Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebc9248-2da2-3a68-ae59-3e533f093879.roa
File:                     8ebc9248-2da2-3a68-ae59-3e533f093879.roa (raw, json)
Hash identifier:          WpW1XYvd1PaEjRPNxPi4J4hEQ7UrE4B75ErnjMtrNsQ=
Subject key identifier:   D3:BE:7D:B9:DA:B3:06:0A:F6:07:D5:3B:6F:3F:7D:10:62:E7:6E:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32AD2E4C43248CDED83680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebc9248-2da2-3a68-ae59-3e533f093879.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        50.120.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ad:2e:4c:43:24:8c:de:d8:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=345cdf51-2c7d-4b51-9c9e-7757c4ea71c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:db:36:94:bc:d2:3e:71:9f:f6:b6:5f:5b:
                    f8:f7:5a:e5:d3:e4:c2:c9:b1:7d:c1:2b:cd:32:f1:
                    8f:c6:d2:55:a0:a4:4c:9b:40:a3:46:09:90:94:89:
                    8e:42:78:2c:0b:8b:d8:0a:c1:1a:5b:0b:7a:1e:50:
                    61:55:77:f6:84:6a:c4:28:c7:40:08:65:ef:63:3e:
                    e1:06:12:cc:bb:d3:b2:37:66:36:bc:51:d7:79:df:
                    30:c8:bf:74:e9:ab:f3:2b:cc:8f:91:fd:f9:21:bb:
                    33:57:3f:ee:f4:bf:c3:76:c4:31:18:06:0e:54:be:
                    27:ab:3f:07:65:97:af:85:ca:a9:f5:bc:c8:82:6b:
                    3e:d9:1d:8c:0c:bd:8c:73:9e:58:d7:00:b4:83:ab:
                    6a:fe:29:28:86:88:a7:7e:6d:dd:30:25:bd:64:aa:
                    26:31:0a:a2:f4:bc:ac:02:47:dd:3d:3b:a4:f5:6b:
                    79:85:37:2d:dc:d4:bd:8a:6f:fa:32:71:2d:aa:af:
                    5b:03:88:c6:ad:5b:41:88:cd:8e:41:bd:53:2c:f1:
                    39:d1:31:50:9e:6c:89:9c:c9:b2:a4:87:fd:2a:74:
                    6d:26:4e:c8:65:2a:65:5d:12:3f:5c:a0:25:3b:ae:
                    a3:08:36:51:86:08:8f:00:ef:89:da:3b:71:75:ed:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:7D:B9:DA:B3:06:0A:F6:07:D5:3B:6F:3F:7D:10:62:E7:6E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebc9248-2da2-3a68-ae59-3e533f093879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.120.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:51:e6:bb:dc:be:5f:11:75:e7:46:87:b2:c3:e2:49:70:b3:
         db:c6:a4:c2:1b:87:18:6f:22:7b:10:10:1e:56:7c:4e:34:86:
         2e:c0:7e:52:1b:bc:11:61:99:39:7a:19:da:34:f9:7a:fb:8d:
         36:a5:89:90:68:0e:b1:51:0b:2b:bb:5b:1e:e6:03:f2:33:6f:
         49:65:57:61:c6:3e:67:f7:b8:9e:0e:03:fe:91:46:66:a3:ad:
         0d:88:36:b9:32:46:b1:20:52:a4:2b:fa:6c:84:90:c3:c4:eb:
         df:76:d9:72:2e:d2:f9:b7:13:c7:34:fa:ae:dd:b2:0b:c2:3f:
         ab:47:a7:8a:91:a7:43:fb:65:73:e5:31:09:e7:af:2d:50:b2:
         18:c8:fb:0e:13:5d:67:41:79:66:ca:d6:38:97:85:05:20:ba:
         06:88:79:a8:0e:05:d7:cc:73:5a:45:e2:70:74:bd:8f:b1:f0:
         33:6a:c9:e9:ce:01:d2:11:d6:5e:4d:6d:4f:77:0a:84:64:37:
         b2:78:cc:bc:b4:76:8f:a9:8d:03:af:a1:d3:bd:75:e8:a8:52:
         93:c9:22:e3:2c:15:a0:8a:12:06:87:ec:8b:3c:c4:dd:35:5c:
         3a:72:3f:35:65:9a:26:bb:88:5d:29:3a:32:14:50:73:62:ff:
         68:b7:77:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMq0uTEMkjN7YNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MzQ1Y2RmNTEtMmM3ZC00YjUxLTljOWUtNzc1N2M0ZWE3MWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4PbNpS80j5xn/a2X1v491rl0+TCybF9wSvN
MvGPxtJVoKRMm0CjRgmQlImOQngsC4vYCsEaWwt6HlBhVXf2hGrEKMdACGXvYz7h
BhLMu9OyN2Y2vFHXed8wyL906avzK8yPkf35IbszVz/u9L/DdsQxGAYOVL4nqz8H
ZZevhcqp9bzIgms+2R2MDL2Mc55Y1wC0g6tq/ikohoinfm3dMCW9ZKomMQqi9Lys
AkfdPTuk9Wt5hTct3NS9im/6MnEtqq9bA4jGrVtBiM2OQb1TLPE50TFQnmyJnMmy
pIf9KnRtJk7IZSplXRI/XKAlO66jCDZRhgiPAO+J2jtxde0BmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNO+fbnaswYK9gfVO28/fRBi527DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGViYzkyNDgtMmRhMi0z
YTY4LWFlNTktM2U1MzNmMDkzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFMnjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdR5rvcvl8RdedGh7LD4klws9vGpMIbhxhvInsQEB5WfE40hi7AflIb
vBFhmTl6Gdo0+Xr7jTaliZBoDrFRCyu7Wx7mA/Izb0llV2HGPmf3uJ4OA/6RRmaj
rQ2INrkyRrEgUqQr+myEkMPE69922XIu0vm3E8c0+q7dsgvCP6tHp4qRp0P7ZXPl
MQnnry1QshjI+w4TXWdBeWbK1jiXhQUgugaIeagOBdfMc1pF4nB0vY+x8DNqyenO
AdIR1l5NbU93CoRkN7J4zLy0do+pjQOvodO9deioUpPJIuMsFaCKEgaH7Is8xN01
XDpyPzVlmia7iF0pOjIUUHNi/2i3d08=
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:07:03 2026 by rpki-client