Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa
File:                     1685097c-739f-30c4-ac24-25042f3a3fc2.roa (raw, json)
Hash identifier:          EU7GcQohdOiA73PMOBIC2KxGtGLoYODzX3SOL9t0eco=
Subject key identifier:   C3:5A:31:B2:A6:6E:C9:95:3D:67:06:32:30:81:76:73:61:45:51:62
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584ED9C7599C425B47ADB8F89300
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     400754
IP address blocks:        50.62.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:59:9c:42:5b:47:ad:b8:f8:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=6a45db52-8ee8-4ec6-9140-e9fef10e025a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:09:32:f5:8a:8a:d9:56:86:75:3e:97:06:
                    66:a0:0b:44:d4:bc:cc:ab:8c:16:df:bd:dd:76:3e:
                    0e:22:16:7b:65:f2:64:c8:ea:f3:2d:6f:cb:98:e3:
                    b3:d0:f2:6e:32:8f:99:df:11:20:79:08:98:14:d4:
                    6c:bb:0e:91:59:20:1b:c4:ab:ec:79:c2:41:23:dc:
                    8b:1d:53:60:29:da:98:e0:bf:3d:13:e6:c7:b1:2c:
                    a5:ee:0e:78:50:21:de:4c:dd:96:f0:3f:fd:cd:76:
                    a2:1c:f6:92:de:15:87:7a:af:11:37:b8:a3:61:c5:
                    d6:e2:0e:88:fa:3e:67:78:4d:5a:aa:4c:0a:33:15:
                    15:79:02:5c:38:94:a1:d2:f9:8a:12:e0:0c:7f:75:
                    60:fe:a2:69:ee:65:c6:b0:df:4f:cb:c4:3c:79:dd:
                    d8:8f:b4:0a:68:8a:f1:45:c5:90:cd:fe:e5:63:d8:
                    fe:dc:99:8c:90:10:18:8d:59:4a:79:53:78:9c:20:
                    c5:db:9a:7c:9c:7a:14:23:90:47:15:09:bb:19:91:
                    5a:79:b1:f4:14:e5:e2:bf:44:9d:68:0a:ed:fe:d0:
                    8c:b7:aa:12:ad:70:9d:a6:cb:9c:2f:3e:21:07:02:
                    fa:5f:be:7f:24:f1:54:6e:ef:49:ab:c8:22:6a:fc:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5A:31:B2:A6:6E:C9:95:3D:67:06:32:30:81:76:73:61:45:51:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:8c:38:72:5c:c5:bf:36:0d:03:1c:af:4c:fd:76:70:81:
         49:1d:f1:77:d4:f3:22:b4:8b:5f:37:e4:d2:9c:1a:eb:0a:21:
         64:f7:41:93:89:c8:31:d3:a2:08:55:b7:81:3d:05:f8:9f:a8:
         99:ff:c5:02:2d:f8:e3:de:76:4b:aa:4d:53:57:78:44:de:81:
         ed:76:8a:f0:ca:a5:42:b6:c3:29:24:0c:f2:37:d1:0e:21:2b:
         13:04:c7:af:bb:db:9f:c2:1d:94:65:4b:89:2f:38:b7:e7:10:
         be:bb:a1:60:01:23:bd:38:47:17:05:89:5a:4d:05:e3:4d:7f:
         20:a2:84:fa:c7:a0:74:be:e7:35:a0:6f:50:05:35:df:0f:26:
         ed:46:5a:76:ef:10:12:68:d4:77:fb:e1:65:aa:d2:37:98:9e:
         eb:a8:e4:6f:c4:a3:aa:d4:48:fd:ee:e9:ee:52:ff:e0:63:74:
         b9:41:0b:7e:ee:fa:7e:4f:39:9f:3e:7a:7f:27:a9:1f:ff:ae:
         7f:eb:fc:76:2b:20:55:4f:7e:85:fb:2a:45:60:03:ea:13:58:
         64:87:f6:fd:aa:71:53:a6:a7:13:31:42:83:24:8f:c6:c2:d2:
         35:21:dd:85:49:68:34:83:0b:a0:17:b1:4e:45:ed:28:fd:e7:
         05:0b:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:22:58 2026 by rpki-client