Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dcacf28c-56a7-3a87-8228-f3dca6220c2b.roa
File:                     dcacf28c-56a7-3a87-8228-f3dca6220c2b.roa (raw, json)
Hash identifier:          1YjPhwl69xt1JHe6KkxBhb4SRjYGiwlmU7mXcaD5gN8=
Subject key identifier:   46:3D:47:10:2F:AD:F8:D4:DB:19:3A:67:CA:C1:B7:72:4E:4D:63:AC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EC371C9E35D4BE8DBA839D300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dcacf28c-56a7-3a87-8228-f3dca6220c2b.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     30058
IP address blocks:        50.7.248.0/23 maxlen: 23
                          2001:49f0:d0b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c9:e3:5d:4b:e8:db:a8:39:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=607b1b9a-9a02-4536-9190-b934281d7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ef:0b:72:d2:3c:dc:66:44:cd:62:6e:24:ed:
                    80:b6:b7:13:6f:17:5d:11:fa:7a:46:75:5b:bc:b6:
                    a7:a9:a3:86:c5:cb:7f:9e:81:06:ab:84:b6:a9:79:
                    6b:90:08:6f:89:d9:9e:5a:66:92:a0:4c:5e:56:f4:
                    fe:9e:5a:68:95:be:93:8d:01:3e:8d:7e:6e:cf:98:
                    a0:5b:d7:19:6a:da:1a:db:4f:cb:fc:15:e8:72:9f:
                    fb:b4:0f:46:33:6d:e1:8a:c7:79:ff:a0:4b:7d:d7:
                    20:8c:69:7e:8b:c4:05:10:b7:f4:b0:54:6f:cf:37:
                    79:2e:a8:ad:ec:4b:11:35:8f:44:cc:2b:b6:3c:ea:
                    f3:77:d0:3f:53:2f:21:c4:f4:ef:45:5d:06:3f:0a:
                    f6:e5:98:b6:94:fa:35:62:b1:65:39:62:2f:cf:3c:
                    a5:bb:dd:79:10:aa:a1:3e:76:65:99:f9:be:96:4e:
                    f0:a0:52:4e:f2:84:7b:de:be:dd:71:6b:8b:c0:fd:
                    46:02:08:98:15:fc:37:78:a9:79:d0:e2:16:0e:7c:
                    20:19:3a:88:53:1c:f1:1d:11:e5:bb:34:2e:36:94:
                    bd:91:f8:02:97:1e:7e:5c:96:e9:4d:75:57:5d:b0:
                    80:70:86:a1:cf:0c:be:46:d7:02:c1:8f:f4:ea:18:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3D:47:10:2F:AD:F8:D4:DB:19:3A:67:CA:C1:B7:72:4E:4D:63:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dcacf28c-56a7-3a87-8228-f3dca6220c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.248.0/23
                IPv6:
                  2001:49f0:d0b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:64:68:63:a9:67:ed:97:36:05:98:62:0f:f9:45:12:5c:
         7f:c6:bd:af:15:fa:17:f5:c9:7b:0c:2d:01:48:fa:61:79:ba:
         5c:f6:81:bc:d9:39:c4:71:01:9e:32:62:98:be:be:3e:b0:32:
         b4:03:12:90:a4:51:33:b4:59:b5:1b:54:02:9c:77:ac:99:42:
         42:c8:e4:da:6e:be:4d:b3:d1:4a:a5:df:7a:cd:6e:4d:89:65:
         2e:eb:14:47:19:24:1d:3d:0a:82:b6:d7:4a:cd:81:26:41:82:
         ff:6f:6f:5b:51:64:a1:b5:16:08:f8:0e:4e:c2:85:17:ba:0f:
         23:46:2e:1b:53:3c:dc:aa:e7:2b:52:11:bd:e2:07:15:d9:d1:
         ab:27:96:4b:f9:d2:45:05:08:58:39:ff:5d:72:b9:23:cd:c5:
         f9:dc:be:72:25:fb:b3:5f:60:e7:11:31:a6:ba:d9:b3:c0:e9:
         43:70:f1:f7:62:bd:79:92:58:bb:e9:81:8f:b0:fb:01:97:24:
         4f:5d:92:62:40:ac:2c:e1:05:aa:85:71:83:6f:34:05:a4:00:
         e0:74:41:98:1f:68:c8:2f:32:34:b8:2d:bf:5a:04:fe:23:77:
         10:7d:00:e6:ca:13:65:7b:b5:1a:8c:bc:23:b8:a0:f5:29:1f:
         1f:d1:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:52:41 2026 by rpki-client