Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/96d56faf-2be6-3134-884a-e6da69194135.roa
File:                     96d56faf-2be6-3134-884a-e6da69194135.roa (raw, json)
Hash identifier:          Mv2Odp2Vl7L18h+HsQ/hy4NeXcldqaS5lSRjBiBl5lI=
Subject key identifier:   DC:64:0E:72:1E:B2:F5:0B:0D:1C:8A:03:C7:91:DE:15:E3:E7:4D:57
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584EF21BC6645060CD9E9E219300
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/96d56faf-2be6-3134-884a-e6da69194135.roa
Signing time:             Mon 24 Aug 2026 18:10:06 +0000
ROA not before:           Mon 24 Aug 2026 18:10:06 +0000
ROA not after:            Sun 22 Nov 2026 19:10:06 +0000
asID:                     20473
IP address blocks:        199.235.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:1b:c6:64:50:60:cd:9e:9e:21:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 24 18:10:06 2026 GMT
            Not After : Nov 22 19:10:06 2026 GMT
        Subject: CN=95202123-6cf9-4542-b69d-0c899720e8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:bf:98:7a:78:c3:ea:25:1c:36:a9:33:18:
                    35:fa:7a:d5:93:3b:c6:f9:ed:9b:f2:91:d5:33:09:
                    1f:d1:c7:d0:9b:6e:3f:a7:67:d9:76:c4:84:6b:c6:
                    88:83:bb:73:f7:56:68:b9:a7:3b:a8:9d:4b:f8:cb:
                    45:7a:ea:f7:fb:5c:80:50:50:1d:a4:0d:ed:4b:e6:
                    79:62:be:37:df:27:07:02:b7:be:b6:9d:5f:b7:c2:
                    d0:03:21:b8:db:09:a4:46:2e:45:e6:e4:5a:e4:ee:
                    52:5e:f3:22:11:7b:94:04:a8:68:03:0e:c9:c9:50:
                    99:c2:1d:1e:22:35:cb:e0:da:0e:5d:52:c8:79:ce:
                    34:da:39:94:1a:7e:8e:22:4a:d9:f5:d7:70:b0:53:
                    ba:cf:c6:33:19:40:99:a5:94:4e:41:2b:b3:02:1b:
                    54:41:8d:68:c5:a0:8e:63:21:e4:f3:11:6f:09:d1:
                    f0:db:ac:8d:ae:6e:fa:96:9d:e5:d8:f4:48:ea:a9:
                    d5:13:06:b1:4b:49:15:d1:b5:9a:96:2b:d1:34:c4:
                    5f:ac:f0:7a:7f:03:4f:66:78:fb:e3:62:75:19:97:
                    21:1e:fb:38:89:2a:38:5f:8d:89:88:81:b4:da:f0:
                    21:d4:aa:bc:08:86:97:17:9f:12:6e:25:18:32:ab:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:0E:72:1E:B2:F5:0B:0D:1C:8A:03:C7:91:DE:15:E3:E7:4D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/96d56faf-2be6-3134-884a-e6da69194135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fe:50:89:3d:22:f5:59:3b:00:9e:04:33:39:fa:0f:b0:c2:
         fa:ce:80:38:75:a9:b3:63:bd:af:fe:4a:8e:4e:fb:55:39:68:
         85:c0:fc:b2:be:69:db:98:ad:86:a2:e5:86:ea:14:e6:1c:48:
         13:97:ff:04:9c:9c:1e:16:5e:b5:de:51:08:39:62:f7:9f:35:
         2d:d6:68:25:a7:80:23:67:79:48:0f:45:aa:2a:a5:3a:83:5a:
         aa:a1:d3:53:72:f9:a8:3d:7a:dd:b6:e2:a5:68:51:70:02:84:
         67:1b:9a:b1:a0:8b:c9:ee:22:65:6f:69:93:2e:a2:29:3a:ed:
         1e:3c:4e:0c:b2:15:bc:b2:95:51:77:52:65:5f:03:c5:5e:83:
         ab:1a:12:90:09:7d:52:f7:1e:1a:8b:d2:a9:93:33:d4:a6:35:
         b6:e0:f7:7b:57:9e:7c:3e:45:d1:ee:6d:61:f2:c3:f1:80:d0:
         df:31:67:2f:f8:e1:58:59:c4:38:52:d8:a7:52:ea:9e:08:b4:
         46:fd:b8:56:35:f6:50:58:1a:96:3e:03:e1:ba:dc:c2:a5:98:
         df:c6:db:f0:f8:cb:2c:95:70:1e:a1:f2:cc:74:01:06:6a:96:
         61:24:14:cd:65:21:47:14:43:8c:71:95:a8:a7:86:d1:5e:5c:
         8e:dc:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:29:52 2026 by rpki-client