Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
File:                     ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa (raw, json)
Hash identifier:          PLZHGxOKqyNkGUZBLtVgY2dxrXNizsDljTyNf+dtJ1M=
Subject key identifier:   2E:09:E8:6D:D7:C6:77:9E:BF:9E:EB:CB:0C:E8:69:64:06:2C:78:18
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E815F8B1B4BAA85EE52F89B40
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     29802
IP address blocks:        66.206.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8b:1b:4b:aa:85:ee:52:f8:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=c0c647e7-bb17-42d6-b4f7-5a18f16f98c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:0e:6e:5d:18:cf:40:ed:46:bc:88:67:4d:
                    19:cb:2c:a2:63:f0:93:5b:ff:a0:3b:7b:b4:e2:a4:
                    87:18:aa:5a:77:f5:bb:1d:3c:d6:ca:31:bb:e1:3d:
                    8b:c5:0b:f1:4f:90:75:80:e7:f3:61:2d:30:5c:43:
                    34:4a:0f:d4:50:85:40:8e:9d:5a:69:e4:c4:a5:a1:
                    b2:d2:83:de:22:cf:f5:4d:2c:90:00:76:27:85:d6:
                    cb:2f:e1:0b:47:a6:3d:ab:db:d6:45:a5:d9:7a:e4:
                    94:a7:77:59:08:78:35:dc:4d:0f:cf:57:83:c6:c1:
                    02:67:ee:fe:54:63:9b:c5:a5:5f:34:e6:fc:67:dc:
                    a4:a2:39:ed:98:1e:47:ab:11:aa:7c:2a:33:30:84:
                    0b:4f:f4:77:5c:97:be:6a:63:36:8b:d8:9e:96:a8:
                    74:44:68:75:c7:80:53:a7:1e:38:28:e9:08:74:9e:
                    55:84:93:3f:dd:c2:2b:88:dd:be:49:5b:06:2a:4e:
                    29:05:e0:d3:6e:ec:93:29:25:c4:4a:88:21:a5:d0:
                    c1:28:a9:05:f5:0c:38:aa:f7:6f:17:39:b3:62:37:
                    3b:41:92:9d:04:af:52:74:b7:b1:d8:41:6d:04:e2:
                    70:8e:78:aa:78:a2:04:c5:40:08:a7:de:d0:1b:41:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:E8:6D:D7:C6:77:9E:BF:9E:EB:CB:0C:E8:69:64:06:2C:78:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:56:30:1f:a4:81:83:a4:88:51:cd:ee:b0:1f:97:aa:7a:
         da:6e:32:b6:6b:6e:46:2e:45:ed:28:4c:21:65:91:e6:a8:9e:
         8e:7f:33:27:37:d4:f3:82:a8:fa:22:25:bf:f5:92:86:39:43:
         b3:08:7a:5f:57:ba:31:26:b8:e3:8c:d7:93:08:0e:fa:fe:e2:
         0c:d6:bd:9b:47:12:f3:06:61:ec:9b:4b:cd:90:7d:04:a9:4c:
         d3:b8:30:08:56:14:a5:4e:cc:a7:eb:56:59:89:78:57:48:b2:
         f2:4f:87:28:a6:a1:6b:c0:1c:f7:23:43:c2:ad:6d:38:bc:b6:
         43:a5:3c:05:fb:40:df:27:81:8f:72:6f:67:cd:15:29:6e:d2:
         d6:f2:83:de:39:88:58:7b:10:93:d1:81:72:1d:90:b5:15:83:
         14:5b:69:c6:e5:38:ec:fc:2b:69:bd:61:e5:a5:3d:0e:e2:9d:
         49:f6:47:07:63:44:9c:0c:ba:69:56:68:26:fd:f1:30:64:c2:
         80:ed:05:a4:50:c8:21:3f:cd:5f:5e:54:24:ce:c6:d0:53:e8:
         34:d4:9c:b4:fc:7a:68:e3:53:b7:34:65:45:ad:9c:e0:21:10:
         78:a2:c9:36:41:da:c9:92:50:99:eb:68:7e:c7:d2:d6:ee:3f:
         eb:9c:f2:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX4sbS6qF7lL4m0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
YzBjNjQ3ZTctYmIxNy00MmQ2LWI0ZjctNWExOGYxNmY5OGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXkObl0Yz0DtRryIZ00ZyyyiY/CTW/+gO3u0
4qSHGKpad/W7HTzWyjG74T2LxQvxT5B1gOfzYS0wXEM0Sg/UUIVAjp1aaeTEpaGy
0oPeIs/1TSyQAHYnhdbLL+ELR6Y9q9vWRaXZeuSUp3dZCHg13E0Pz1eDxsECZ+7+
VGObxaVfNOb8Z9ykojntmB5HqxGqfCozMIQLT/R3XJe+amM2i9ielqh0RGh1x4BT
px44KOkIdJ5VhJM/3cIriN2+SVsGKk4pBeDTbuyTKSXESoghpdDBKKkF9Qw4qvdv
FzmzYjc7QZKdBK9SdLex2EFtBOJwjniqeKIExUAIp97QG0F3jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4J6G3Xxneev57rywzoaWQGLHgYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYWM0OGVhMjItM2M1YS0z
YjQzLWE0MmItN2JiN2QxZThmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQs4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnhVjAfpIGDpIhRze6wH5eqetpuMrZrbkYuRe0oTCFlkeaono5/Myc3
1POCqPoiJb/1koY5Q7MIel9XujEmuOOM15MIDvr+4gzWvZtHEvMGYeybS82QfQSp
TNO4MAhWFKVOzKfrVlmJeFdIsvJPhyimoWvAHPcjQ8KtbTi8tkOlPAX7QN8ngY9y
b2fNFSlu0tbyg945iFh7EJPRgXIdkLUVgxRbacblOOz8K2m9YeWlPQ7inUn2Rwdj
RJwMumlWaCb98TBkwoDtBaRQyCE/zV9eVCTOxtBT6DTUnLT8emjjU7c0ZUWtnOAh
EHiiyTZB2smSUJnraH7H0tbuP+uc8jo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:01 2026 by rpki-client