Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f6fecd1b-7398-3f0b-810a-cc347797d636.roa
File:                     f6fecd1b-7398-3f0b-810a-cc347797d636.roa (raw, json)
Hash identifier:          war/Sh5rm3FGS/wF5Cc2XGpY6AL/l2jqWtFUk+ygjHg=
Subject key identifier:   28:AC:E4:31:EF:5E:21:05:C1:E3:27:11:40:24:E5:40:15:88:EC:6B
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E421A4B8E544AC5D21EA98040
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f6fecd1b-7398-3f0b-810a-cc347797d636.roa
Signing time:             Mon 22 Jun 2026 17:04:51 +0000
ROA not before:           Mon 22 Jun 2026 17:04:51 +0000
ROA not after:            Sun 20 Sep 2026 17:04:51 +0000
asID:                     402288
IP address blocks:        199.235.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:1a:4b:8e:54:4a:c5:d2:1e:a9:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun 22 17:04:51 2026 GMT
            Not After : Sep 20 17:04:51 2026 GMT
        Subject: CN=f0ae575a-fe68-45a1-8654-344e9125649f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:20:2c:88:ec:a1:92:28:17:ab:1b:5e:d2:
                    90:74:83:3b:cf:ca:18:d9:72:c8:21:9c:86:13:4a:
                    82:fa:d3:46:fc:c1:a7:1f:3e:e6:b7:4f:da:d6:a2:
                    b0:20:9b:dc:55:3a:fa:22:ec:d3:97:cf:b4:10:cf:
                    40:be:fa:d9:4e:af:49:94:f8:02:ea:08:a7:d0:de:
                    c0:b8:c6:a8:90:5b:44:fc:3c:ed:be:7e:b2:01:35:
                    1f:dc:be:16:e2:3d:2a:99:91:3a:15:25:02:46:c6:
                    b9:3a:c4:37:c0:d6:94:a3:80:d0:6f:f0:78:16:f1:
                    48:77:7b:6a:63:76:e9:3f:03:c2:c8:f1:71:16:20:
                    88:03:a8:b7:4b:c9:c9:9a:d0:13:74:f5:7d:ea:db:
                    dd:ca:d1:6d:5f:5c:3b:24:7f:86:ea:85:3d:b4:3b:
                    d1:ab:18:62:a1:2a:8b:e6:e4:95:8f:7f:88:91:73:
                    36:8e:87:62:b4:53:1a:39:f0:1d:fa:23:ff:f9:37:
                    af:86:f9:9c:7f:04:ec:88:eb:4e:2e:fc:89:2d:46:
                    80:6b:d7:58:c0:6b:b5:26:9d:31:1f:a7:19:55:98:
                    a8:21:76:82:29:d4:ab:1c:2d:6c:7c:b4:ee:7b:7f:
                    db:af:b1:d3:f2:b2:36:61:69:e1:48:99:a1:45:1c:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:E4:31:EF:5E:21:05:C1:E3:27:11:40:24:E5:40:15:88:EC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f6fecd1b-7398-3f0b-810a-cc347797d636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:58:6f:e2:26:80:69:f7:40:53:df:da:a3:e9:13:d2:12:
         41:a2:e2:e1:90:8e:20:b5:d4:dc:f1:c7:bf:82:4e:e7:90:2f:
         88:ff:2e:4d:82:d4:26:a3:68:51:dc:10:56:29:0b:51:07:16:
         f0:88:20:e4:79:03:0a:2d:8a:59:79:de:12:b9:a4:c5:e7:51:
         3b:b6:c0:3b:27:da:92:17:58:c6:35:01:71:4c:9c:49:35:f9:
         df:2b:3a:24:d1:f9:8b:8f:b3:c0:78:18:a6:d3:8d:db:6b:23:
         c0:9c:43:5c:a0:4f:f4:c4:a9:20:42:b9:46:e1:d6:61:c5:2b:
         fc:68:43:35:de:3b:38:1c:00:ce:db:56:84:bd:14:d0:c6:60:
         a7:fb:bd:00:be:09:21:b3:aa:0e:ea:0f:69:1a:c7:20:7d:63:
         fb:f7:2e:58:90:76:8c:74:d5:bc:0e:38:dc:5b:b4:ae:24:3c:
         81:54:4e:7e:11:ad:82:d9:02:9e:be:b7:e2:81:aa:76:1f:84:
         da:bd:67:43:90:eb:32:61:e9:0d:b0:38:5d:eb:65:f2:2b:65:
         31:8a:41:43:9d:35:bd:c4:b8:4d:f5:3a:e1:31:01:30:34:28:
         71:80:68:0b:40:b4:52:2f:e5:dc:96:3c:53:44:ce:cf:d0:1b:
         54:03:18:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CGkuOVErF0h6pgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDYyMjE3MDQ1MVoXDTI2MDkyMDE3MDQ1MVowLzEtMCsGA1UEAxMk
ZjBhZTU3NWEtZmU2OC00NWExLTg2NTQtMzQ0ZTkxMjU2NDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yYgLIjsoZIoF6sbXtKQdIM7z8oY2XLIIZyG
E0qC+tNG/MGnHz7mt0/a1qKwIJvcVTr6IuzTl8+0EM9AvvrZTq9JlPgC6gin0N7A
uMaokFtE/Dztvn6yATUf3L4W4j0qmZE6FSUCRsa5OsQ3wNaUo4DQb/B4FvFId3tq
Y3bpPwPCyPFxFiCIA6i3S8nJmtATdPV96tvdytFtX1w7JH+G6oU9tDvRqxhioSqL
5uSVj3+IkXM2joditFMaOfAd+iP/+TevhvmcfwTsiOtOLvyJLUaAa9dYwGu1Jp0x
H6cZVZioIXaCKdSrHC1sfLTue3/br7HT8rI2YWnhSJmhRRyAhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCis5DHvXiEFweMnEUAk5UAViOxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvZjZmZWNkMWItNzM5OC0z
ZjBiLTgxMGEtY2MzNDc3OTdkNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+vhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwTWG/iJoBp90BT39qj6RPSEkGi4uGQjiC11Nzxx7+CTueQL4j/Lk2C
1CajaFHcEFYpC1EHFvCIIOR5Awotill53hK5pMXnUTu2wDsn2pIXWMY1AXFMnEk1
+d8rOiTR+YuPs8B4GKbTjdtrI8CcQ1ygT/TEqSBCuUbh1mHFK/xoQzXeOzgcAM7b
VoS9FNDGYKf7vQC+CSGzqg7qD2kaxyB9Y/v3LliQdox01bwOONxbtK4kPIFUTn4R
rYLZAp6+t+KBqnYfhNq9Z0OQ6zJh6Q2wOF3rZfIrZTGKQUOdNb3EuE31OuExATA0
KHGAaAtAtFIv5dyWPFNEzs/QG1QDGAo=
-----END CERTIFICATE-----
Generated at Thu Jul 2 16:17:07 2026 by rpki-client