Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa
File:                     09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa (raw, json)
Hash identifier:          WzhLfskAGWcipzfj31wp0gmjQb41+AEQNiTRcPodMUM=
Subject key identifier:   B5:6E:FF:2C:F0:92:27:D3:2F:CB:9C:BE:A6:7E:3C:13:B3:7B:C6:64
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584DA6B016244F2E528951153620
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     29802
IP address blocks:        199.91.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:16:24:4f:2e:52:89:51:15:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=70ac3748-f903-499a-869c-a445304034d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:eb:dd:71:32:ca:9a:3c:a5:68:e1:62:20:
                    65:78:aa:b9:50:8c:a3:f1:2a:5a:29:99:14:2d:a9:
                    9e:04:50:b9:5f:1e:9f:f1:f8:1b:bb:6e:ee:04:21:
                    be:e0:66:70:7c:6f:1a:de:72:1c:22:96:06:1d:4d:
                    3b:55:e9:c6:53:c3:75:e8:66:69:da:cb:3c:59:c8:
                    9d:88:f0:58:32:f2:e9:fa:f4:bb:63:b4:30:ac:04:
                    af:91:1e:1b:bb:b7:bf:be:89:be:23:6f:db:d3:1e:
                    57:76:7b:9d:77:ce:b5:c4:26:d0:85:9e:d3:bd:ee:
                    ba:ee:69:0b:8b:f2:c0:db:8d:76:ff:08:c2:71:0e:
                    b5:98:aa:72:c2:5d:fd:6b:17:3c:fe:08:f5:87:32:
                    c6:16:51:84:f5:03:3e:87:8f:59:8d:ec:19:b4:51:
                    95:3f:22:6d:d4:9f:92:c0:79:d4:09:7e:b6:cc:41:
                    37:9f:11:73:87:b2:0b:86:28:57:67:3f:9b:b3:3c:
                    6a:ab:0a:72:11:ab:fa:c2:d1:ce:42:2e:65:fe:55:
                    75:4a:f5:52:73:6f:82:15:52:44:1f:df:3c:3f:d0:
                    8b:63:24:72:03:44:9a:d0:5e:d3:ee:89:17:a5:62:
                    fe:ff:d0:7e:b7:b1:5e:04:6b:60:d1:f0:08:bb:d5:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:FF:2C:F0:92:27:D3:2F:CB:9C:BE:A6:7E:3C:13:B3:7B:C6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:3e:a0:a9:08:de:28:85:69:37:05:cc:63:d2:6e:b4:c0:
         20:8f:98:cc:1f:76:02:42:3f:ee:41:aa:a4:69:b6:b9:31:ee:
         9b:6c:60:07:67:04:42:70:a9:c2:2d:5f:00:53:31:46:4a:aa:
         4d:d8:ff:d3:41:de:c9:e0:c0:33:49:2d:b8:31:3a:57:68:35:
         a5:c0:6d:f5:7b:dd:2c:1c:37:71:42:64:7b:c4:f3:cf:37:ca:
         e7:a4:3f:47:05:cb:ba:c2:d0:84:2d:18:a9:80:e3:7e:cf:58:
         de:0a:03:65:ab:c0:67:02:38:6d:15:5c:98:79:25:40:83:9c:
         d7:60:13:63:85:28:cc:00:10:76:04:40:be:ea:7e:b6:45:a9:
         72:a5:14:63:e5:5f:7c:25:84:b2:93:3a:82:c0:41:1a:05:df:
         8b:51:f4:7a:bc:47:a1:ab:77:fc:82:3c:41:dd:4f:d8:d8:70:
         53:82:e9:44:ed:77:a8:15:66:1f:86:e6:26:f6:4b:d9:7a:95:
         e8:b9:9e:e5:1d:32:42:e2:4d:a0:91:d7:d7:21:be:89:4e:ba:
         44:7b:cb:f6:82:d1:97:b5:3d:d2:85:89:f8:3b:9e:e1:dd:fc:
         27:5c:5b:f8:5b:c3:4d:1b:bb:0e:ff:95:b3:e8:ad:bf:8e:bd:
         79:28:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:00 2026 by rpki-client