Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/7a420a3c-397d-3f91-a8e9-1850f4c679cd.roa
File:                     7a420a3c-397d-3f91-a8e9-1850f4c679cd.roa (raw, json)
Hash identifier:          eGOjVMkG32WSYQ9fXlHjobJij4k4lIBHmBdP31iMO0A=
Subject key identifier:   36:EB:10:71:2F:3F:31:74:89:45:95:56:99:BB:60:47:17:E8:82:2A
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E4172442AD1A69AACC256AE00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/7a420a3c-397d-3f91-a8e9-1850f4c679cd.roa
Signing time:             Mon 22 Jun 2026 11:26:17 +0000
ROA not before:           Mon 22 Jun 2026 11:26:17 +0000
ROA not after:            Sun 20 Sep 2026 11:26:17 +0000
asID:                     402288
IP address blocks:        199.235.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:72:44:2a:d1:a6:9a:ac:c2:56:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun 22 11:26:17 2026 GMT
            Not After : Sep 20 11:26:17 2026 GMT
        Subject: CN=d73e4bc4-906f-4232-b421-ddb34cb1f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:38:e7:10:23:39:4a:4c:f4:d5:7a:fd:ac:
                    d5:de:a5:e3:c5:a8:f4:be:74:f2:6c:9e:3d:dc:f3:
                    1b:81:a6:ab:ea:f2:45:1c:89:fc:fa:7f:c5:74:7e:
                    95:62:97:fb:ce:85:57:0c:e2:db:df:bd:57:6d:ec:
                    75:2f:f5:14:56:60:5c:7c:12:2b:7b:9a:7c:31:eb:
                    38:b0:a8:bd:86:cf:b6:e3:a7:be:9d:46:86:bd:13:
                    ac:47:40:fa:5b:fd:b0:a4:e6:85:e7:e2:d2:89:e3:
                    94:a8:9d:a2:b7:1d:44:40:a2:4c:2e:19:8d:c3:38:
                    e7:2d:70:a1:ca:da:34:b4:fc:a5:2f:8c:17:0a:a1:
                    2e:64:0a:ca:e1:10:db:3d:c5:b7:21:01:56:6a:29:
                    6b:30:49:85:2b:67:ec:42:e5:e4:c2:b6:9a:06:fc:
                    26:2f:88:06:4a:ff:76:e4:fc:b2:ad:a8:5f:30:21:
                    f6:8f:65:3f:04:b5:46:78:cc:b3:f0:8f:1d:af:05:
                    6c:6a:3e:a3:3c:cc:c5:07:38:73:bf:9e:e1:4d:03:
                    23:98:39:af:f4:ac:41:5b:af:f9:8a:7e:79:6a:4a:
                    94:9e:6d:2c:f3:ef:f3:69:9d:90:e1:ca:4c:6d:13:
                    54:c7:91:1b:af:28:55:0b:44:13:c5:fd:61:8e:58:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:10:71:2F:3F:31:74:89:45:95:56:99:BB:60:47:17:E8:82:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/7a420a3c-397d-3f91-a8e9-1850f4c679cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9b:21:c9:2f:16:e1:52:9c:9c:f1:37:7c:61:fb:d7:da:fe:
         73:c4:bb:ab:54:42:97:98:bb:8d:11:f0:55:e8:d7:c6:d1:b5:
         b2:68:ca:89:dd:84:da:ad:b4:7a:b0:06:76:1a:1f:4d:6f:1b:
         42:66:49:d1:74:17:23:91:49:ca:1a:ea:93:4b:c2:79:65:86:
         18:70:b1:35:70:3e:31:5a:c5:b1:0e:d2:58:17:1b:f2:23:8c:
         29:1e:38:df:7e:8d:99:ed:91:e0:e0:92:4c:d7:cf:50:f8:a7:
         86:06:bd:d1:d7:42:02:ec:3a:67:50:84:88:7b:69:c1:b8:de:
         05:77:5b:c5:9f:e4:3c:02:66:da:13:d7:5a:76:a8:db:1b:07:
         c3:7c:ce:e8:16:1f:90:a6:cf:b3:45:2f:ee:8f:f2:24:7d:82:
         a8:8c:5f:24:6d:1b:eb:5c:b9:ef:dd:dc:f5:f3:21:d4:d6:15:
         b5:01:e7:49:2b:8f:05:ce:71:69:12:3c:50:f5:1c:8a:c5:31:
         45:ef:90:bc:9a:9b:8c:97:35:33:a6:95:49:c0:53:c5:c0:92:
         40:f1:e8:76:7f:53:b0:fc:29:25:a5:f0:f9:44:e0:c3:3a:01:
         bb:54:0f:ec:5b:90:3e:c7:a4:95:4c:d2:ca:0e:1b:37:29:7b:
         0d:43:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 16:16:06 2026 by rpki-client