Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e35d3db4-3c22-367b-884d-6ad5f9feda17.roa
File:                     e35d3db4-3c22-367b-884d-6ad5f9feda17.roa (raw, json)
Hash identifier:          6LjJc7jdyhN8FLbLDuKuZ3IyCQTJZWRaUHhXzVOBvuc=
Subject key identifier:   69:4A:A6:09:58:F3:38:7D:2E:8E:AE:30:AF:26:0A:8E:70:EB:7C:3F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F27F25E47C52D3D8A868DC6A4
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e35d3db4-3c22-367b-884d-6ad5f9feda17.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        50.30.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:5e:47:c5:2d:3d:8a:86:8d:c6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=777faa76-f242-403a-b1fd-cdf04e415fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:0e:5c:e7:78:c1:96:06:28:1d:b2:43:92:
                    f9:15:2e:5c:0c:c8:3e:86:a7:a7:ea:e6:27:91:f5:
                    36:8c:a5:31:b9:0c:82:c2:3a:0d:d6:a5:66:99:5a:
                    b6:6c:7d:07:90:63:24:65:c2:69:3d:fd:24:88:09:
                    5d:76:71:5b:f1:3f:b8:a0:81:3d:bc:12:77:7c:79:
                    87:7a:9b:83:a8:71:bc:0c:08:3f:96:fc:42:87:34:
                    11:79:a0:07:99:35:c0:11:bf:91:08:3d:a8:9a:79:
                    93:1a:c7:c7:c9:ab:1d:50:7b:a3:72:9b:2b:51:60:
                    c9:c3:0c:20:24:e6:4d:6f:09:96:8c:da:1e:dd:ca:
                    dd:64:1d:0c:fe:54:cb:b5:d4:a9:13:e0:e8:2b:f9:
                    f3:64:d7:de:ae:21:e2:2d:6b:3f:ec:12:26:81:60:
                    f2:a4:ae:f2:96:a1:2f:12:07:f2:35:7e:e7:0d:53:
                    0d:67:69:56:e7:f5:d2:18:ee:a1:9c:dc:fe:27:d6:
                    06:9e:5e:2f:86:4c:88:55:51:10:59:1c:c3:01:c0:
                    b2:05:ea:8a:e7:c2:7a:dd:b5:ba:eb:7d:fb:a0:0e:
                    42:d0:e5:6c:23:06:65:4c:d5:e4:fb:59:a7:a5:31:
                    d4:41:68:eb:23:b4:3d:cf:75:93:49:66:bb:c9:9a:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4A:A6:09:58:F3:38:7D:2E:8E:AE:30:AF:26:0A:8E:70:EB:7C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e35d3db4-3c22-367b-884d-6ad5f9feda17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:28:e3:f2:e7:a1:52:a1:20:43:cd:10:3d:ad:11:9c:6c:25:
         26:85:8f:a3:4f:0f:5d:aa:93:13:b3:6b:0c:c1:df:71:4d:d8:
         4a:7c:dc:7d:ce:8d:37:23:bc:ca:78:79:78:36:a7:47:55:7c:
         0a:99:4e:d8:8a:ca:21:cf:41:d1:65:d3:34:a2:68:98:2d:45:
         5c:3f:ab:10:9a:18:15:eb:68:27:70:dd:30:0f:78:f7:b8:75:
         de:fd:cd:7b:75:4c:41:51:1a:04:3b:75:ad:0b:29:61:d2:5e:
         7e:07:66:9e:1e:0d:63:e1:64:31:21:9f:dd:de:38:ef:da:b4:
         6b:1c:f4:a2:a7:d8:40:07:d6:4f:e2:56:07:b5:fc:c6:47:ed:
         af:46:f1:15:66:1a:7e:22:dc:b0:db:fb:81:b8:26:82:5c:4c:
         a7:e0:95:0b:4e:ee:8c:27:fd:cc:95:48:03:85:d3:f3:31:8a:
         02:d3:7a:e7:9b:1c:b4:c2:7b:bc:4d:d6:47:d0:09:3d:dd:16:
         66:73:1b:c7:ac:a2:16:89:aa:9b:d6:00:a7:33:5e:15:89:01:
         e8:78:29:fb:e7:f1:e0:58:fe:cc:e0:bb:48:a4:af:9e:61:ff:
         54:d5:8c:d2:09:4f:93:7a:40:b6:a9:94:2a:27:84:4b:36:84:
         63:74:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:52:13 2026 by rpki-client