Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2dfab18e-f495-31ce-b0db-ec6df95e4d39.roa
File:                     2dfab18e-f495-31ce-b0db-ec6df95e4d39.roa (raw, json)
Hash identifier:          vM5RevoIKGJpsYksZnkWy+FgyuWulzyeehmBAFC5QQ0=
Subject key identifier:   8F:FF:60:77:69:D7:D0:E7:25:D3:F5:69:C7:0E:34:E4:E9:07:44:DD
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D237A5FD9D8138955F2C43200
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2dfab18e-f495-31ce-b0db-ec6df95e4d39.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     8100
IP address blocks:        94.72.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5f:d9:d8:13:89:55:f2:c4:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=0f7efc3e-4251-40c5-b987-e3cf977af60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:14:2c:93:53:df:ef:74:b1:4c:9a:19:9d:
                    ae:60:05:38:0b:e6:26:ce:77:14:d3:02:40:93:a4:
                    57:70:ac:8d:04:32:95:8d:3d:bb:8b:1a:a2:b1:8d:
                    c8:19:df:1a:e9:af:ca:2e:e4:b7:51:c8:32:13:33:
                    64:54:2e:c7:5d:ea:86:55:6c:77:bf:16:ca:00:f9:
                    ff:d5:09:cf:c0:0b:ce:46:05:89:5b:c2:e9:e9:a4:
                    2b:1c:66:a1:2f:c8:ba:1e:d7:fc:5c:6a:be:8a:93:
                    08:d9:4e:28:1b:8d:05:27:1e:68:72:79:a2:3f:0f:
                    6c:66:a3:28:f8:4d:27:da:1f:c8:4b:19:1f:01:bd:
                    05:ad:7e:0f:cc:4d:c5:91:69:d8:65:04:3e:25:70:
                    89:55:72:cb:ab:c3:9d:fb:6d:25:31:94:e9:22:e4:
                    53:9f:51:e6:94:3a:f6:62:54:12:25:7b:15:d1:b8:
                    bb:b5:e9:8d:64:09:41:5f:11:b2:f8:bc:23:7e:ee:
                    e2:55:65:cb:e9:8e:18:f0:d5:cf:9d:a3:59:66:b9:
                    35:8f:48:fb:72:74:ed:e3:b8:a9:15:49:0d:16:e7:
                    6b:6e:bc:e3:6e:0c:b3:23:26:22:68:e7:34:0b:a9:
                    b2:c9:0f:55:a4:da:fd:24:d5:c9:8e:2d:ab:e8:16:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:60:77:69:D7:D0:E7:25:D3:F5:69:C7:0E:34:E4:E9:07:44:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2dfab18e-f495-31ce-b0db-ec6df95e4d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:99:5d:ff:d6:68:2d:73:48:8d:a9:30:53:24:c2:4d:16:
         88:a1:9c:68:3d:69:e1:ef:62:da:8c:df:c6:25:37:11:df:f8:
         fa:05:f4:ff:3a:f3:25:85:2e:f8:8a:6b:7b:96:8e:8f:a5:e8:
         3a:ee:af:fa:81:9a:55:9e:39:8b:ab:68:3c:b8:05:98:bb:79:
         4e:cd:ea:17:f9:60:a0:43:ab:82:86:b5:98:2d:2a:f3:f3:c8:
         1c:c0:a3:64:93:ba:14:33:6c:1f:87:c5:fe:d9:7a:57:01:50:
         c4:bf:84:4f:40:24:9d:5e:15:86:ca:05:61:3a:b4:c2:8f:66:
         e6:76:66:f5:2b:1f:70:a7:27:5d:88:f1:b6:14:eb:3d:dc:47:
         2f:2d:c4:88:1b:2d:5e:5d:23:83:d7:1b:fa:85:13:87:50:5c:
         f5:b4:91:59:63:83:fa:41:f1:9c:f2:62:61:99:bd:b5:9e:47:
         1a:10:3a:d9:75:36:ec:96:ab:bc:67:0f:3c:c9:5a:98:4c:d1:
         67:1b:d7:af:b0:14:fc:47:56:91:f2:1b:8d:e3:0a:ff:ff:74:
         88:d5:56:21:2c:19:e9:01:17:0d:a1:cd:06:fe:7a:7b:af:97:
         2d:14:be:33:c2:b8:9a:76:2f:ed:2b:19:6e:36:76:af:81:64:
         8d:78:80:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jel/Z2BOJVfLEMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
MGY3ZWZjM2UtNDI1MS00MGM1LWI5ODctZTNjZjk3N2FmNjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8sULJNT3+90sUyaGZ2uYAU4C+YmzncU0wJA
k6RXcKyNBDKVjT27ixqisY3IGd8a6a/KLuS3UcgyEzNkVC7HXeqGVWx3vxbKAPn/
1QnPwAvORgWJW8Lp6aQrHGahL8i6Htf8XGq+ipMI2U4oG40FJx5ocnmiPw9sZqMo
+E0n2h/ISxkfAb0FrX4PzE3FkWnYZQQ+JXCJVXLLq8Od+20lMZTpIuRTn1HmlDr2
YlQSJXsV0bi7temNZAlBXxGy+Lwjfu7iVWXL6Y4Y8NXPnaNZZrk1j0j7cnTt47ip
FUkNFudrbrzjbgyzIyYiaOc0C6myyQ9VpNr9JNXJji2r6BYYtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI//YHdp19DnJdP1accONOTpB0TdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMmRmYWIxOGUtZjQ5NS0z
MWNlLWIwZGItZWM2ZGY5NWU0ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXki2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSKmV3/1mgtc0iNqTBTJMJNFoihnGg9aeHvYtqM38YlNxHf+PoF9P86
8yWFLviKa3uWjo+l6Drur/qBmlWeOYuraDy4BZi7eU7N6hf5YKBDq4KGtZgtKvPz
yBzAo2STuhQzbB+Hxf7ZelcBUMS/hE9AJJ1eFYbKBWE6tMKPZuZ2ZvUrH3CnJ12I
8bYU6z3cRy8txIgbLV5dI4PXG/qFE4dQXPW0kVljg/pB8ZzyYmGZvbWeRxoQOtl1
NuyWq7xnDzzJWphM0Wcb16+wFPxHVpHyG43jCv//dIjVViEsGekBFw2hzQb+enuv
ly0UvjPCuJp2L+0rGW42dq+BZI14gKE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:59 2026 by rpki-client