Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6102da3b-8108-392d-95e4-d64516eae67d.roa
File:                     6102da3b-8108-392d-95e4-d64516eae67d.roa (raw, json)
Hash identifier:          olHDq3ONbA9KeFoARJW/rSKTTO0X5jMRZFWLhqA+4Oo=
Subject key identifier:   3E:39:D7:8B:AA:7F:B6:2E:19:25:EA:C5:DF:84:54:A2:2E:C2:75:45
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E6F3A4BF79E2C17B508615780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6102da3b-8108-392d-95e4-d64516eae67d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     1239
IP address blocks:        50.7.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4b:f7:9e:2c:17:b5:08:61:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=39902260-d18e-4bbb-b6dc-e93eeecb4fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:a8:66:43:70:48:fb:cc:29:6f:50:e6:d5:
                    15:36:89:9f:0f:bb:a1:81:c3:31:08:23:ce:ef:ff:
                    e4:ca:52:7a:cc:84:b9:ad:a3:8c:ea:f0:c8:23:cb:
                    f7:7b:81:8f:3f:17:bf:94:2f:da:66:c5:58:a1:a8:
                    16:43:f6:32:c4:d6:cf:59:50:24:8c:53:ea:fa:19:
                    24:92:9c:c0:c9:97:79:d8:ad:2a:63:26:e5:fc:7e:
                    27:29:e0:32:14:da:e4:4d:c3:07:d2:ce:f7:6f:2c:
                    bb:e4:17:2a:f2:07:ac:97:2b:0e:43:0d:64:ac:bb:
                    a7:e9:13:2e:d1:be:ee:46:41:3d:47:e6:96:89:11:
                    65:5a:cd:e4:c6:42:0c:79:58:8c:6b:5b:fe:dd:14:
                    a0:2a:3d:f8:b7:81:1b:4f:b8:2f:aa:b1:d7:1e:5c:
                    a2:2c:83:06:0b:11:f4:ea:65:74:58:13:ad:b6:89:
                    05:35:89:d5:7f:3d:5d:53:62:97:2b:94:9a:f7:38:
                    67:98:4d:c8:0d:be:01:7a:72:1b:4c:62:84:89:72:
                    0c:a0:f4:ce:f3:50:e9:f4:27:18:35:a7:27:50:2c:
                    06:85:31:00:d0:da:d5:39:9d:ca:3a:26:7f:fc:34:
                    b5:d5:23:7f:6d:40:cc:b8:b9:64:56:68:8c:c4:27:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:39:D7:8B:AA:7F:B6:2E:19:25:EA:C5:DF:84:54:A2:2E:C2:75:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6102da3b-8108-392d-95e4-d64516eae67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:b2:36:ea:b6:e2:b4:fb:04:15:6f:3d:32:da:7e:0f:d1:
         a0:de:90:67:03:69:e6:b7:6a:79:eb:ad:46:9c:94:2c:7f:61:
         55:9c:1f:ea:21:12:ce:2a:28:0a:fd:f2:fe:c4:41:d5:6b:5a:
         58:86:32:58:d4:4d:db:4d:92:b3:d6:f6:af:c0:e9:ec:0b:f4:
         37:2f:de:8c:c3:8b:ec:98:30:6c:51:e9:f2:b1:6b:3b:23:29:
         8b:92:6a:43:4d:25:db:47:88:97:f3:ff:23:fb:58:f9:9e:b2:
         a9:32:a2:d2:69:75:ea:24:8d:10:ce:71:9e:9d:b3:d4:2b:ac:
         71:d3:35:7d:0a:13:de:af:d8:c4:57:4b:b2:b1:df:ae:b4:77:
         ac:4c:91:d8:ca:16:97:26:08:ad:13:53:e8:ee:26:f6:b1:1e:
         8a:d8:d6:08:64:b6:99:b0:92:c8:37:db:0d:f6:ae:c7:92:3d:
         71:c1:cf:6c:49:a8:d7:3f:d5:76:62:af:05:31:ae:3a:22:3c:
         e9:7e:c5:2d:e4:04:6e:0f:52:a7:75:51:d7:7b:50:67:5c:29:
         4c:fa:8b:a2:9e:fa:b9:91:99:f1:9a:e2:35:6b:dc:dc:3f:ad:
         de:a7:93:e9:3e:1c:89:c8:94:b1:e9:2e:69:c4:63:0f:d7:22:
         4e:54:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:31 2026 by rpki-client