Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30b57dfc-b189-39a1-ae91-e4f5cd8aa087.roa
File:                     30b57dfc-b189-39a1-ae91-e4f5cd8aa087.roa (raw, json)
Hash identifier:          08tV/+HhXhHb09qGHk9UlUum07q5wC+mw8sHX/v/wIo=
Subject key identifier:   A3:C7:F5:58:33:F4:8B:19:E9:31:CD:C6:B5:6A:7E:06:40:CD:BD:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB7F888B8549638D73DB9D180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30b57dfc-b189-39a1-ae91-e4f5cd8aa087.roa
Signing time:             Mon 03 Aug 2026 22:22:12 +0000
ROA not before:           Mon 03 Aug 2026 22:22:12 +0000
ROA not after:            Sun 01 Nov 2026 23:22:12 +0000
asID:                     20359
IP address blocks:        50.49.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:f8:88:b8:54:96:38:d7:3d:b9:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:22:12 2026 GMT
            Not After : Nov  1 23:22:12 2026 GMT
        Subject: CN=11d05d8a-bbea-4eb8-95aa-134c3dfc2e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:8d:84:ab:cb:f4:f7:78:2b:5e:e6:97:b4:
                    89:d0:47:96:fd:e9:06:24:8d:4a:e5:8c:5d:02:d2:
                    f2:74:17:2a:1d:e0:27:a3:db:64:43:2b:d6:32:0f:
                    1c:bb:9e:15:65:cd:64:1a:38:03:4d:f3:7c:01:02:
                    98:12:c2:15:3f:04:04:42:65:a7:41:f4:c0:03:5a:
                    0e:78:5a:11:94:96:5b:c1:14:02:7f:b6:24:b9:a0:
                    74:15:19:a3:07:d6:1f:4b:54:c9:2d:81:38:94:db:
                    c8:b0:82:01:37:bf:cd:1c:2d:2b:4a:06:0e:d4:20:
                    a8:74:92:3c:3d:90:d5:38:9d:86:f3:47:72:8a:f5:
                    57:a6:8e:60:5d:6f:48:3d:e9:4a:52:fb:84:8b:cb:
                    fe:f2:b8:d9:46:aa:aa:40:91:9d:fe:4e:5f:ef:b0:
                    d7:46:57:91:86:e6:28:70:02:52:79:f7:84:2a:0d:
                    10:ac:89:6b:63:ad:73:82:f8:0b:79:3c:26:65:8d:
                    c6:25:49:c4:18:44:1d:d3:2d:fe:25:b0:d8:17:c1:
                    34:27:95:bb:08:db:c4:e7:3d:aa:97:a5:bd:bf:24:
                    f0:3a:f2:ad:77:7d:e6:93:1b:cc:88:e3:1c:e2:c4:
                    18:a9:b1:82:3d:26:d8:f7:60:c9:ac:f6:a5:4d:3b:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:F5:58:33:F4:8B:19:E9:31:CD:C6:B5:6A:7E:06:40:CD:BD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30b57dfc-b189-39a1-ae91-e4f5cd8aa087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.49.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:fb:47:86:ba:e8:6e:24:e9:eb:c9:47:b3:80:cf:9b:6f:
         b4:39:ce:e4:c3:9e:0f:4b:66:04:5f:31:78:a0:b7:1d:3b:0a:
         27:af:d1:56:e6:00:ea:07:b1:6f:fc:a1:30:14:07:9a:94:5f:
         a3:23:3f:b4:da:bb:54:84:90:e3:4a:71:10:d4:7d:eb:56:27:
         fd:aa:fb:62:06:d7:01:8e:10:9a:9d:b0:f3:90:1e:61:66:d9:
         7a:61:62:75:e3:39:6f:9b:6a:e8:cc:59:72:81:30:1f:60:c2:
         11:a0:62:88:c9:83:3a:ba:09:9b:98:82:05:5b:f5:67:a7:2d:
         af:7b:3b:89:94:ec:09:ac:81:4d:44:70:8f:ba:5d:90:ce:12:
         43:c3:8b:73:19:9f:69:33:12:f7:f0:70:3c:b4:a8:05:52:83:
         b2:99:37:30:5e:08:60:38:7f:08:28:ba:e2:a6:e0:dc:0b:40:
         e4:a6:b8:cc:fe:eb:50:9c:7c:94:6f:32:09:55:43:f6:99:a5:
         0a:1e:98:06:a0:e0:fc:de:26:a1:6a:24:43:cd:6f:b2:d5:bf:
         11:72:5f:d4:84:b8:3b:18:3a:3c:00:ab:3f:15:ff:69:00:06:
         a8:c9:ce:74:97:0b:16:bb:50:e9:d4:3d:04:08:a6:7a:7b:e2:
         ef:0b:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:40:12 2026 by rpki-client