Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c14a3404-2311-3522-b616-8ae5929bea15.roa
File:                     c14a3404-2311-3522-b616-8ae5929bea15.roa (raw, json)
Hash identifier:          +rK1ShbjkIE6iSnng8ED277dKfjtGnoq8ucShHT0oM8=
Subject key identifier:   67:16:42:FC:BF:1F:6B:BB:10:93:C3:51:66:A6:B4:EF:4E:01:67:93
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E337A7B4340E56062CA77EE00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c14a3404-2311-3522-b616-8ae5929bea15.roa
Signing time:             Wed 17 Jun 2026 11:21:31 +0000
ROA not before:           Wed 17 Jun 2026 11:21:31 +0000
ROA not after:            Tue 15 Sep 2026 11:21:31 +0000
asID:                     402288
IP address blocks:        199.235.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:7a:7b:43:40:e5:60:62:ca:77:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun 17 11:21:31 2026 GMT
            Not After : Sep 15 11:21:31 2026 GMT
        Subject: CN=5b604708-1914-4ed5-9dab-fd038b6a7f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:c3:65:e8:ba:82:07:82:1d:5b:81:1c:71:
                    9c:78:0a:ec:ff:83:5d:15:1f:15:2c:a2:25:c1:49:
                    a0:e1:82:ab:57:35:81:dd:5c:58:ae:e3:b4:d3:48:
                    50:a7:f7:1d:85:34:25:80:36:28:23:d6:be:4d:73:
                    8e:1a:27:ca:32:8c:f1:49:79:cb:a6:35:b9:96:5e:
                    51:5d:bb:04:54:d6:6e:ae:3f:34:3f:04:16:2e:03:
                    33:34:7c:44:bb:ba:90:c2:80:82:3c:f8:00:b9:29:
                    d1:d2:cd:a7:d6:a8:27:5e:b8:6d:de:93:ab:e1:f3:
                    85:37:6d:85:e2:f7:a4:d7:fe:02:c9:6b:56:f7:12:
                    ee:fc:b6:74:b0:94:c0:ae:4a:a9:f0:27:5a:cb:04:
                    cf:ae:7e:b0:de:1c:16:c9:18:a4:38:1f:bb:cd:1f:
                    e5:fd:71:92:cb:ff:42:f5:60:4c:1d:f3:16:03:c7:
                    cf:74:3a:a9:06:a3:57:36:a4:08:79:63:a4:78:dd:
                    bb:dc:48:26:9e:c2:a8:8a:ef:a8:c3:05:be:15:d2:
                    e1:4f:fa:b9:3f:af:10:b5:21:ea:47:3a:9b:8b:80:
                    94:b7:80:e3:51:a9:59:6e:47:d8:ec:64:23:ff:ae:
                    16:bc:e4:0d:29:90:e8:7c:66:71:3e:68:e4:94:80:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:42:FC:BF:1F:6B:BB:10:93:C3:51:66:A6:B4:EF:4E:01:67:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c14a3404-2311-3522-b616-8ae5929bea15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:07:b5:e2:0a:3e:eb:62:ee:2f:4c:80:f9:25:f0:ad:59:
         85:e1:d9:aa:ed:bf:80:78:6c:19:8e:e5:24:fd:42:0f:b9:21:
         af:49:ea:bd:6d:7a:a3:ba:55:34:89:b8:ec:12:d7:d3:a6:47:
         03:fc:5e:0a:8a:a1:3e:35:38:78:08:55:15:8d:cd:b0:fe:f4:
         93:99:4c:52:7f:98:ac:a8:ef:28:5c:ae:d6:67:09:0c:97:2c:
         6a:99:00:2a:0a:17:10:f5:38:ee:b9:3e:b5:85:4e:21:ff:74:
         de:50:3b:35:29:76:0b:f4:c4:b2:d9:d0:97:03:9f:05:4e:cb:
         42:b9:2c:b6:d4:65:34:2a:ef:58:7e:27:9f:22:fd:86:b5:aa:
         1e:a2:6e:71:3a:49:84:04:b1:d1:d9:79:3e:d6:02:bc:50:be:
         1d:ff:12:2c:30:87:4d:d9:80:29:50:d5:d7:a5:00:76:42:a9:
         66:c1:81:dd:83:f5:e9:20:29:69:6f:73:73:df:93:8d:d3:f1:
         c3:9f:70:97:45:93:b3:7c:e1:de:6f:b4:6a:33:04:9a:81:46:
         89:ca:5f:74:ac:f7:49:41:06:44:c4:b0:be:9d:ac:87:42:3b:
         68:54:93:5d:8d:d5:57:c8:59:ed:e3:3d:62:fb:8c:9f:6c:75:
         25:a5:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 16:19:28 2026 by rpki-client