Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/573faf60-e6cc-33d8-83ce-785bebd5ff50.roa
File:                     573faf60-e6cc-33d8-83ce-785bebd5ff50.roa (raw, json)
Hash identifier:          kmId1BjyTjpbK+92vmOOvQ7T0c/qil8Lsx7DqCSeauI=
Subject key identifier:   9A:5A:21:18:1A:6D:A6:53:D3:F6:DE:C3:88:C6:6F:26:74:6F:AB:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB7F89B1BE7C9F33951B6FAA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/573faf60-e6cc-33d8-83ce-785bebd5ff50.roa
Signing time:             Mon 03 Aug 2026 22:22:21 +0000
ROA not before:           Mon 03 Aug 2026 22:22:21 +0000
ROA not after:            Sun 01 Nov 2026 23:22:21 +0000
asID:                     5650
IP address blocks:        50.123.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:f8:9b:1b:e7:c9:f3:39:51:b6:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:22:21 2026 GMT
            Not After : Nov  1 23:22:21 2026 GMT
        Subject: CN=222832ed-4276-477f-9b51-f3cced46545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:0d:69:0e:1b:da:2a:c6:a8:a5:18:ae:72:
                    6c:58:b6:4c:97:3b:b1:19:18:97:0c:86:ba:92:d2:
                    e7:2c:fb:8b:66:3a:aa:99:c6:f7:8a:fa:7f:4d:34:
                    ff:0e:df:f2:d8:d8:c7:31:18:f5:6f:6a:2c:12:51:
                    a7:4a:60:4f:be:80:69:62:32:dc:62:78:e0:c2:96:
                    e2:5c:ca:39:d1:f3:32:e5:65:b5:39:37:cf:95:25:
                    cf:fc:a2:58:4a:4a:ed:6b:29:7d:5a:26:2d:1a:14:
                    c2:af:ff:d9:e9:1e:7c:1b:cc:36:30:f2:11:62:89:
                    bf:a6:de:d4:32:a5:23:8b:16:2f:48:3b:32:c2:90:
                    b0:b8:77:33:0f:ea:c7:2e:01:61:65:bc:18:cb:f5:
                    ab:17:f8:a1:9f:d6:b4:bd:83:be:f0:c6:9e:85:84:
                    ff:b9:e7:50:72:14:b1:8a:a9:54:73:0d:39:63:ce:
                    c7:57:0f:6a:a3:14:23:71:4b:71:a0:ee:42:65:96:
                    8d:17:b7:b9:b0:04:ee:43:85:0b:87:dc:2e:65:a8:
                    49:21:a3:a7:03:63:e9:38:51:77:ec:01:f3:18:3a:
                    44:34:39:fc:e4:60:f9:39:34:96:4f:ad:8d:07:7c:
                    5b:08:b6:17:17:0b:66:fb:7f:fc:18:92:de:4a:43:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5A:21:18:1A:6D:A6:53:D3:F6:DE:C3:88:C6:6F:26:74:6F:AB:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/573faf60-e6cc-33d8-83ce-785bebd5ff50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.123.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:ee:47:99:d1:e2:ee:cf:76:5d:ab:e1:ef:0c:29:5f:14:
         ae:2b:ec:e9:00:87:f1:27:0b:16:30:9c:58:7f:7d:df:e3:11:
         72:1b:de:cb:59:b7:de:5b:23:d8:9d:d2:18:5e:9e:9f:b2:2a:
         a6:62:dd:81:1a:89:47:de:d7:93:4d:e3:83:e4:b7:a2:98:d4:
         cb:79:8c:5b:10:d6:74:4c:c6:c0:10:2f:43:a6:1c:ca:38:f3:
         9a:d5:c5:c6:f9:15:c2:e0:05:28:51:42:63:56:90:65:e8:42:
         77:54:d4:42:ce:7e:39:40:22:39:1e:ef:f7:e7:e3:aa:78:9f:
         41:b2:c4:7f:08:55:d1:6f:1d:46:5f:4f:f9:bd:7e:b5:2e:23:
         ce:44:bd:52:42:6e:d6:d9:8c:17:1f:eb:81:2c:c8:4b:3e:06:
         6a:64:78:d4:ce:4b:86:65:25:78:30:2a:f7:5b:18:db:7f:6a:
         3a:e5:52:ac:11:89:90:cd:d5:ae:f6:92:8d:67:e2:b1:7a:cc:
         44:6f:38:25:10:88:eb:72:c1:6c:f1:84:35:96:3d:3e:96:75:
         33:63:97:94:58:bb:e0:a4:8f:e2:a0:fd:2e:58:54:2d:66:0f:
         4c:c8:4f:92:51:da:1f:b8:14:09:fc:c2:f8:5b:a1:b4:20:6e:
         94:f0:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:40:12 2026 by rpki-client