Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8994a0a-9126-314c-a6ac-6ef34605f666.roa
File:                     d8994a0a-9126-314c-a6ac-6ef34605f666.roa (raw, json)
Hash identifier:          84rcWRoCe5EhJ24VpPRfldW6e7doE/LsxSMRygFh3AU=
Subject key identifier:   27:36:73:3A:61:F4:97:8A:B7:BA:43:6E:CE:AA:B7:48:FC:9A:91:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32ACA52317931672BBA280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8994a0a-9126-314c-a6ac-6ef34605f666.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     400069
IP address blocks:        50.109.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ac:a5:23:17:93:16:72:bb:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=a2c14112-769a-4a93-ada0-3f179febc0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:42:4e:a1:7a:dd:5c:ba:8b:a9:5e:91:38:
                    d2:5b:75:ed:1b:09:d3:9d:50:1b:b5:34:12:bf:2b:
                    87:27:d3:77:b0:bd:e4:12:38:25:f7:a0:78:57:d5:
                    7b:3f:1b:bb:38:9f:64:07:4b:c8:48:a1:68:de:6d:
                    b8:0f:87:f3:1a:e4:41:80:94:57:c7:2f:d5:97:0e:
                    67:e9:1f:e8:69:69:dd:63:cc:a6:b3:b3:b2:b8:1e:
                    80:45:74:cc:95:65:37:48:7d:e0:41:61:ed:17:c2:
                    77:2f:ee:33:4b:be:23:e3:07:b7:4f:ed:2b:19:0d:
                    34:87:2c:70:4b:88:a1:cb:22:38:a5:87:e4:b0:e0:
                    0b:27:aa:71:39:e5:26:d4:69:07:ac:78:ac:ac:a5:
                    40:45:96:3e:85:12:64:a0:94:8c:f2:8f:fe:ca:10:
                    f9:46:88:0a:0b:c4:2d:e8:ba:1d:3a:a1:22:9b:92:
                    34:41:86:c6:dd:13:0b:9b:a7:00:25:e1:c3:0b:61:
                    1b:fa:d0:cd:39:66:07:84:97:2f:da:49:bf:61:c0:
                    b4:78:25:a4:38:fd:eb:81:3a:a1:8e:0d:d8:38:4a:
                    19:79:f5:09:62:3d:da:f0:2f:3a:95:38:30:bd:10:
                    46:ae:b8:ed:30:f8:e8:19:b8:69:f4:a8:06:7b:d3:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:73:3A:61:F4:97:8A:B7:BA:43:6E:CE:AA:B7:48:FC:9A:91:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8994a0a-9126-314c-a6ac-6ef34605f666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.109.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:40:25:e0:79:38:19:b1:cf:34:11:04:cc:86:e9:21:93:08:
         e8:38:2e:ca:38:72:74:70:0c:1f:cc:56:1d:4a:63:23:20:83:
         cc:8e:51:0e:7e:36:ae:81:b3:3e:bd:b2:74:67:2e:7c:35:99:
         c5:3d:41:b4:fb:09:9d:21:f0:83:ee:3a:ff:fd:01:f3:ac:fc:
         82:e6:92:d1:3c:02:c9:8b:27:7f:60:66:d6:50:85:06:f0:7a:
         71:a7:3f:c1:dc:4c:77:48:70:7e:93:2a:d1:cf:68:00:2b:50:
         a7:2b:a6:7a:cc:83:60:eb:20:1f:12:09:f2:8d:e8:e9:2e:50:
         b2:9b:0d:cb:f0:e7:0b:88:3f:3d:e6:82:28:f9:b3:2f:58:59:
         df:51:c4:0d:fd:03:5e:5b:79:fb:75:7a:b2:27:ec:3c:5d:7e:
         01:20:2f:a0:d7:f6:a2:b9:7c:1e:7e:ec:ed:cc:49:fe:c2:18:
         a5:be:98:03:ff:b7:0e:45:18:2b:aa:37:f0:5f:e7:40:9f:3e:
         58:3c:8b:1f:1c:5e:cc:5c:48:56:a2:e3:bc:07:ea:db:df:bd:
         a4:4d:f3:ba:a3:b8:83:7b:5e:99:bb:d9:19:7c:a5:7c:a7:0c:
         a2:bf:60:9d:0b:6d:68:55:44:bc:23:d3:a5:29:0f:66:57:e9:
         a6:ef:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:23 2026 by rpki-client