Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329b52c6-3c25-37ed-8009-2f7b84fdb8e4.roa
File:                     329b52c6-3c25-37ed-8009-2f7b84fdb8e4.roa (raw, json)
Hash identifier:          rOVU/m7q++NL+PjdUp8t4iRSr6L5sbhEXtfsqhwJOEg=
Subject key identifier:   7B:39:28:A8:36:F4:D1:AF:C9:1E:E2:BD:3E:05:8E:73:6F:18:8A:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB809D2C2F5CDD62D2401F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329b52c6-3c25-37ed-8009-2f7b84fdb8e4.roa
Signing time:             Mon 03 Aug 2026 22:57:02 +0000
ROA not before:           Mon 03 Aug 2026 22:57:02 +0000
ROA not after:            Sun 01 Nov 2026 23:57:02 +0000
asID:                     5650
IP address blocks:        50.44.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:09:d2:c2:f5:cd:d6:2d:24:01:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:57:02 2026 GMT
            Not After : Nov  1 23:57:02 2026 GMT
        Subject: CN=814b017f-038b-49ae-bec8-712e56767e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:91:1a:45:2b:f0:a3:6d:06:ab:b1:44:a6:
                    61:e2:6f:69:28:d3:6f:ee:70:94:05:76:b4:68:7e:
                    b8:6a:f6:31:60:20:f9:91:cd:fe:cf:e6:9a:72:b9:
                    0e:2c:d6:5c:73:6b:83:b3:89:a1:0d:fe:f1:fb:cc:
                    be:5b:cb:1f:a2:0d:26:7e:fd:12:52:b8:dc:70:c6:
                    49:9e:5e:be:b4:c1:a3:7a:90:39:c3:4b:c0:93:b6:
                    ab:b9:da:84:99:a4:58:b7:22:fa:20:da:33:94:c7:
                    6f:3b:7b:37:55:63:dc:c8:c1:90:74:b4:ae:93:22:
                    92:76:1f:2a:db:3d:7d:37:99:17:5f:b9:08:4f:9d:
                    78:88:6d:89:fc:79:fd:f4:43:6f:23:a1:f9:97:c0:
                    5a:af:13:d9:6d:3b:f7:a9:47:85:12:66:8f:c7:a9:
                    92:83:e8:31:fe:26:ee:36:77:99:b4:03:65:de:92:
                    34:b1:f8:db:c3:c2:a3:3c:3d:f2:84:51:8a:88:9c:
                    2d:2b:17:04:39:2b:41:67:fb:c8:9b:ae:d8:c8:72:
                    7b:55:73:3f:c6:da:18:5a:a7:3b:98:6b:3c:dc:84:
                    73:72:9c:98:6b:ac:81:d3:29:4c:0b:4f:d4:d7:89:
                    c9:59:15:66:1e:4e:34:24:13:e4:ee:50:6a:ed:fc:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:39:28:A8:36:F4:D1:AF:C9:1E:E2:BD:3E:05:8E:73:6F:18:8A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329b52c6-3c25-37ed-8009-2f7b84fdb8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:8f:f6:fe:1a:fa:6b:69:24:69:b3:3f:25:6d:40:71:22:
         ef:ec:ef:80:64:8f:58:3a:ba:46:ab:b8:0b:de:62:b7:0b:1e:
         34:63:ea:e6:98:7f:28:26:71:d2:fa:75:fd:e0:aa:1f:a5:13:
         b6:57:8b:eb:7f:81:4a:45:aa:30:79:02:3a:bf:20:ec:9f:b3:
         ae:cf:34:1b:05:74:26:d8:31:69:63:fe:fb:06:41:95:ae:a1:
         b6:84:b9:c0:91:e1:6a:70:85:8e:70:03:01:7d:e6:79:c0:0d:
         d4:b7:94:c0:b2:84:f5:59:35:5a:6e:04:26:1d:83:e5:50:77:
         21:00:3b:cd:95:7e:1a:bd:38:ff:23:31:c8:15:2c:b7:2f:05:
         0e:f2:24:f4:12:89:17:7d:be:52:52:a9:aa:6e:18:0d:5d:cd:
         14:a0:73:c4:24:2f:e8:d8:2b:d0:11:6e:32:97:5c:5f:62:c0:
         e3:79:29:1d:85:e2:99:72:81:47:9c:f4:ef:8b:d5:33:98:8a:
         01:1c:f4:36:3c:e2:45:96:f2:bc:1a:01:ea:4a:72:d8:bd:b3:
         b8:f8:f9:33:03:b4:95:06:63:68:a0:fc:61:24:1a:58:ea:70:
         f4:c4:0f:10:28:82:25:9b:6b:7c:fb:3f:0a:29:3a:d1:59:19:
         48:67:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:43:02 2026 by rpki-client