Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa
File:                     cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa (raw, json)
Hash identifier:          Gf0M6MoIo4HXBMHwtCzMUYPe/EHUW0pY1kBZjyxindE=
Subject key identifier:   5F:18:83:8E:CF:E0:1F:32:15:34:57:A2:84:04:E9:EE:11:E8:18:D6
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E7F20B4987EF6903423587800
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa
Signing time:             Tue 14 Jul 2026 13:42:04 +0000
ROA not before:           Tue 14 Jul 2026 13:42:04 +0000
ROA not after:            Mon 12 Oct 2026 13:42:04 +0000
asID:                     834
IP address blocks:        199.235.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:20:b4:98:7e:f6:90:34:23:58:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul 14 13:42:04 2026 GMT
            Not After : Oct 12 13:42:04 2026 GMT
        Subject: CN=cf892edf-856d-4b71-9490-a57765301741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:87:35:fe:e3:5b:03:d2:f2:52:bf:77:00:
                    3a:5e:15:49:5c:96:4f:c6:17:76:7f:bc:a2:1e:77:
                    44:ab:72:39:5a:ee:f7:8a:ac:33:33:2f:a5:a9:02:
                    b1:99:42:19:52:f4:b1:da:63:4d:99:2b:32:48:0a:
                    4e:34:06:51:19:56:5a:0f:65:d1:3f:70:2c:27:b4:
                    d3:de:63:ae:04:08:3e:5b:cf:14:b9:e2:18:d9:2d:
                    67:25:00:68:07:fd:29:5e:35:7b:2c:41:19:da:57:
                    98:ea:78:92:79:e2:c4:aa:c7:9f:7d:d7:e7:43:5e:
                    c0:44:91:81:70:94:18:e9:00:46:a1:e3:5c:3b:ee:
                    87:ae:0f:21:a5:81:00:87:cf:7b:9d:a5:23:94:ae:
                    a4:c2:94:38:49:8a:6f:b8:db:37:17:d8:2f:22:ca:
                    90:1e:4c:ea:8a:00:0c:e3:48:e5:57:28:b0:ce:73:
                    d2:ab:8d:6a:16:b4:8a:d2:1a:2a:ef:49:e7:7d:42:
                    f4:5f:01:41:c6:d3:f7:15:f9:6d:e5:3a:fe:33:c9:
                    82:0a:1b:50:e6:5a:5f:b0:74:35:75:da:94:e3:71:
                    aa:16:a6:6b:db:be:1f:d9:b0:98:aa:94:33:48:62:
                    ca:35:f8:41:0a:ec:c8:14:09:b8:90:32:72:f7:cb:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:83:8E:CF:E0:1F:32:15:34:57:A2:84:04:E9:EE:11:E8:18:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:ff:fa:f5:82:18:3d:3f:7c:f2:93:15:0c:78:a2:e9:be:
         68:2f:f6:b9:e8:e5:d4:10:31:25:30:8c:38:24:05:59:c4:8b:
         53:89:78:a0:ca:20:75:77:a0:4f:23:19:8e:54:a1:51:08:e0:
         91:27:e9:fb:f0:c5:67:43:65:82:38:1a:e4:51:c9:7b:15:f1:
         90:0b:d1:52:a0:32:53:e8:b5:e6:36:9a:9c:88:4e:55:d8:f0:
         bc:bc:66:d0:5c:7c:96:24:18:c8:f5:b7:a3:f2:4e:b0:5d:f6:
         cd:9d:f4:10:03:03:25:13:f8:d6:34:8b:70:4f:50:6f:7b:64:
         12:bd:aa:f6:38:43:94:bf:4b:40:0a:75:52:02:da:8d:42:93:
         60:72:a0:16:3a:47:29:5b:d8:ce:a3:4c:f0:25:7b:a2:e2:39:
         f7:d2:01:a4:4c:e1:00:e3:e9:f7:6e:45:f2:09:57:09:25:ff:
         c7:1a:ac:b9:8f:0f:ff:d3:f0:31:72:6a:0a:d2:ff:69:a9:c1:
         c4:a7:a4:e6:35:87:59:cb:fb:67:18:3f:35:fe:d6:0d:3e:e0:
         ff:31:52:ae:c0:5f:09:dc:45:ce:dd:18:04:48:46:dc:b4:bd:
         47:4f:26:9f:d8:11:1a:52:fc:9a:4e:eb:76:50:f4:ca:de:3c:
         82:a6:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:20:49 2026 by rpki-client