Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa
File:                     aad98796-ff30-3d3b-8235-4fd483024c72.roa (raw, json)
Hash identifier:          fMexfNncbAvuUBbKutec4vTzPX2iMKdn+s2xTdzKmSM=
Subject key identifier:   B4:09:AB:6F:CF:26:C6:9C:F9:EC:24:3B:56:2D:39:F5:22:23:93:E1
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC240CF087F286AE5AF1C0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        50.4.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:24:0c:f0:87:f2:86:ae:5a:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=519be83c-f239-4906-9ce4-f7ae3cbcc017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:c3:0e:f1:9b:f1:c3:36:29:1d:39:e3:42:
                    1f:3b:db:ac:24:1c:84:bf:e8:35:51:6b:22:65:8e:
                    68:2f:b1:c5:2c:e4:0f:3a:b3:ef:4c:45:f7:5c:65:
                    32:2d:72:9d:2a:1a:ff:6e:17:ca:e6:f7:af:3a:fa:
                    65:f4:5e:6b:c5:61:76:50:e2:63:f5:a9:79:89:f7:
                    7f:5d:7e:e9:5f:15:21:e8:89:bb:45:0f:c9:ff:4f:
                    ca:5b:90:18:19:b3:09:55:16:be:38:05:c5:24:c7:
                    84:1e:f4:22:14:58:9b:a2:d8:48:0e:70:55:e6:cc:
                    14:d7:19:69:55:fb:44:c8:d2:4a:e1:dc:39:f0:26:
                    8e:24:8d:41:fd:1f:d5:1d:5f:d5:b7:23:bc:ad:7d:
                    ba:8e:b9:c4:2f:83:79:ea:fa:81:45:78:12:6d:a2:
                    d9:6a:a9:80:8f:02:19:b7:e1:fa:a0:10:36:24:7f:
                    cd:1c:d8:01:fe:3e:e0:cb:5f:60:eb:8d:ad:78:51:
                    b0:12:b0:b8:69:bc:91:c0:fe:c5:d3:5b:fc:cd:1c:
                    2f:3e:0c:89:4f:0b:12:ff:de:34:8b:d8:88:99:3a:
                    6a:85:d7:2b:a2:02:37:76:5e:b6:34:e0:9d:df:0f:
                    84:b2:bd:60:bb:89:8e:e6:26:07:f4:c1:0b:f7:22:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:AB:6F:CF:26:C6:9C:F9:EC:24:3B:56:2D:39:F5:22:23:93:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:5a:84:ac:6f:14:68:d8:43:54:d4:77:f9:a0:95:92:ad:
         d6:2c:ed:28:a4:80:e5:ce:e3:2c:a9:9b:21:52:c7:3b:8d:42:
         d8:20:34:5c:11:3d:bb:71:d7:43:92:87:18:21:96:f5:b6:89:
         94:fe:3c:40:a2:26:28:6b:fd:50:80:75:df:9d:57:48:55:1c:
         28:b1:6f:2d:25:f8:02:b6:89:81:e3:68:a6:97:45:0a:40:f1:
         7a:4b:48:e4:0d:63:87:0b:6e:95:3d:66:62:5c:a3:54:47:d3:
         d3:32:6c:55:ff:5b:32:e3:ac:ce:8d:20:18:a2:44:6c:55:65:
         3f:8e:ed:28:20:67:fe:49:76:50:01:cb:4d:d8:00:b0:96:e8:
         5f:8a:84:67:fe:e0:02:bc:bc:2f:1a:0c:4d:b7:51:61:c1:fa:
         aa:af:14:e6:81:4d:a4:10:d5:5b:8e:66:50:f6:06:59:b9:46:
         35:18:c6:cd:3c:1c:74:81:7b:6e:0b:2b:c2:2a:de:d1:aa:07:
         e7:5c:c2:02:f1:0d:94:e9:5b:02:35:ec:08:d5:23:56:1b:a3:
         ff:a7:00:23:e6:ce:19:75:1a:23:f0:94:84:4d:aa:d5:6a:de:
         ac:42:8e:95:ac:fb:3c:3a:e1:85:99:30:38:e6:7a:c5:1a:26:
         46:a6:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:53:50 2025 by rpki-client