Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3316c72-4dc6-31a7-b8a4-f9efa5a66a90.roa
File:                     f3316c72-4dc6-31a7-b8a4-f9efa5a66a90.roa (raw, json)
Hash identifier:          /y6JX/negCJET7ip/0xu9TxQjnZtdwFSnGBnA37xvKY=
Subject key identifier:   4B:5F:AD:C2:CE:DE:90:D8:8F:DC:B1:57:38:19:F1:C8:4F:9F:2E:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB809D4C7970CA4872C157880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3316c72-4dc6-31a7-b8a4-f9efa5a66a90.roa
Signing time:             Mon 03 Aug 2026 22:57:03 +0000
ROA not before:           Mon 03 Aug 2026 22:57:03 +0000
ROA not after:            Sun 01 Nov 2026 23:57:03 +0000
asID:                     5650
IP address blocks:        50.122.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:09:d4:c7:97:0c:a4:87:2c:15:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:57:03 2026 GMT
            Not After : Nov  1 23:57:03 2026 GMT
        Subject: CN=8143496f-7e8a-469e-bbee-b5929a50ce0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:d5:7e:76:ba:bd:16:29:b5:77:81:a0:f4:
                    77:35:c0:e8:a8:c2:9b:89:17:18:7e:bb:1b:86:18:
                    1f:7a:6d:3a:b9:fd:02:7e:28:74:a6:0a:90:aa:b1:
                    fc:83:17:28:90:64:a0:a9:67:74:4f:01:ed:ae:f7:
                    ac:f6:ab:c4:16:c9:08:f7:bd:13:69:19:29:9a:11:
                    6b:7e:4f:b8:41:01:f1:73:ee:a6:d3:6d:1e:57:66:
                    41:e7:e8:99:fa:bc:c7:a1:08:a5:cc:9b:2e:f3:cf:
                    5c:ef:42:df:5f:8b:b9:e1:42:4e:32:43:4e:c5:d8:
                    a5:7a:66:a4:7e:89:5b:44:d4:3b:0c:fa:10:a4:1b:
                    72:f6:c6:b6:75:a9:ac:75:a7:98:5f:97:0b:56:bd:
                    6d:4d:82:81:e4:d7:8f:20:d7:7a:da:94:f1:3d:52:
                    87:da:b5:21:43:50:fa:0d:91:52:f5:66:50:ce:8a:
                    d0:5a:24:14:43:53:77:8b:bc:a5:55:9f:75:5a:19:
                    a9:3e:ec:4d:8e:7b:05:c2:69:90:d2:52:7e:db:79:
                    c1:e5:ee:8f:82:b8:ce:58:b4:e4:1b:9f:dd:4f:e3:
                    f4:ba:0c:22:40:c3:c8:55:1e:62:9c:2e:b6:db:d9:
                    37:cf:70:e1:b6:a2:93:78:56:97:55:f1:85:2e:51:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5F:AD:C2:CE:DE:90:D8:8F:DC:B1:57:38:19:F1:C8:4F:9F:2E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3316c72-4dc6-31a7-b8a4-f9efa5a66a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:f4:65:fb:31:80:17:ea:02:bf:11:30:be:b4:4c:25:f2:
         6a:fd:22:a5:2f:44:78:02:c6:6a:93:b6:41:76:eb:80:f3:8e:
         1a:95:58:fa:bb:46:f8:b9:b3:d3:49:7f:a4:10:15:99:f2:65:
         e7:79:b5:73:4e:a8:a5:87:ff:7c:a2:7f:3c:c4:b4:21:52:cc:
         9c:be:d8:f9:a9:9c:f5:6a:98:a4:d8:d0:bd:20:45:f1:a2:57:
         8b:ec:04:7f:24:44:06:4a:6a:69:9e:95:6b:4f:79:01:6d:d9:
         aa:f3:1e:e6:53:b4:56:cc:7e:e3:f7:68:28:3b:8c:0a:11:c0:
         e8:ea:39:c7:6a:92:a8:ec:4b:9b:40:aa:9d:13:29:42:b9:a0:
         dc:cf:aa:b5:a0:2c:c5:15:04:a1:5b:dd:b3:b9:b1:ff:39:37:
         e5:8e:24:ff:6c:5b:ef:55:5a:d4:e3:61:d4:bc:10:6c:05:2a:
         ac:2e:fa:05:d4:a6:3c:4c:30:5c:89:52:1f:be:d3:0f:19:76:
         fc:09:23:a4:63:fd:dc:46:59:59:1f:76:26:87:0b:c9:e8:b3:
         4b:ac:93:a6:65:3f:32:5f:2e:b8:05:1f:0b:68:44:fe:a5:6a:
         88:a9:94:f6:98:ae:8b:43:0a:98:f2:13:cc:83:f9:f4:6c:16:
         ef:62:fa:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE64CdTHlwykhywVeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgwMzIyNTcwM1oXDTI2MTEwMTIzNTcwM1owLzEtMCsGA1UEAxMk
ODE0MzQ5NmYtN2U4YS00NjllLWJiZWUtYjU5MjlhNTBjZTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW/Vfna6vRYptXeBoPR3NcDoqMKbiRcYfrsb
hhgfem06uf0Cfih0pgqQqrH8gxcokGSgqWd0TwHtrves9qvEFskI970TaRkpmhFr
fk+4QQHxc+6m020eV2ZB5+iZ+rzHoQilzJsu889c70LfX4u54UJOMkNOxdilemak
folbRNQ7DPoQpBty9sa2damsdaeYX5cLVr1tTYKB5NePINd62pTxPVKH2rUhQ1D6
DZFS9WZQzorQWiQUQ1N3i7ylVZ91WhmpPuxNjnsFwmmQ0lJ+23nB5e6PgrjOWLTk
G5/dT+P0ugwiQMPIVR5inC6229k3z3DhtqKTeFaXVfGFLlGbDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEtfrcLO3pDYj9yxVzgZ8chPny75MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjMzMTZjNzItNGRjNi0z
MWE3LWI4YTQtZjllZmE1YTY2YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAMnowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOfn0ZfsxgBfqAr8RML60TCXyav0ipS9EeALGapO2QXbrgPOOGpVY+rtG
+Lmz00l/pBAVmfJl53m1c06opYf/fKJ/PMS0IVLMnL7Y+amc9WqYpNjQvSBF8aJX
i+wEfyREBkpqaZ6Va095AW3ZqvMe5lO0Vsx+4/doKDuMChHA6Oo5x2qSqOxLm0Cq
nRMpQrmg3M+qtaAsxRUEoVvds7mx/zk35Y4k/2xb71Va1ONh1LwQbAUqrC76BdSm
PEwwXIlSH77TDxl2/AkjpGP93EZZWR92JocLyeizS6yTpmU/Ml8uuAUfC2hE/qVq
iKmU9piui0MKmPITzIP59GwW72L6Mw==
-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:33 2026 by rpki-client