Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f71b73b4-285e-3830-addf-92b9ac396ab0.roa
File:                     f71b73b4-285e-3830-addf-92b9ac396ab0.roa (raw, json)
Hash identifier:          ja99PfHqBaiCiPFJLgwMfla50Np2gR72xJKa4us7foc=
Subject key identifier:   20:EA:BF:F4:21:C5:4B:72:61:98:70:F2:5D:78:CF:68:D8:78:0D:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E59505DDD4F4C6D0FC63E92A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f71b73b4-285e-3830-addf-92b9ac396ab0.roa
Signing time:             Wed 01 Jul 2026 00:37:23 +0000
ROA not before:           Wed 01 Jul 2026 00:37:23 +0000
ROA not after:            Tue 29 Sep 2026 00:37:23 +0000
asID:                     19905
IP address blocks:        50.83.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:50:5d:dd:4f:4c:6d:0f:c6:3e:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  1 00:37:23 2026 GMT
            Not After : Sep 29 00:37:23 2026 GMT
        Subject: CN=8049af5a-29e2-40f7-bbba-fcc0ff54615b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:de:9c:72:cb:5b:8b:78:a6:d6:f6:1a:ac:
                    61:c1:88:8c:b3:d1:3e:76:45:1d:25:ec:52:35:d7:
                    f1:85:1e:56:d4:7d:b5:81:f5:95:b1:e9:d9:92:2c:
                    ac:52:c9:06:1d:90:5b:2f:60:3a:69:69:ab:c1:17:
                    dc:5c:a5:75:26:12:20:a6:b6:b8:d3:21:6a:17:9a:
                    16:b3:55:34:5f:02:7a:dd:a8:bb:f9:c9:70:2c:69:
                    42:8c:3e:ae:82:80:68:e3:f2:90:ed:dc:66:d8:be:
                    a3:39:2e:0d:59:41:59:4f:cf:53:35:4b:91:3b:05:
                    f9:66:3f:97:74:1b:fc:a9:22:fa:eb:37:f0:0e:69:
                    66:e2:78:58:1d:51:ab:b9:14:46:43:5f:4b:da:4d:
                    21:ef:03:c9:c3:a3:68:47:20:9a:3e:48:32:6d:3c:
                    75:c6:67:09:3b:a2:73:92:a9:3e:73:29:16:08:9c:
                    22:99:d4:07:ac:15:e6:d4:4c:86:11:69:25:07:77:
                    7c:db:8d:ff:ad:71:b0:7e:ef:5c:ce:06:c8:c7:3a:
                    43:d6:a7:fd:f7:2d:73:7a:a8:13:66:ac:fe:06:d9:
                    f9:3b:aa:b8:e1:d8:a3:c4:8a:19:bd:bb:0b:9f:0d:
                    26:a5:42:ce:70:eb:18:07:44:c1:6a:8c:86:70:5a:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EA:BF:F4:21:C5:4B:72:61:98:70:F2:5D:78:CF:68:D8:78:0D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f71b73b4-285e-3830-addf-92b9ac396ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:59:38:26:07:69:8e:35:49:ee:96:f1:15:8f:12:55:16:
         f5:f3:aa:44:01:21:74:1d:30:83:f3:91:d5:2b:1b:03:a3:14:
         df:b5:ea:96:b7:aa:8a:77:98:41:79:1f:a5:d8:dd:be:7b:67:
         2d:40:95:77:2a:01:53:3e:b3:f8:f6:82:5a:60:fa:93:40:3d:
         4a:01:2e:53:9b:30:46:52:f5:24:3a:c6:0f:14:95:b6:aa:ea:
         5c:b9:27:ee:d2:af:8f:c8:19:3a:21:6c:c6:03:ca:59:71:d2:
         e2:e7:8f:63:c9:17:12:4a:58:a4:f7:20:95:93:d5:ca:4c:c0:
         09:30:16:04:7b:b5:04:30:0f:15:27:3b:56:a3:b5:cf:1b:9c:
         54:f9:2d:6a:19:04:8f:12:fd:52:38:6f:fc:58:58:b8:fe:fb:
         7d:7c:1d:a4:40:00:d1:60:09:19:a7:76:5b:28:eb:3a:c2:98:
         f2:1e:bb:f9:61:2c:12:bc:79:78:2f:b9:0a:8c:c5:90:56:98:
         7c:a6:b2:2b:2b:a9:50:80:40:24:0a:58:1c:44:f3:10:7c:38:
         39:be:77:6d:2c:45:e0:38:88:8d:32:b8:fe:87:cf:9a:3b:94:
         99:42:ff:b1:c3:b9:a4:ab:57:f8:e4:00:1a:ae:d3:63:97:e5:
         09:2c:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:43 2026 by rpki-client