Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/85980c8f-4e3b-34d3-9389-d561e38a21ef.roa
File:                     85980c8f-4e3b-34d3-9389-d561e38a21ef.roa (raw, json)
Hash identifier:          LQhrIp1XfpoDBaUO74qcr9eP25cElCPUAJ37TgU8ias=
Subject key identifier:   24:DE:BD:16:AB:7B:3A:E1:6C:4B:3B:3D:FB:10:2B:75:74:23:4A:F8
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E8FDFBB26ECE444840C39CE00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/85980c8f-4e3b-34d3-9389-d561e38a21ef.roa
Signing time:             Mon 20 Jul 2026 13:39:54 +0000
ROA not before:           Mon 20 Jul 2026 13:39:54 +0000
ROA not after:            Sun 18 Oct 2026 13:39:54 +0000
asID:                     834
IP address blocks:        199.235.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:df:bb:26:ec:e4:44:84:0c:39:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jul 20 13:39:54 2026 GMT
            Not After : Oct 18 13:39:54 2026 GMT
        Subject: CN=204f6819-5808-4408-8bdd-742cd49a0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:22:92:98:45:a4:f7:fd:aa:ab:e0:57:d2:
                    65:d8:41:3e:87:ab:10:97:1b:1b:7e:a3:0b:99:b6:
                    c9:ac:fa:45:ce:39:00:42:3b:37:bf:2e:9e:ba:36:
                    6b:7d:be:6d:ca:7a:1e:bb:fe:1a:6a:25:5b:aa:0c:
                    86:cb:d7:54:06:24:7b:97:d4:d0:e2:1b:79:9e:17:
                    cf:e0:40:9d:48:98:58:42:6d:c7:7d:3c:38:71:19:
                    f5:37:74:15:40:a2:f8:f7:d9:f7:f0:b2:2e:c4:a6:
                    e9:52:03:f1:29:ff:81:ba:54:d3:67:46:49:ec:ea:
                    0d:e0:b7:d0:4b:6c:fe:45:c7:a0:cb:0e:b0:35:5f:
                    97:3a:e5:b7:b3:2b:24:a1:89:59:16:57:65:98:fc:
                    4a:4e:49:fb:dc:65:21:15:b9:c8:1d:18:b1:b1:ae:
                    d7:9c:ba:6c:61:65:19:d2:df:65:11:a5:d8:4f:ad:
                    f6:3b:08:95:78:66:69:44:ea:14:78:3c:32:1d:f7:
                    2e:c7:d7:58:20:c0:fc:ef:e9:fb:49:ed:ae:56:42:
                    3f:59:ba:38:ff:4d:79:f1:29:7e:78:40:9e:89:13:
                    bc:72:78:e1:48:73:8e:47:3c:af:b7:f6:14:cb:2e:
                    6c:ca:44:42:99:7a:25:e4:12:b7:d1:a8:f1:9e:e4:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:BD:16:AB:7B:3A:E1:6C:4B:3B:3D:FB:10:2B:75:74:23:4A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/85980c8f-4e3b-34d3-9389-d561e38a21ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f6:35:9a:a9:9e:12:58:8b:b0:e5:92:85:9a:fe:e3:04:3a:
         d7:fe:ae:5b:11:0c:51:d1:7d:6d:02:23:23:31:51:12:52:67:
         ba:0b:12:2b:a6:7e:8c:57:ca:d4:96:a7:43:e5:69:7c:06:c6:
         75:6a:03:3e:6d:c2:15:cf:8d:d8:d3:1c:84:24:d2:00:87:e9:
         45:1a:dd:fa:0b:3c:ce:91:3d:2b:61:22:ae:5b:cf:34:04:c9:
         39:76:52:7c:a8:9d:90:a5:6a:f0:fa:ed:f7:ba:a8:e8:73:6d:
         95:25:bb:32:f5:38:e6:31:6a:86:64:fa:c2:ec:56:c5:df:3c:
         98:46:b6:b5:ea:d0:03:04:67:c9:c6:79:f5:b7:ca:9d:4d:0e:
         aa:39:16:a5:21:cf:3b:82:03:cd:a8:91:f6:d9:ac:5f:e6:02:
         1b:ba:de:cb:ae:9d:d1:13:9f:72:bf:0e:f1:b9:1b:eb:e7:bd:
         cb:f6:c8:58:75:5b:f7:30:75:f5:b9:e1:f2:19:5a:5d:4b:e4:
         fc:4e:c9:29:34:17:70:12:6c:c4:29:d1:6d:c0:8a:de:2a:44:
         c0:fe:f8:a2:f9:26:b9:38:50:f2:65:e9:f3:38:8f:e6:b7:8f:
         9e:a7:a2:03:92:da:57:8e:a0:f2:95:7f:e0:c7:85:b9:0a:ac:
         fe:52:bd:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P37sm7OREhAw5zgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDcyMDEzMzk1NFoXDTI2MTAxODEzMzk1NFowLzEtMCsGA1UEAxMk
MjA0ZjY4MTktNTgwOC00NDA4LThiZGQtNzQyY2Q0OWEwYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu0ikphFpPf9qqvgV9Jl2EE+h6sQlxsbfqML
mbbJrPpFzjkAQjs3vy6eujZrfb5tynoeu/4aaiVbqgyGy9dUBiR7l9TQ4ht5nhfP
4ECdSJhYQm3HfTw4cRn1N3QVQKL499n38LIuxKbpUgPxKf+BulTTZ0ZJ7OoN4LfQ
S2z+Rcegyw6wNV+XOuW3syskoYlZFldlmPxKTkn73GUhFbnIHRixsa7XnLpsYWUZ
0t9lEaXYT632OwiVeGZpROoUeDwyHfcux9dYIMD87+n7Se2uVkI/Wbo4/0158Sl+
eECeiRO8cnjhSHOORzyvt/YUyy5sykRCmXol5BK30ajxnuSACQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTevRarezrhbEs7PfsQK3V0I0r4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvODU5ODBjOGYtNGUzYi0z
NGQzLTkzODktZDU2MWUzOGEyMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+sYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr2NZqpnhJYi7DlkoWa/uMEOtf+rlsRDFHRfW0CIyMxURJSZ7oLEium
foxXytSWp0PlaXwGxnVqAz5twhXPjdjTHIQk0gCH6UUa3foLPM6RPSthIq5bzzQE
yTl2UnyonZClavD67fe6qOhzbZUluzL1OOYxaoZk+sLsVsXfPJhGtrXq0AMEZ8nG
efW3yp1NDqo5FqUhzzuCA82okfbZrF/mAhu63suundETn3K/DvG5G+vnvcv2yFh1
W/cwdfW54fIZWl1L5PxOySk0F3ASbMQp0W3Ait4qRMD++KL5Jrk4UPJl6fM4j+a3
j56nogOS2leOoPKVf+DHhbkKrP5SvcA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:28 2026 by rpki-client