Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa
File:                     35845682-94ac-38cb-ac24-db77ba9d4c9a.roa (raw, json)
Hash identifier:          dOm9/5I7KDRI7b9VxZO+R5fFa2b14GarDb0PgnRirak=
Subject key identifier:   45:20:E4:AE:18:ED:83:99:10:FF:0E:CA:ED:42:B7:F2:F2:B9:0C:FE
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E815F8E01715A8FB1A787ECC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     29802
IP address blocks:        162.252.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8e:01:71:5a:8f:b1:a7:87:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=01c7e3a2-7c5d-4d42-a82c-90c8bc317318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:78:1d:66:8a:d4:17:e5:25:c8:94:34:f5:
                    27:3b:0a:f3:95:67:a3:26:69:9b:c9:db:4b:00:72:
                    9d:90:a8:98:8c:66:99:2f:c3:3b:bc:f5:4c:a3:ac:
                    2a:a9:c4:b1:45:b7:3b:c5:37:d7:d0:1e:ed:4c:f4:
                    40:a6:79:86:01:ea:95:b8:68:55:58:40:8f:50:55:
                    17:02:cb:b6:1e:24:5e:21:56:7a:5e:5b:f3:15:4d:
                    e4:60:71:a1:c2:ed:bb:39:74:d3:31:e2:b2:e4:29:
                    51:19:71:21:dc:d2:00:1e:8d:39:8a:83:01:52:4b:
                    cb:71:a6:c2:16:23:42:d7:15:11:d5:d2:8d:5d:b6:
                    8e:64:22:b7:72:e7:41:c5:a1:7a:47:1e:8c:fb:be:
                    df:a6:40:aa:19:8a:00:cd:a0:b6:5d:2f:3f:54:29:
                    6d:57:6d:95:b3:d4:35:d0:0f:5d:cd:67:27:5e:26:
                    d3:1b:ef:ca:1f:dd:d7:5c:45:ba:1e:b4:ed:14:59:
                    1c:2f:7f:df:39:8e:33:bf:e2:e4:87:b7:99:cc:d1:
                    26:95:f0:de:c6:f7:fb:77:4d:b8:a8:37:c3:65:be:
                    20:52:b2:c0:04:66:0f:5e:23:d7:b6:78:33:f8:5d:
                    f4:0a:ed:49:c6:af:ec:6d:cb:3d:5a:e6:e9:65:cf:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:E4:AE:18:ED:83:99:10:FF:0E:CA:ED:42:B7:F2:F2:B9:0C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/35845682-94ac-38cb-ac24-db77ba9d4c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:20:e5:58:5e:06:e7:0c:fa:e1:ac:53:91:f1:1c:ff:71:69:
         31:e9:60:f1:9d:cb:d5:b4:18:07:f8:e1:49:f1:a6:31:de:ca:
         a0:b6:70:1e:93:11:08:1b:e9:e8:5c:3a:a3:f7:74:32:1d:eb:
         fe:a2:c9:4c:03:1c:f8:39:81:f7:6b:11:8f:0a:4f:c3:dc:3c:
         6a:58:79:5f:01:c4:39:f0:9a:89:c2:41:c2:fe:51:a6:e6:94:
         9e:9e:c4:5a:9b:45:72:c8:4a:aa:aa:59:d3:44:b8:6e:19:49:
         a3:6f:9e:0e:19:d4:ad:fb:50:07:fe:78:1c:77:3a:5e:43:60:
         86:e5:ea:03:7f:78:13:ca:f8:0e:28:35:70:b8:0f:c9:5f:22:
         06:2c:8e:63:58:fb:a0:21:e3:99:89:16:92:cc:de:fe:4c:bf:
         cd:ab:d9:4a:fb:db:bb:4d:bd:71:10:2f:3b:e1:12:c1:63:30:
         9f:65:b0:11:53:74:a4:cd:ba:28:89:e6:73:66:0f:4e:fc:f6:
         42:01:3b:ea:e1:71:15:d5:71:3a:6d:f9:a8:09:33:39:30:91:
         cc:16:eb:c2:0e:5a:71:ad:88:01:6a:f8:2e:a1:3c:97:16:f7:
         71:0d:3f:23:2e:5f:ac:e5:84:09:e8:fa:22:68:a8:b3:fa:13:
         4e:37:57:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX44BcVqPsaeH7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MDFjN2UzYTItN2M1ZC00ZDQyLWE4MmMtOTBjOGJjMzE3MzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXJ4HWaK1BflJciUNPUnOwrzlWejJmmbydtL
AHKdkKiYjGaZL8M7vPVMo6wqqcSxRbc7xTfX0B7tTPRApnmGAeqVuGhVWECPUFUX
Asu2HiReIVZ6XlvzFU3kYHGhwu27OXTTMeKy5ClRGXEh3NIAHo05ioMBUkvLcabC
FiNC1xUR1dKNXbaOZCK3cudBxaF6Rx6M+77fpkCqGYoAzaC2XS8/VCltV22Vs9Q1
0A9dzWcnXibTG+/KH93XXEW6HrTtFFkcL3/fOY4zv+Lkh7eZzNEmlfDexvf7d024
qDfDZb4gUrLABGYPXiPXtngz+F30Cu1Jxq/sbcs9WubpZc/wKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUg5K4Y7YOZEP8Oyu1Ct/LyuQz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzU4NDU2ODItOTRhYy0z
OGNiLWFjMjQtZGI3N2JhOWQ0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEg5VheBucM+uGsU5HxHP9xaTHpYPGdy9W0GAf44UnxpjHeyqC2cB6T
EQgb6ehcOqP3dDId6/6iyUwDHPg5gfdrEY8KT8PcPGpYeV8BxDnwmonCQcL+Uabm
lJ6exFqbRXLISqqqWdNEuG4ZSaNvng4Z1K37UAf+eBx3Ol5DYIbl6gN/eBPK+A4o
NXC4D8lfIgYsjmNY+6Ah45mJFpLM3v5Mv82r2Ur727tNvXEQLzvhEsFjMJ9lsBFT
dKTNuiiJ5nNmD0789kIBO+rhcRXVcTpt+agJMzkwkcwW68IOWnGtiAFq+C6hPJcW
93ENPyMuX6zlhAno+iJoqLP6E043V4I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:05 2026 by rpki-client