Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45386a3d-bcba-3b29-a23c-086234093dcf.roa
File:                     45386a3d-bcba-3b29-a23c-086234093dcf.roa (raw, json)
Hash identifier:          zTDGFQrrsNADJhDPbByBYSllSqJEemFSFLgpOzW39jE=
Subject key identifier:   71:29:47:9E:3F:E4:46:F2:BB:98:82:EF:23:EA:37:F6:3B:F6:72:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B76336A514A47ECB7840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45386a3d-bcba-3b29-a23c-086234093dcf.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        50.32.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b7:63:36:a5:14:a4:7e:cb:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=1431cdfb-e08c-46fe-8025-c9f214ab951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:fc:f4:e0:e8:1f:e7:5f:87:cf:fc:38:19:
                    9a:55:55:b6:7c:8a:ae:7b:bf:36:74:66:af:98:c6:
                    9b:bf:e9:c5:cb:00:2f:61:3a:c4:e8:01:d1:70:e1:
                    bd:2b:f2:5e:78:ee:fe:8e:f0:60:66:ce:99:32:9f:
                    b2:28:54:40:d3:5b:5b:1f:71:13:26:46:6a:bc:7e:
                    00:6e:e3:6d:c3:df:5f:e7:86:f2:ef:ef:1c:f4:61:
                    dd:65:d3:92:23:83:e7:8d:80:a3:cb:b4:99:39:3c:
                    dd:8e:9c:22:cd:e1:24:11:62:b3:e6:47:9f:c8:6e:
                    67:c3:d7:17:b8:7e:22:e7:c5:36:33:8b:80:8b:bd:
                    15:11:4a:dd:ef:93:d1:2b:3c:30:bc:54:7c:0b:0f:
                    f1:a6:44:1b:39:d4:64:d2:60:fc:a5:18:fd:09:ae:
                    95:b4:1a:0d:1c:1e:f9:fc:fd:56:55:31:6e:ae:5a:
                    39:e6:3f:ee:8c:88:3c:e3:e4:c7:9f:61:94:db:43:
                    79:9e:f3:fa:93:76:21:30:b6:b9:3c:62:32:5f:77:
                    2a:ef:59:5f:d7:1c:11:7c:58:29:d9:fd:70:23:d8:
                    f6:09:c2:f1:41:40:23:1c:3d:b3:84:3e:0f:fd:69:
                    e5:2e:a4:8a:36:7f:61:e6:62:d3:9c:28:5f:52:54:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:47:9E:3F:E4:46:F2:BB:98:82:EF:23:EA:37:F6:3B:F6:72:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45386a3d-bcba-3b29-a23c-086234093dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.32.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:88:ce:59:e3:b0:b3:0f:73:59:d6:67:3a:63:43:3a:0e:
         7e:0c:30:27:42:7c:8a:fb:20:ae:d5:71:b2:b4:1f:1b:6d:cd:
         bd:af:34:09:28:70:53:d9:8a:30:a8:c2:db:75:2f:58:f9:3a:
         04:9f:a8:49:49:01:52:b0:7d:e4:4c:39:49:ce:93:58:28:78:
         97:e8:b5:35:43:38:4d:64:94:61:39:a0:f5:7a:26:8d:c5:c1:
         0f:73:3e:b2:4c:91:83:d3:1e:15:37:8f:72:f7:71:2d:5e:96:
         0d:ff:80:7b:6d:21:7f:29:d6:7c:d6:f5:1a:16:ec:4f:73:e6:
         53:ed:c4:27:52:a0:6b:63:14:59:e4:7d:db:58:37:5f:e3:59:
         af:a1:03:41:8d:19:ba:92:8a:60:dd:0c:0b:8f:94:3f:9f:17:
         6c:06:97:b9:e9:4d:51:16:c0:7f:f1:7d:aa:3a:81:16:f5:f3:
         7f:1c:85:01:49:50:9e:ee:5f:55:72:bb:75:b3:28:a1:b4:d2:
         3c:1f:80:99:f9:3a:87:ec:df:77:cc:f4:65:b8:7d:b9:84:0b:
         b0:0a:e9:99:9d:23:7b:96:e9:a9:b3:c0:a9:72:cd:3a:99:e8:
         31:06:8a:e6:15:17:75:28:a4:45:0b:18:b3:2f:dd:6f:4a:c8:
         66:ea:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:26:57 2026 by rpki-client