Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
File:                     50e38687-6764-3cf4-b44b-0f3741733f81.roa (raw, json)
Hash identifier:          RsXtTlUFq6aV1dTWPK9OtXoF0ZJ4MQ0c8ccboiH3yPk=
Subject key identifier:   FF:1E:A2:41:6D:A4:7E:DB:40:E9:DF:00:54:41:58:02:B2:4D:A1:00
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584E7BCA2EBC18B107377F6C8100
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     200288
IP address blocks:        69.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2e:bc:18:b1:07:37:7f:6c:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=543b94ba-63a8-4cc6-9e71-f71d7f100065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:07:13:51:cb:dd:d9:39:77:63:d0:ab:95:
                    79:53:9c:fa:7c:0f:61:0e:d4:87:7c:e8:5e:d0:a9:
                    35:e7:53:24:e4:48:5f:63:98:c5:ad:ad:8b:c4:b7:
                    d8:c3:24:63:72:00:81:be:a3:64:f0:94:f9:d7:a4:
                    43:f0:06:ca:58:41:10:56:a7:8f:cc:04:97:58:fe:
                    c7:b6:ef:30:f4:8c:5c:42:ff:15:a3:b5:95:d3:08:
                    97:0b:24:df:4b:3c:8b:99:30:b0:ea:7f:7d:1e:56:
                    16:95:b7:eb:04:b4:a1:0b:f5:4a:f4:ab:7e:6f:2c:
                    32:b6:32:87:b7:c8:69:76:3a:fe:04:40:be:78:65:
                    91:9e:ee:a8:4e:90:df:06:67:a7:44:43:ca:6c:ef:
                    f8:4d:3c:e1:b0:1c:cc:5f:f9:ee:d7:48:40:9a:a2:
                    c0:de:2e:f7:29:fa:00:61:60:cc:bb:12:99:7f:12:
                    ee:84:ea:0c:a0:dc:b1:42:43:ef:07:31:cd:79:e7:
                    ce:39:3e:4f:a2:2e:1c:fe:29:a8:68:53:6c:27:51:
                    c0:56:44:e6:41:da:80:9f:bc:84:16:43:93:e6:87:
                    69:8f:d8:30:d9:98:9c:24:22:36:f2:81:37:16:be:
                    00:b8:5f:13:14:70:52:6d:ed:e5:77:09:28:cf:44:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:A2:41:6D:A4:7E:DB:40:E9:DF:00:54:41:58:02:B2:4D:A1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:80:19:d3:d1:68:77:9b:dd:a1:8b:80:f9:f3:6b:f6:c6:
         57:d8:75:fb:17:bd:80:e8:5a:c0:0f:39:5d:11:9c:6c:f8:50:
         ee:64:87:40:78:dc:0c:90:32:df:68:7b:6e:5e:e6:36:df:43:
         6f:d0:23:37:f1:85:3f:e4:91:5c:0f:19:59:17:e8:62:73:30:
         d6:6b:71:e9:8d:96:13:48:54:9f:a6:05:34:b9:9c:ed:ac:7e:
         5d:14:8a:a3:11:23:dd:91:d3:c5:fd:f9:01:bd:f2:85:03:1b:
         c0:ec:3e:ab:a4:78:8d:73:2e:e5:b9:29:4d:e6:56:6d:61:06:
         82:14:17:2c:57:c2:2e:d9:2a:26:e9:2b:f6:ef:e0:36:15:22:
         dc:59:4b:3e:a9:64:99:1f:18:0b:9b:54:9f:f0:7a:bb:95:24:
         6d:d7:92:6c:60:d6:96:b5:cb:fc:ca:04:89:5b:15:00:62:af:
         19:bd:67:87:c6:5d:7c:e9:a5:22:39:ac:71:bd:95:41:d0:66:
         a4:38:68:26:aa:64:da:60:b3:6c:f0:d5:56:53:c0:c0:1b:3a:
         f1:49:fb:50:63:e9:46:44:59:b6:c0:18:d5:c5:92:6c:17:2d:
         f7:52:53:a5:38:05:b9:28:d6:54:b6:ae:c3:30:d6:db:3f:f2:
         9e:48:1f:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yi68GLEHN39sgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
NTQzYjk0YmEtNjNhOC00Y2M2LTllNzEtZjcxZDdmMTAwMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u4HE1HL3dk5d2PQq5V5U5z6fA9hDtSHfOhe
0Kk151Mk5EhfY5jFra2LxLfYwyRjcgCBvqNk8JT516RD8AbKWEEQVqePzASXWP7H
tu8w9IxcQv8Vo7WV0wiXCyTfSzyLmTCw6n99HlYWlbfrBLShC/VK9Kt+bywytjKH
t8hpdjr+BEC+eGWRnu6oTpDfBmenREPKbO/4TTzhsBzMX/nu10hAmqLA3i73KfoA
YWDMuxKZfxLuhOoMoNyxQkPvBzHNeefOOT5Poi4c/imoaFNsJ1HAVkTmQdqAn7yE
FkOT5odpj9gw2ZicJCI28oE3Fr4AuF8TFHBSbe3ldwkoz0RacQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8eokFtpH7bQOnfAFRBWAKyTaEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvNTBlMzg2ODctNjc2NC0z
Y2Y0LWI0NGItMGYzNzQxNzMzZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXmgBnT0Wh3m92hi4D582v2xlfYdfsXvYDoWsAPOV0RnGz4UO5kh0B4
3AyQMt9oe25e5jbfQ2/QIzfxhT/kkVwPGVkX6GJzMNZrcemNlhNIVJ+mBTS5nO2s
fl0UiqMRI92R08X9+QG98oUDG8DsPqukeI1zLuW5KU3mVm1hBoIUFyxXwi7ZKibp
K/bv4DYVItxZSz6pZJkfGAubVJ/weruVJG3Xkmxg1pa1y/zKBIlbFQBirxm9Z4fG
XXzppSI5rHG9lUHQZqQ4aCaqZNpgs2zw1VZTwMAbOvFJ+1Bj6UZEWbbAGNXFkmwX
LfdSU6U4Bbko1lS2rsMw1ts/8p5IH3w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:36 2026 by rpki-client