Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d60ec2e2-5bef-32b8-8cc7-51752519b616.roa
File:                     d60ec2e2-5bef-32b8-8cc7-51752519b616.roa (raw, json)
Hash identifier:          8kMLFZtykrLjqVGGKaezxhYVvjH2WMahplJyD1bdMiE=
Subject key identifier:   DC:64:F5:86:B1:DA:1D:63:EB:8A:36:BE:D1:E8:87:B9:1F:72:6F:96
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E30C026A7BD702BFBF6A75A80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d60ec2e2-5bef-32b8-8cc7-51752519b616.roa
Signing time:             Tue 16 Jun 2026 11:54:28 +0000
ROA not before:           Tue 16 Jun 2026 11:54:28 +0000
ROA not after:            Mon 14 Sep 2026 11:54:28 +0000
asID:                     209888
IP address blocks:        199.235.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:c0:26:a7:bd:70:2b:fb:f6:a7:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun 16 11:54:28 2026 GMT
            Not After : Sep 14 11:54:28 2026 GMT
        Subject: CN=f69497c9-7eb7-495c-8ac9-9fb11b5b8863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:1d:96:42:57:a3:ce:10:c1:ee:aa:40:4b:
                    13:55:ad:8c:68:e9:3e:66:4e:c4:22:3f:b0:8e:24:
                    44:71:e3:68:63:35:d0:c1:b4:ed:a5:b5:0d:2a:e2:
                    ec:3c:7c:4f:d5:3a:4b:1e:58:af:a8:d3:c2:09:cf:
                    8d:44:a1:bc:cf:b7:91:98:68:84:a4:35:39:56:45:
                    55:bf:62:d1:0f:cb:37:c4:d7:5a:88:68:b0:98:69:
                    b1:db:b6:02:08:60:56:86:52:b0:27:ca:66:bb:02:
                    8e:99:d1:8f:40:26:cc:94:f4:b6:d1:ee:53:dc:72:
                    a7:34:9e:5d:cc:d7:73:2b:f7:85:de:39:12:b9:0a:
                    b7:9b:91:e4:81:25:b2:79:c0:1c:b2:e0:15:5f:c7:
                    59:90:29:e1:91:50:36:e3:4f:ed:b6:1c:14:3e:af:
                    4f:a2:24:bc:71:19:ce:d7:01:48:c2:ce:1a:65:72:
                    67:d9:d3:ba:8d:9d:05:6a:69:67:7c:85:1a:a2:14:
                    67:80:a4:9d:0a:ee:f4:62:34:96:58:6b:01:67:d8:
                    59:4e:37:93:98:45:db:42:05:ad:f0:a5:f0:a2:b1:
                    3c:ed:b0:de:fa:98:d3:31:db:27:4e:8d:c1:78:4b:
                    73:6c:bd:a9:78:3a:a4:73:75:91:1b:90:74:f4:c2:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:F5:86:B1:DA:1D:63:EB:8A:36:BE:D1:E8:87:B9:1F:72:6F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d60ec2e2-5bef-32b8-8cc7-51752519b616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:39:47:86:e5:72:47:32:e0:e3:1a:93:d7:98:ff:d1:c4:
         08:c2:0a:34:8f:7c:df:78:0c:2c:d4:6e:9f:dc:5d:ab:d3:c2:
         18:6a:ce:d0:7f:8a:f6:30:76:46:72:38:46:50:8e:66:19:69:
         a0:4c:19:38:96:f2:c4:b0:47:a1:af:ed:40:65:69:23:d7:51:
         de:1e:13:19:da:f6:d9:c9:d0:9c:83:98:64:2e:6e:93:62:af:
         89:cd:01:15:9f:bc:ba:b3:3e:0c:1f:4a:ba:2a:1c:ae:73:3f:
         b3:11:96:40:b0:66:94:1b:25:91:67:8d:0e:fa:1f:66:bf:0b:
         82:52:85:e5:6b:46:d6:0a:88:9c:d7:49:00:fb:64:0e:f6:2c:
         14:1c:8c:27:44:ba:75:4e:52:38:a7:20:c3:8d:40:8e:81:ea:
         85:4b:d0:68:9e:a8:ad:b8:77:ae:8c:0d:c5:5d:d1:ea:da:37:
         05:e9:05:67:37:ec:6c:21:0b:45:3d:4f:5c:83:b1:f4:6b:ad:
         06:83:62:ba:46:31:e4:3c:ba:7f:30:7d:d9:d4:ca:34:e8:74:
         a5:a9:aa:be:c6:7e:20:22:b8:95:34:83:75:7d:26:d7:21:fc:
         3f:ad:66:c4:fb:8a:d3:4e:b4:05:bc:d4:be:8b:20:b9:b8:47:
         a3:83:b4:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4wwCanvXAr+/anWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDYxNjExNTQyOFoXDTI2MDkxNDExNTQyOFowLzEtMCsGA1UEAxMk
ZjY5NDk3YzktN2ViNy00OTVjLThhYzktOWZiMTFiNWI4ODYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqcdlkJXo84Qwe6qQEsTVa2MaOk+Zk7EIj+w
jiREceNoYzXQwbTtpbUNKuLsPHxP1TpLHlivqNPCCc+NRKG8z7eRmGiEpDU5VkVV
v2LRD8s3xNdaiGiwmGmx27YCCGBWhlKwJ8pmuwKOmdGPQCbMlPS20e5T3HKnNJ5d
zNdzK/eF3jkSuQq3m5HkgSWyecAcsuAVX8dZkCnhkVA240/tthwUPq9PoiS8cRnO
1wFIws4aZXJn2dO6jZ0FamlnfIUaohRngKSdCu70YjSWWGsBZ9hZTjeTmEXbQgWt
8KXworE87bDe+pjTMdsnTo3BeEtzbL2peDqkc3WRG5B09MKsPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxk9Yax2h1j64o2vtHoh7kfcm+WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvZDYwZWMyZTItNWJlZi0z
MmI4LThjYzctNTE3NTI1MTliNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+tsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLcOUeG5XJHMuDjGpPXmP/RxAjCCjSPfN94DCzUbp/cXavTwhhqztB/
ivYwdkZyOEZQjmYZaaBMGTiW8sSwR6Gv7UBlaSPXUd4eExna9tnJ0JyDmGQubpNi
r4nNARWfvLqzPgwfSroqHK5zP7MRlkCwZpQbJZFnjQ76H2a/C4JSheVrRtYKiJzX
SQD7ZA72LBQcjCdEunVOUjinIMONQI6B6oVL0GieqK24d66MDcVd0eraNwXpBWc3
7GwhC0U9T1yDsfRrrQaDYrpGMeQ8un8wfdnUyjTodKWpqr7GfiAiuJU0g3V9Jtch
/D+tZsT7itNOtAW81L6LILm4R6ODtIc=
-----END CERTIFICATE-----
Generated at Sat Jun 20 06:11:19 2026 by rpki-client