPJcKyhD6sJN1XvbHCM+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8OYWHjgcJZe1HAtNOsvpcTO7ycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvNzNkYmQ5NjMtN2VjZi0z
MDE4LTk3MGMtMDkxZjA5ZWU2ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+slMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAC2NJXaWOgiexEMw/lLgCZjn7j8yi+wzHBIBMFVkDxL7ZiQvpTLV9TO
hPDDxqhQGpJo7bA/TNg9U4eJndeiwZMF7axSlsS/A6AcSyd3XKkf9B1Sj+3nyTvg
GqJkVKyCiSs5hDjxDuNhRVczKxARKRuaHdIFK8UDKgrUYXOKEkNEpW3hxFqVwcI7
GI2Ono9JlK2wzT+Ta/uT+9sP5D9tZcasvHZJ6oO47nEiLrlMHgnV5NQsaqI/+azM
pGA0UNPyxllzlKW2WGZbCRLZyZUAhVSP+7BF+hKKVs1PJYPhrgXpAV/qwtza2fmI
2OtXXn5OZPvzovLFz4ZWHSwBWRMtP8Y=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:21:31 2026 by rpki-client