Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/93c2548d-4965-3d07-957a-e38a3d812762.roa
File:                     93c2548d-4965-3d07-957a-e38a3d812762.roa (raw, json)
Hash identifier:          7MsQBb2d+kPv1lMRXJCpQiT4KrGofSpeNpGyEUylTWE=
Subject key identifier:   F7:0A:47:CD:7D:D2:21:FE:F8:85:75:E1:21:71:C0:27:F0:67:58:84
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E7FFA333D36FEA7CCFACE5570
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/93c2548d-4965-3d07-957a-e38a3d812762.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     29802
IP address blocks:        91.191.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:33:3d:36:fe:a7:cc:fa:ce:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=835ce307-4e3f-44c9-94ae-24c40ea2e6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:98:48:1a:ba:9c:18:fa:58:73:ee:9a:32:
                    b5:b6:63:f6:c2:5f:15:70:4c:b6:05:d3:71:5f:e1:
                    61:19:46:59:d4:1b:a7:c1:c2:af:b3:e5:3a:68:fd:
                    1d:c2:ee:3a:a4:33:6e:c2:b7:d9:9a:37:ce:67:25:
                    9a:dc:35:7b:43:22:1f:33:93:32:10:d6:c6:19:6e:
                    b3:4a:6a:49:a1:5a:25:3f:f2:82:c3:39:85:3b:70:
                    76:a3:7d:ed:b8:6b:80:3f:da:1f:96:16:98:e8:34:
                    a9:79:50:b6:e4:6b:7d:b6:bb:2f:65:15:59:93:68:
                    a7:29:58:fb:13:0a:8e:30:76:67:de:eb:f5:19:5e:
                    64:d3:1b:5e:74:0b:f8:05:66:36:54:77:75:77:2f:
                    71:60:56:70:a2:79:fc:86:13:aa:9f:e1:50:43:e3:
                    4c:b6:d9:b2:9c:6b:95:38:7a:23:18:67:30:00:af:
                    63:82:f5:55:33:36:ad:22:b0:ab:99:2e:de:05:3a:
                    36:d6:4c:37:44:0a:63:1d:11:0d:d7:73:65:59:a0:
                    11:f2:2a:07:85:fd:c9:88:3d:9c:8a:c1:ff:5e:12:
                    9f:d5:e0:b3:a2:c1:cc:2a:89:46:9f:35:4a:7c:46:
                    2d:29:b5:8f:43:a1:21:eb:01:20:34:3d:ff:c9:d9:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0A:47:CD:7D:D2:21:FE:F8:85:75:E1:21:71:C0:27:F0:67:58:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/93c2548d-4965-3d07-957a-e38a3d812762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:33:98:ac:d3:93:51:70:3c:8b:ac:31:24:5c:a5:5d:ba:
         fa:46:be:b3:0c:0e:f9:f9:58:b6:5b:49:f2:42:c8:81:a2:ce:
         d5:52:25:4f:77:d2:0d:96:f6:6f:81:67:ba:91:13:22:21:fe:
         81:77:06:86:a0:81:0c:10:22:05:d5:26:e4:77:0b:52:04:5b:
         ac:89:e0:c3:a0:78:76:12:2f:51:6a:03:7d:51:10:4e:0d:a3:
         d4:11:7d:00:b0:7a:8c:2f:cc:18:86:f1:fe:36:4a:7f:fc:28:
         c6:09:82:91:57:d5:b7:1e:de:28:62:09:22:2f:73:5c:36:9b:
         e3:75:e6:10:b4:e4:29:67:02:19:cd:63:50:14:27:81:67:31:
         6c:96:f1:a0:b8:8f:2a:f8:4a:f9:6e:3c:53:45:33:c1:2b:62:
         58:0a:51:9d:b1:7c:37:47:46:80:a3:5d:45:45:c9:3f:b6:8a:
         e0:2a:9a:4d:93:dd:66:53:38:a1:8c:bf:4f:ac:79:45:ad:71:
         45:e6:2c:ff:d4:a9:0f:1b:3c:b3:3d:05:5d:e4:37:62:e0:f0:
         e2:7a:51:98:19:9c:43:18:1b:8e:df:33:2b:75:d1:4c:2c:50:
         2f:f3:f6:43:60:01:d8:b0:a5:84:2b:d9:22:3b:bd:2e:25:ad:
         86:3f:05:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jM9Nv6nzPrOVXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ODM1Y2UzMDctNGUzZi00NGM5LTk0YWUtMjRjNDBlYTJlNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAuYSBq6nBj6WHPumjK1tmP2wl8VcEy2BdNx
X+FhGUZZ1BunwcKvs+U6aP0dwu46pDNuwrfZmjfOZyWa3DV7QyIfM5MyENbGGW6z
SmpJoVolP/KCwzmFO3B2o33tuGuAP9oflhaY6DSpeVC25Gt9trsvZRVZk2inKVj7
EwqOMHZn3uv1GV5k0xtedAv4BWY2VHd1dy9xYFZwonn8hhOqn+FQQ+NMttmynGuV
OHojGGcwAK9jgvVVMzatIrCrmS7eBTo21kw3RApjHREN13NlWaAR8ioHhf3JiD2c
isH/XhKf1eCzosHMKolGnzVKfEYtKbWPQ6Eh6wEgND3/ydn6qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcKR8190iH++IV14SFxwCfwZ1iEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTNjMjU0OGQtNDk2NS0z
ZDA3LTk1N2EtZTM4YTNkODEyNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGG9M5is05NRcDyLrDEkXKVduvpGvrMMDvn5WLZbSfJCyIGiztVSJU93
0g2W9m+BZ7qREyIh/oF3BoaggQwQIgXVJuR3C1IEW6yJ4MOgeHYSL1FqA31REE4N
o9QRfQCweowvzBiG8f42Sn/8KMYJgpFX1bce3ihiCSIvc1w2m+N15hC05ClnAhnN
Y1AUJ4FnMWyW8aC4jyr4SvluPFNFM8ErYlgKUZ2xfDdHRoCjXUVFyT+2iuAqmk2T
3WZTOKGMv0+seUWtcUXmLP/UqQ8bPLM9BV3kN2Lg8OJ6UZgZnEMYG47fMyt10Uws
UC/z9kNgAdiwpYQr2SI7vS4lrYY/BcA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:22 2026 by rpki-client