Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa
File:                     50ea20c8-093a-3fe4-83f4-d17728e47031.roa (raw, json)
Hash identifier:          Ru/2xT79F6lRpOCjppIBriAXO1+VCLxRYAQcauzzrGA=
Subject key identifier:   7D:79:50:1E:E9:D4:88:16:8A:A7:70:2D:9F:7E:BE:FA:A6:BE:63:F5
Certificate issuer:       /CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e
Certificate serial:       010D0C9F4328584D95EFF6B5A37AD294A1A0D180
Authority key identifier: 4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     395254
IP address blocks:        199.9.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f6:b5:a3:7a:d2:94:a1:a0:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=9c7ca9f6-d3ab-4d00-b221-dbda28778bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bd:c9:52:43:8b:d3:8f:49:4d:4d:93:56:2b:
                    f3:3f:53:bf:c1:c1:b0:e9:e5:3f:22:d9:f3:e4:b5:
                    59:3a:4d:9c:b9:d4:e5:b9:75:c4:e4:88:93:d6:c2:
                    d3:b8:31:92:f0:0f:fa:77:27:73:95:9e:af:59:73:
                    48:d7:1e:a9:0b:c2:d3:98:ca:12:0d:a4:92:94:66:
                    12:bf:5e:81:2f:81:1b:7d:e3:cf:12:e7:f1:c5:19:
                    21:d7:a3:a6:e6:01:50:dc:7a:7d:2b:26:9b:11:e2:
                    44:77:34:af:1b:12:3c:06:14:27:cb:38:c1:6a:5e:
                    e7:66:be:30:f5:2b:69:32:37:02:c1:8f:3a:46:18:
                    c0:37:d6:ff:8a:94:ef:ed:a0:87:d6:cf:f5:56:67:
                    3f:9c:13:cf:35:98:36:fc:ca:44:4e:c6:94:8a:e8:
                    32:a2:47:d1:84:cb:e1:53:d5:54:a2:2d:96:82:0d:
                    5d:06:0f:97:15:f1:45:e9:b6:15:e2:3c:ee:4d:81:
                    7d:27:d7:d7:fd:ec:15:6e:cd:2c:b7:9a:fb:98:41:
                    23:13:16:3f:3a:67:79:a4:34:6a:dd:f8:53:f8:05:
                    8c:a4:ac:f2:44:42:54:82:3f:bd:af:c0:be:84:30:
                    e4:6d:35:52:47:76:d1:00:34:35:c6:63:65:86:00:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:50:1E:E9:D4:88:16:8A:A7:70:2D:9F:7E:BE:FA:A6:BE:63:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.9.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:51:ff:68:de:0e:5f:e0:4b:d1:60:03:95:b6:ac:99:cc:09:
         ad:b5:00:2c:aa:67:7a:a8:ef:bc:2e:30:d2:89:90:5e:5f:73:
         a7:4d:db:16:b2:49:0d:6c:9e:50:65:15:a6:0f:89:75:98:ec:
         35:3a:fc:68:27:4b:f0:9c:89:de:0e:ae:49:ce:41:39:6a:96:
         7c:2f:55:0e:01:15:45:68:ee:22:78:bf:83:6a:08:eb:15:28:
         03:63:a8:94:00:ff:c0:01:03:82:6f:8e:65:d8:fa:52:ed:75:
         16:e6:d3:e4:83:93:f9:0f:9d:fe:12:90:bd:cb:13:1a:ba:79:
         06:a6:dd:1f:76:b7:61:dc:6d:ee:d9:13:11:ea:29:61:5d:e9:
         1e:3e:31:5e:37:90:48:08:a7:3d:51:db:b6:60:0b:bb:57:b9:
         1f:9f:48:0c:7e:41:f1:5c:ae:49:8c:73:5d:1c:c2:27:2b:4b:
         5e:6b:79:71:e9:31:19:fd:fd:75:b1:8c:61:fc:03:7b:d1:71:
         b9:d8:88:c3:54:16:ec:34:0a:00:97:78:ff:8d:4d:87:9d:e0:
         78:a0:fb:a3:b7:03:6e:1c:e0:e4:92:50:6a:f5:d0:ed:a6:d8:
         e2:38:19:99:80:0c:8f:a4:f7:82:b5:73:07:cc:fd:01:fa:d7:
         82:5d:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:59 2026 by rpki-client