Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a8df1f87-8835-38db-b7d3-15351dd26659.roa
File:                     a8df1f87-8835-38db-b7d3-15351dd26659.roa (raw, json)
Hash identifier:          ApmtGFRk4dI5DNhVzTw+3RoZ9JkNsX1Ueyoxi9Te9vo=
Subject key identifier:   4E:86:6A:6C:82:25:80:6E:88:18:00:A5:60:02:15:4B:C0:A1:7A:A4
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E6E42B9D6AF9A249C981CDB80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a8df1f87-8835-38db-b7d3-15351dd26659.roa
Signing time:             Wed 08 Jul 2026 12:41:53 +0000
ROA not before:           Wed 08 Jul 2026 12:41:53 +0000
ROA not after:            Tue 06 Oct 2026 12:41:53 +0000
asID:                     834
IP address blocks:        199.235.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:42:b9:d6:af:9a:24:9c:98:1c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul  8 12:41:53 2026 GMT
            Not After : Oct  6 12:41:53 2026 GMT
        Subject: CN=69cf9ba4-9ce7-467a-b6af-e02f0c948cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:a5:4f:ac:ce:6e:e1:f5:18:c4:e0:de:c9:
                    8c:4a:90:48:e3:34:75:c1:af:5b:69:48:6e:60:34:
                    c8:16:d3:7a:d2:92:43:da:e9:ac:cc:02:f4:f4:3e:
                    ff:24:d1:dd:e9:65:09:6d:04:fb:9a:cd:5f:71:8d:
                    10:c8:ea:45:7c:9a:be:8a:b3:4c:f9:22:90:69:e2:
                    a1:b1:4c:e9:67:0e:df:bd:09:7a:0f:87:e1:44:38:
                    6e:56:b5:71:c1:d5:1c:b7:e5:7e:cc:e7:c1:62:18:
                    e0:e9:22:73:3f:b7:e8:48:fc:af:39:b3:d0:29:af:
                    45:af:a9:7d:68:7e:51:d3:fa:3e:6a:21:6c:fc:f9:
                    54:77:1f:08:07:8d:2c:cd:9a:5b:09:56:50:9a:15:
                    d4:f6:8c:a8:e0:4f:17:35:bf:14:bf:37:ab:c7:6f:
                    16:2a:78:41:bf:3a:42:15:54:93:b0:32:7d:6d:e9:
                    67:bc:da:51:43:97:5d:68:4b:39:86:b5:cf:4b:83:
                    39:6e:f9:8a:5a:fe:c9:59:f9:88:7d:69:33:dc:c9:
                    70:ce:6a:75:05:33:84:4d:61:00:97:e3:34:6c:19:
                    81:ed:14:ea:9e:df:e6:42:55:9e:b8:42:3f:5e:67:
                    f1:17:09:bd:7a:31:94:23:0c:c1:1e:cf:dd:66:e0:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:86:6A:6C:82:25:80:6E:88:18:00:A5:60:02:15:4B:C0:A1:7A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a8df1f87-8835-38db-b7d3-15351dd26659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:17:ea:c2:d6:68:7d:2b:07:18:59:50:e4:1c:53:12:75:
         b2:be:04:0f:fd:c5:6b:41:98:cd:ec:15:71:06:ac:60:a7:47:
         75:41:17:4b:10:73:f9:d5:75:bb:c0:c7:d0:e8:32:cb:95:9c:
         4a:01:e9:24:8e:51:25:f2:fe:22:90:03:95:a9:81:8d:7c:98:
         9d:e3:61:db:c5:1c:6b:ea:43:97:9a:9b:a3:f5:63:f1:e9:a9:
         96:78:70:2f:fa:1a:89:de:84:d8:ff:eb:23:b8:a9:b6:5f:0d:
         67:bc:08:d1:ad:fd:8c:07:00:96:33:2d:eb:a7:ac:d4:aa:5e:
         70:89:ac:f9:08:fe:cd:90:9b:6b:41:f8:88:22:e8:bb:5c:33:
         2b:e4:c9:37:aa:56:79:a1:a9:e0:0c:89:5f:79:db:7c:e3:52:
         97:b6:ef:93:4c:5b:5c:25:3a:08:dd:6c:01:2e:8b:f5:5f:97:
         7e:94:7d:10:58:b4:c6:00:74:12:86:bb:03:f0:e6:1b:c2:dc:
         c6:ed:c5:3f:47:b6:fa:7a:55:22:69:13:c0:fb:db:0d:4e:8a:
         28:96:e3:15:9e:ff:9c:da:dd:d6:57:92:f6:d2:34:a1:6c:9e:
         ce:09:66:e7:8c:5e:87:04:55:6d:54:8e:dd:88:07:02:4b:37:
         78:0b:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:21:30 2026 by rpki-client