Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/99641aef-1299-396e-9468-dc7ff8a1351d.roa
File:                     99641aef-1299-396e-9468-dc7ff8a1351d.roa (raw, json)
Hash identifier:          e1gLz2u4YfsUbnqQU3a66Pv8zIvjhRtMYur8VD66oIQ=
Subject key identifier:   B4:6F:DE:28:93:6E:50:CF:C4:EA:C6:67:3D:AC:AF:F1:C6:2E:4C:EA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E9A7FC5F3A92AC7DD81D31140
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/99641aef-1299-396e-9468-dc7ff8a1351d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        50.2.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c5:f3:a9:2a:c7:dd:81:d3:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=1defac66-81aa-433d-904c-03c9a49fba6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:fe:24:76:1f:38:30:76:16:d6:b9:6b:c6:
                    e9:82:9b:db:51:5e:13:22:14:f2:6c:44:c1:0e:b0:
                    cd:61:d7:ad:05:a7:e1:3f:f3:4f:be:d3:9f:1f:50:
                    bb:b0:02:45:6b:22:c9:82:ff:84:f9:af:9a:1c:6b:
                    6a:1b:44:30:86:c7:4b:88:d6:7d:2b:71:41:ca:a3:
                    a3:46:b1:92:54:3d:13:4a:d7:fc:3b:5d:b6:cd:81:
                    51:fd:0b:57:29:90:5f:13:b8:4d:9a:e2:ca:d6:3c:
                    7d:01:9e:e6:e5:ac:a4:da:6b:d5:b0:9a:0f:d0:a1:
                    fe:5c:d3:c5:e6:d2:38:c8:d7:13:10:ab:ad:89:98:
                    80:4c:c7:a4:bf:20:43:24:b1:ae:5e:37:ff:3d:c5:
                    53:6a:7f:c0:44:82:2f:e1:b4:fc:54:6a:13:11:3b:
                    33:7d:8d:84:d2:ba:5d:2d:a7:7f:7e:58:ef:90:2f:
                    6d:51:0b:25:a4:f1:76:45:95:b2:d0:4e:62:f6:7a:
                    c5:6b:8c:52:2b:30:ca:ac:40:7c:f8:fb:68:35:44:
                    3d:2d:ff:b5:a4:bf:c2:97:d1:bb:1d:07:3c:14:48:
                    08:0d:90:c1:80:18:67:f5:cd:54:a0:33:f9:48:a4:
                    34:8b:b1:8d:8b:6e:a6:81:be:98:d3:1c:89:c7:a5:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:DE:28:93:6E:50:CF:C4:EA:C6:67:3D:AC:AF:F1:C6:2E:4C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/99641aef-1299-396e-9468-dc7ff8a1351d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:08:49:51:26:e6:86:08:ab:ce:12:b9:30:5c:0c:69:c7:0b:
         d2:20:6a:da:45:79:21:a7:ab:6e:bd:f1:51:ef:89:00:96:99:
         55:f1:be:ce:08:92:1d:b1:84:e6:ce:ff:4b:43:75:ee:ae:03:
         c3:e0:2c:bf:e5:7e:8f:45:44:fa:d1:06:3e:2a:20:06:67:38:
         ce:1c:98:85:57:e8:1b:b7:c0:b1:9e:ed:f9:5d:9d:48:65:fb:
         5d:8b:ea:0d:0e:84:87:cf:8d:82:7d:1a:0c:98:eb:91:57:21:
         cb:55:bb:85:2d:ed:9a:1f:6b:9b:1c:6d:a3:ef:38:f3:f5:90:
         61:dd:c5:e1:20:34:46:db:c5:35:6c:14:fc:b1:b6:e8:8d:34:
         11:80:58:c5:77:fa:f4:73:3b:a2:b2:56:42:23:de:ed:97:3b:
         d0:09:33:bf:aa:1d:09:be:5e:6e:38:07:76:35:c6:ad:47:f1:
         04:ab:f8:19:2c:eb:87:05:85:69:fb:8e:e1:8b:56:19:f0:42:
         fa:3e:14:ac:e7:af:98:ca:53:20:39:17:f3:48:6a:a4:ec:6e:
         aa:c7:1a:6e:e8:05:f9:c8:52:73:44:d0:e8:24:00:4d:41:13:
         9a:4a:e7:0d:5f:fd:3e:61:dc:83:70:a1:64:d8:02:f4:60:92:
         a6:44:ee:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af8XzqSrH3YHTEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
MWRlZmFjNjYtODFhYS00MzNkLTkwNGMtMDNjOWE0OWZiYTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJb+JHYfODB2Fta5a8bpgpvbUV4TIhTybETB
DrDNYdetBafhP/NPvtOfH1C7sAJFayLJgv+E+a+aHGtqG0QwhsdLiNZ9K3FByqOj
RrGSVD0TStf8O122zYFR/QtXKZBfE7hNmuLK1jx9AZ7m5ayk2mvVsJoP0KH+XNPF
5tI4yNcTEKutiZiATMekvyBDJLGuXjf/PcVTan/ARIIv4bT8VGoTETszfY2E0rpd
Lad/fljvkC9tUQslpPF2RZWy0E5i9nrFa4xSKzDKrEB8+PtoNUQ9Lf+1pL/Cl9G7
HQc8FEgIDZDBgBhn9c1UoDP5SKQ0i7GNi26mgb6Y0xyJx6WTswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRv3iiTblDPxOrGZz2sr/HGLkzqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTk2NDFhZWYtMTI5OS0z
OTZlLTk0NjgtZGM3ZmY4YTEzNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgIuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIISVEm5oYIq84SuTBcDGnHC9IgatpFeSGnq2698VHviQCWmVXxvs4I
kh2xhObO/0tDde6uA8PgLL/lfo9FRPrRBj4qIAZnOM4cmIVX6Bu3wLGe7fldnUhl
+12L6g0OhIfPjYJ9GgyY65FXIctVu4Ut7Zofa5scbaPvOPP1kGHdxeEgNEbbxTVs
FPyxtuiNNBGAWMV3+vRzO6KyVkIj3u2XO9AJM7+qHQm+Xm44B3Y1xq1H8QSr+Bks
64cFhWn7juGLVhnwQvo+FKznr5jKUyA5F/NIaqTsbqrHGm7oBfnIUnNE0OgkAE1B
E5pK5w1f/T5h3INwoWTYAvRgkqZE7hM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:10:03 2026 by rpki-client