Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c7bc4c97-c1ab-30c9-b959-0daf1df77707.roa
File:                     c7bc4c97-c1ab-30c9-b959-0daf1df77707.roa (raw, json)
Hash identifier:          eKsebLWEZ3gJBCuhNX8K9F2GsepAsX+WvTxWNmyRcEc=
Subject key identifier:   FA:C1:B3:1A:D2:64:51:81:05:AE:FE:A8:E5:59:42:E9:F7:2C:BA:3C
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E7E94E61520A6A96061483000
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c7bc4c97-c1ab-30c9-b959-0daf1df77707.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     29802
IP address blocks:        74.50.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e6:15:20:a6:a9:60:61:48:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=df2ebb5e-e4ab-4b08-80d1-678755c7fd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:dd:77:b7:73:e6:0f:b9:9c:f3:4c:03:1d:
                    f6:5f:b5:aa:43:e0:3a:ff:2f:ba:c5:2b:e4:ab:2f:
                    02:a7:fc:9e:ce:fe:1e:f3:b8:98:76:ea:d3:36:d5:
                    2f:4d:40:dd:ab:19:db:44:12:25:5f:16:3f:16:9e:
                    da:19:c2:65:fc:6f:3e:63:57:26:26:7e:10:9f:06:
                    94:97:00:d7:70:7f:cd:53:04:4c:51:bb:66:2f:7d:
                    ab:c2:1e:aa:5a:ac:58:59:02:7d:ac:48:3d:c3:c4:
                    7c:dc:a5:e6:79:b8:35:a9:ca:a5:14:46:f3:65:06:
                    d7:18:46:33:bc:74:bf:81:7c:e6:c1:51:9a:1b:26:
                    1c:85:0f:00:76:6f:46:9b:6a:d6:d8:af:a7:7a:52:
                    89:14:9a:17:79:05:62:96:97:39:11:08:4a:85:cf:
                    0a:b8:26:04:47:5e:9c:68:99:9c:b9:2c:44:79:d2:
                    5a:4e:2c:96:88:56:8a:b7:4d:da:96:5c:ce:b5:d6:
                    f9:f8:c2:f5:27:6d:46:0e:6b:e6:56:c0:7a:a8:f5:
                    09:a8:d1:21:b8:12:89:32:fa:44:7d:ad:ce:21:c2:
                    81:51:47:c3:6d:8e:e8:17:d1:09:4f:48:40:4a:5c:
                    fc:2b:cb:ce:fa:19:74:2d:46:63:b0:77:a6:f1:ba:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:B3:1A:D2:64:51:81:05:AE:FE:A8:E5:59:42:E9:F7:2C:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c7bc4c97-c1ab-30c9-b959-0daf1df77707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:26:a6:16:14:eb:0d:53:50:82:1e:42:d1:07:92:8f:e9:
         e4:35:c7:76:21:ff:51:33:26:b9:50:1f:2d:0a:36:61:37:d3:
         20:54:2b:48:d1:76:2c:dd:19:1d:dd:e7:7c:ca:79:da:05:6b:
         e6:ae:0c:5b:5b:08:05:09:15:b1:37:1f:49:d6:d8:1e:e1:62:
         d4:dc:76:bf:56:24:f0:ae:ce:76:d7:6a:ae:37:3d:1f:2a:63:
         dc:e7:76:aa:f6:30:94:ff:ae:17:d4:c9:c4:5b:55:e9:3b:92:
         83:00:b0:d8:14:1c:74:62:7e:71:9f:21:bd:19:e2:a9:06:b9:
         12:50:d6:1f:ee:ef:3c:fb:85:90:37:ac:d5:b4:c1:f6:94:62:
         ce:9d:0f:29:57:74:e6:0c:07:97:5c:65:bd:2d:db:c3:a5:4a:
         cf:93:5c:34:0d:b9:e7:f3:ce:ae:98:5b:b4:ad:48:c8:15:44:
         e6:c5:60:d4:54:ce:b8:9f:44:30:6e:54:ab:20:2a:fc:e7:79:
         6d:ce:5c:a7:97:71:f1:50:4b:c9:09:c1:63:ff:4b:f6:09:1a:
         ac:34:ab:81:3d:5f:88:cd:df:30:9f:c1:53:58:33:38:5c:e7:
         5a:d6:a4:60:77:58:5d:b0:3c:7c:4d:cb:c2:48:df:57:cb:41:
         00:be:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:01 2026 by rpki-client