Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa
File:                     34f32e5b-41b8-3f88-a0fd-599b96182977.roa (raw, json)
Hash identifier:          VX2s8O1FC+E3EVqPpieq7YB5vKYplKWgSWoCji5QBrM=
Subject key identifier:   82:D0:25:52:E5:21:6A:FC:97:AC:65:02:AF:A7:13:BD:C5:FA:0E:EC
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F497375CECCF2D93AC673B7E0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     61317
IP address blocks:        206.51.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:75:ce:cc:f2:d9:3a:c6:73:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=838e2cf2-8f81-4762-a622-1934ad82efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:6a:2c:1d:86:3d:99:42:ae:03:7c:36:4e:
                    d7:2a:b7:09:90:d9:12:02:92:d7:0f:29:b1:37:65:
                    4d:bc:d0:f4:22:e5:b0:27:cb:19:f1:25:0f:df:b9:
                    61:97:6c:24:8b:8c:75:01:ea:98:20:ae:56:01:bf:
                    2d:24:1a:dd:bb:61:3e:d6:b9:2c:03:69:06:40:69:
                    a7:5e:37:b9:b6:90:42:00:7a:d3:12:f0:3f:b7:68:
                    d2:4b:d9:15:65:21:5f:26:76:bf:1e:a2:fc:1f:bd:
                    b7:01:dc:1a:d0:5a:13:fc:c8:0b:16:bd:05:11:a0:
                    e9:1c:f6:e1:c2:3f:8a:58:5c:26:27:78:e0:bc:7f:
                    90:ce:57:ae:b9:06:e8:2b:39:c3:c1:d1:99:21:fb:
                    10:51:5a:1a:70:f6:bf:94:41:94:47:03:c7:55:3f:
                    e6:a8:54:16:ac:47:e7:7d:d2:38:8a:49:6b:22:f8:
                    e8:fa:4d:c5:f5:b1:29:fe:37:fe:52:21:04:11:1c:
                    e9:41:22:c5:d8:e8:1c:54:b1:03:d5:17:71:e2:69:
                    8b:84:41:b6:6a:96:2c:cc:db:c6:72:10:00:76:36:
                    fd:a3:0e:5a:de:bc:07:0f:0e:9d:38:63:90:f1:ca:
                    73:e2:77:b2:cc:59:4d:6b:a4:01:32:d2:06:22:4b:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:25:52:E5:21:6A:FC:97:AC:65:02:AF:A7:13:BD:C5:FA:0E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:ef:10:f0:39:d6:23:44:36:66:1f:e5:db:81:bb:12:4e:
         c6:ce:c8:c5:81:2b:92:21:eb:fc:1a:b3:eb:14:1a:b8:1d:dc:
         dd:d3:32:bf:4a:f0:c1:f5:9a:c2:2f:b9:06:59:71:6e:9b:2c:
         10:55:7e:43:a8:b3:ec:9d:27:27:b9:6c:f4:f6:9a:ba:cf:7a:
         8b:95:8e:69:41:c2:8a:b4:80:98:3c:3a:dd:be:de:85:44:d3:
         55:29:b6:dc:70:fd:03:c4:92:ee:6d:7b:a4:91:a0:a4:7c:46:
         1e:60:69:0f:7f:e3:16:d4:09:53:fb:23:26:9b:cf:78:22:bb:
         42:ab:60:b2:a8:2e:ea:f1:13:b0:fa:39:14:c3:dd:55:02:07:
         17:e4:b1:9d:c9:72:fe:1f:bb:8a:34:af:c8:16:37:68:ed:33:
         23:9b:a3:4c:bc:c5:a9:fd:47:49:7a:0f:0a:a7:74:15:d2:a3:
         cc:a3:dd:17:89:a2:03:0b:97:e9:d2:16:b5:23:d9:ab:f9:47:
         a0:ae:d9:55:5f:42:c1:78:a5:70:a9:2c:9d:49:23:eb:2b:80:
         b6:46:c1:09:18:74:12:02:f0:1c:e2:3e:72:64:67:d4:af:d7:
         ad:ea:10:a4:53:5d:8e:c8:c5:f4:57:6e:78:af:ea:ed:d0:0f:
         a7:92:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:42:58 2026 by rpki-client