Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa
File:                     b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa (raw, json)
Hash identifier:          Qw7TpLpJQS+BxZi2D7ECgWj9+hYF7cIifa+yTx8uUBA=
Subject key identifier:   E0:DC:EF:A3:47:B2:1F:86:F2:AF:77:8A:4F:B6:60:A7:6A:B4:4A:3B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F5E62E3D123D76FF8E6FBC580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     30058
IP address blocks:        50.7.27.0/24 maxlen: 24
                          67.159.36.0/23 maxlen: 23
                          67.159.58.0/23 maxlen: 23
                          2001:49f0:d11d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e3:d1:23:d7:6f:f8:e6:fb:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=415e609f-caf0-4c1d-aadb-78ddcfccdf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:f3:ff:e5:c3:78:2b:5a:18:3d:8c:99:a0:
                    3a:2c:f5:24:10:1c:50:29:0f:d2:a7:05:2d:05:63:
                    b9:9a:e7:48:da:92:92:15:79:42:df:47:87:57:8d:
                    49:9a:28:25:99:c0:a6:ad:d3:87:e6:91:1e:35:a2:
                    0b:d1:f3:c8:48:41:89:ca:69:f7:6c:d4:a4:dd:5f:
                    34:ba:e6:24:1e:16:ef:13:db:16:6b:e1:bd:9e:ce:
                    57:59:de:1a:36:85:53:f1:56:f0:a5:1e:91:96:13:
                    28:f1:cc:df:5f:28:b6:09:8c:e0:71:21:38:06:70:
                    78:e5:b4:57:42:9e:1b:f4:57:8c:fc:0b:bb:d7:b6:
                    7a:fe:60:d7:e9:f9:62:a2:71:87:bd:6a:b1:f4:18:
                    84:27:b6:52:fc:d6:5c:60:33:36:4e:77:83:5b:44:
                    8f:b9:91:23:29:05:9f:36:36:35:53:3e:79:81:ba:
                    3b:e2:1a:86:dc:b2:64:ef:f5:20:c0:68:14:3c:2c:
                    bd:62:02:8b:19:7c:c6:64:57:a7:67:5b:1f:6c:cc:
                    19:64:da:69:4c:11:fd:6d:27:2a:93:04:75:6f:bb:
                    f9:fa:84:e8:49:82:eb:1c:8e:6a:53:92:bb:10:3b:
                    67:d4:2a:23:66:af:6d:bf:c6:4a:d5:b8:5c:ea:b9:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:EF:A3:47:B2:1F:86:F2:AF:77:8A:4F:B6:60:A7:6A:B4:4A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.27.0/24
                  67.159.36.0/23
                  67.159.58.0/23
                IPv6:
                  2001:49f0:d11d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:90:de:1f:2b:4e:c2:49:57:f9:77:fe:a7:a2:62:da:fb:f4:
         e3:73:ad:a7:b8:3b:08:cf:0f:e3:06:82:fe:0f:9e:bb:09:15:
         be:ae:19:2f:6d:29:89:a1:54:f1:ad:48:b5:ac:f7:18:94:31:
         eb:f3:f0:6e:6e:af:80:af:39:27:e1:f1:10:79:61:63:f2:b5:
         75:ec:39:13:b8:c5:4e:d0:47:37:2c:27:9b:a4:6f:26:18:01:
         b2:c5:cf:2d:5c:c0:e0:00:b3:05:fc:1f:ad:b2:5b:b6:61:b8:
         b2:30:77:43:4a:ae:35:78:d2:1f:78:ae:b8:2d:be:6f:fc:ae:
         03:7c:d6:aa:9b:ef:1a:0e:c5:76:7e:1d:22:2b:18:d6:e2:3d:
         b3:e8:5a:f6:9b:ac:3a:13:28:35:dd:cc:da:63:0c:a7:e0:61:
         67:ba:3f:22:a1:03:ec:76:85:7e:79:d0:39:67:14:d3:f5:ff:
         3c:83:4c:b5:8d:2e:64:07:eb:bc:93:ae:3d:44:89:b9:8e:82:
         53:d7:da:17:58:93:8f:17:2c:ae:ea:b2:66:4a:d5:89:ec:4c:
         7f:ab:99:ff:c1:82:99:06:19:15:83:f6:bd:91:10:88:5d:49:
         8b:bf:31:5f:e1:64:3c:64:b2:79:60:ac:60:0f:ce:ca:73:c0:
         06:37:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:48:31 2026 by rpki-client