Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a2f801a1-020e-3ea3-b7c1-7e38841c70db.roa
File:                     a2f801a1-020e-3ea3-b7c1-7e38841c70db.roa (raw, json)
Hash identifier:          CjFgu3c2QyzlAIxc03FGgpgIk9xvU0mia0cPuFahJzg=
Subject key identifier:   75:B3:39:18:BB:E2:D9:08:F8:73:4E:A2:5F:32:64:79:64:14:80:E0
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E6E1DAE4097318F3AB6FF11C0
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a2f801a1-020e-3ea3-b7c1-7e38841c70db.roa
Signing time:             Wed 08 Jul 2026 11:27:14 +0000
ROA not before:           Wed 08 Jul 2026 11:27:14 +0000
ROA not after:            Tue 06 Oct 2026 11:27:14 +0000
asID:                     834
IP address blocks:        199.235.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:1d:ae:40:97:31:8f:3a:b6:ff:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul  8 11:27:14 2026 GMT
            Not After : Oct  6 11:27:14 2026 GMT
        Subject: CN=f95e4199-1383-4b27-abc6-b8003dfca681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:82:e5:7d:07:65:3d:2c:bf:ce:5f:1b:f4:
                    06:47:8b:a0:16:cf:e7:7e:ce:ba:6d:91:0b:44:97:
                    30:21:43:cc:97:1f:e8:88:fa:2f:d9:c1:90:b1:d5:
                    52:16:60:5b:a0:02:4f:12:52:b6:e3:b0:15:93:e7:
                    17:f8:98:f2:95:ef:a5:4e:4b:1c:2a:68:fd:61:55:
                    1f:74:14:e5:61:ab:b7:2a:3c:f3:21:e7:ab:16:1e:
                    83:46:71:c0:1f:f7:e7:85:d8:b3:42:50:9d:bc:a9:
                    ee:c2:2d:55:89:bd:ed:a8:66:44:f6:fe:74:57:e3:
                    16:0b:ab:91:1e:fd:aa:80:07:81:86:0f:f9:33:36:
                    9b:b7:05:d7:ff:b3:19:61:23:cf:18:4b:40:af:81:
                    56:dd:75:1c:4d:ad:b8:f6:d2:94:df:75:1f:e3:5e:
                    ef:64:17:b7:65:f6:9b:c2:27:10:06:f5:fc:e5:68:
                    ea:8a:ae:de:78:5a:1d:d0:78:f1:34:91:6a:5e:c0:
                    d6:71:96:c3:75:9e:99:74:71:f6:cd:75:66:c2:58:
                    c1:8c:18:59:37:93:fc:e3:35:4f:83:43:c7:22:6b:
                    f9:c1:8c:fc:2e:ff:70:3e:67:e3:20:61:ea:50:06:
                    09:95:12:75:ee:11:93:88:00:1d:53:8f:91:35:cc:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:39:18:BB:E2:D9:08:F8:73:4E:A2:5F:32:64:79:64:14:80:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a2f801a1-020e-3ea3-b7c1-7e38841c70db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:70:bd:a7:f5:e0:b1:75:9f:c7:1f:81:0d:07:38:5a:04:ef:
         e0:3f:fe:cf:0e:c8:00:a9:d9:29:f1:94:ff:22:47:36:10:ed:
         6b:1d:ea:0e:cd:0f:70:15:49:62:df:3c:31:9f:d9:9f:34:41:
         bc:78:67:34:e6:10:da:f0:17:32:52:7e:4c:28:58:9c:de:61:
         e2:a0:41:22:de:e1:5e:d8:9c:47:3e:f3:09:3f:a3:fa:be:a4:
         b8:bd:19:87:94:04:9b:b4:0b:38:d6:cb:61:9e:0a:c0:a1:c9:
         c9:3b:e5:b6:ca:05:49:d2:d1:38:41:43:1d:65:7f:e0:2f:0e:
         1e:a5:39:be:d9:ec:21:88:8b:14:e6:46:6e:c1:48:a4:56:a0:
         69:e3:f3:b4:d5:98:23:e1:55:80:11:e4:f9:c5:67:0a:a9:c7:
         7a:81:2c:34:ed:48:b5:4c:7c:25:cf:15:79:58:95:f2:78:7e:
         db:d8:0f:f1:3a:b3:97:4d:0d:4b:9b:c1:41:2c:0f:24:ed:1a:
         af:b9:59:fa:81:bc:13:d5:d9:a2:45:5d:51:1d:24:ec:f8:89:
         93:08:9e:dd:fb:e5:fb:65:ba:9c:ee:7d:b6:c4:4c:89:30:74:
         18:e4:83:62:74:ca:86:cb:e1:58:f2:13:96:31:76:6b:2d:1e:
         75:66:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:21:09 2026 by rpki-client