Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be42e28f-e9bc-31a1-8414-7f8b78fe8689.roa
File:                     be42e28f-e9bc-31a1-8414-7f8b78fe8689.roa (raw, json)
Hash identifier:          KDW3JfMhyu16uJKpn5Xvlv/bcIsQE2KQk65mFZBIV+g=
Subject key identifier:   43:57:B4:15:C5:F2:AF:8E:2C:15:74:10:BD:6F:1A:38:EE:C3:7F:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B5792F48FBC25D0AC100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be42e28f-e9bc-31a1-8414-7f8b78fe8689.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        50.106.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b5:79:2f:48:fb:c2:5d:0a:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=0417adaf-93ea-49c4-9a3e-b11cbacbb993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:5a:68:84:31:b9:c1:bc:6b:ec:bb:0c:f4:
                    fb:57:f8:6b:68:98:1e:8b:8e:88:35:ac:15:79:50:
                    33:e1:95:90:e6:ca:42:5d:7d:41:98:55:e8:d9:a3:
                    a9:4d:c4:d6:aa:5d:d8:53:84:31:9c:86:e7:22:7d:
                    a3:e4:96:f7:0a:f8:3a:59:5a:2d:52:ad:82:26:92:
                    ef:69:cd:65:a3:7b:18:42:58:5d:bc:9d:cd:23:48:
                    fd:f8:0c:d0:c3:32:5a:f5:a4:f6:c0:e4:3f:0e:30:
                    10:37:d7:c0:5d:b6:c0:3d:60:45:33:91:79:7e:ca:
                    c5:4d:51:19:58:05:2e:ce:80:3e:00:21:84:54:e0:
                    2f:24:7e:0a:f5:3b:5c:ee:56:86:db:2e:ac:7e:21:
                    4a:b9:c2:1a:1a:b2:37:c4:45:e3:99:df:d9:65:5b:
                    0c:1a:3d:71:63:c3:00:ce:a5:6e:68:5d:db:6c:11:
                    34:18:15:41:ea:9d:ab:d2:a6:cb:c4:9c:80:47:33:
                    35:18:3d:e4:50:d7:8a:f3:1c:cf:a1:d4:26:b4:27:
                    6a:fe:4b:ca:bc:42:3c:b8:66:6f:03:4a:d5:0d:15:
                    3e:19:60:9c:c4:8c:32:43:f9:07:a5:e0:ee:35:be:
                    6d:63:21:bc:c7:de:90:49:8b:98:11:71:a1:9d:4e:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:B4:15:C5:F2:AF:8E:2C:15:74:10:BD:6F:1A:38:EE:C3:7F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be42e28f-e9bc-31a1-8414-7f8b78fe8689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.106.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:70:1c:33:08:98:4d:11:4a:cd:2f:4a:9f:22:04:d8:d8:
         27:0b:28:07:0a:9c:1e:a8:ab:ca:f1:09:61:5b:52:25:80:2a:
         21:1a:cc:73:95:ee:9c:b7:e6:f3:4c:34:ed:c8:b5:42:67:3d:
         71:d3:45:4c:48:b0:8b:de:ce:c1:05:9b:9a:67:3f:e8:2c:ab:
         f1:5a:95:c9:f5:8b:54:4c:54:c3:09:20:a2:a7:21:7b:79:c6:
         2d:1a:26:e6:9f:f1:79:fa:7d:d1:4f:5a:07:1b:6b:0d:23:26:
         55:1b:58:a7:e7:a7:7a:24:d8:9b:eb:e5:2b:d1:1e:2f:51:01:
         73:3c:14:d1:ec:85:19:c7:76:32:fe:ef:44:27:28:a4:c6:61:
         2f:a4:f2:c2:09:7c:c9:ed:68:c1:69:8b:57:a2:e3:0a:04:c3:
         77:7a:e0:9d:4c:83:ab:7e:f4:b5:43:a8:4f:dc:b0:c6:b2:e8:
         64:5d:6d:0c:a8:0a:34:86:72:8d:22:3b:ac:45:69:be:86:ac:
         7a:b6:5d:3d:28:4f:7d:e4:f4:a9:e1:d8:db:ea:30:39:20:11:
         f3:6e:28:08:5d:f2:a3:f6:2d:29:8b:b7:43:a5:c4:df:16:45:
         b2:22:bb:1b:d7:ff:60:bf:fc:a4:97:e8:5b:c9:84:42:af:14:
         59:be:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:46:12 2026 by rpki-client