Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/21d0fe36-2d1b-35a1-920f-f680fa7e605a.roa
File:                     21d0fe36-2d1b-35a1-920f-f680fa7e605a.roa (raw, json)
Hash identifier:          ltaGp31xzSQFCdalgmUkxl2KDVm+DfQNdsqpKUJZsDs=
Subject key identifier:   28:BD:2D:17:FE:FA:02:DD:7E:07:45:9A:BC:B6:43:FE:F0:AB:A4:66
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E4129D52FC2C14FF424038FA0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/21d0fe36-2d1b-35a1-920f-f680fa7e605a.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     198949
IP address blocks:        50.118.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d5:2f:c2:c1:4f:f4:24:03:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=ed5f454b-f893-4836-ae3d-dcd85e0943ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:06:b9:d7:c1:02:01:da:bc:bc:6d:b0:c3:
                    de:d5:87:3a:52:b6:ce:e5:89:c8:b2:a6:45:de:64:
                    f9:19:47:14:b7:56:94:e2:53:1c:94:06:19:1b:be:
                    25:51:66:e9:dc:d4:f3:de:96:a3:b2:89:7f:fa:0b:
                    5d:3f:b5:50:9f:31:fe:23:d8:e4:e6:ab:b8:e4:2a:
                    ce:77:c3:98:f9:cc:61:b1:58:d2:63:d7:1c:80:d1:
                    42:fa:58:1f:db:2f:f6:1f:ac:3e:a7:7c:2f:e1:f6:
                    e9:92:28:28:c7:d4:93:ed:06:ee:16:f0:8b:c3:b1:
                    58:e4:e3:3e:97:a3:87:cc:8a:a6:e6:6e:0e:b6:78:
                    2d:92:4f:66:3f:5b:ff:7c:2e:db:99:ac:65:6f:54:
                    6c:c1:34:b6:16:e4:04:ef:19:b4:21:8b:c4:44:3c:
                    1d:c8:b4:17:2f:2f:d5:5d:c7:01:02:24:45:06:15:
                    c5:35:c5:17:e1:d7:31:c3:b5:2c:47:17:5e:c4:aa:
                    5f:7c:6e:50:b7:a3:54:68:ea:01:ef:bc:62:12:98:
                    9a:e0:4e:82:37:66:ef:8c:d8:cd:d7:1f:80:5a:38:
                    71:a0:fe:40:b8:24:77:d5:2f:93:0c:e8:d7:6e:8a:
                    c1:41:d9:98:ae:0f:db:a8:bf:d9:f7:9f:33:8c:9f:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BD:2D:17:FE:FA:02:DD:7E:07:45:9A:BC:B6:43:FE:F0:AB:A4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/21d0fe36-2d1b-35a1-920f-f680fa7e605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:a5:e6:25:90:ce:69:68:a8:2d:07:2e:09:6f:2e:19:0d:
         80:0e:e6:de:a0:3a:43:34:d4:54:61:51:ce:eb:a2:6e:49:4a:
         d6:fb:96:71:60:5f:22:90:06:a9:5e:72:1d:83:f1:28:fa:62:
         17:d9:eb:da:cf:fc:f5:3e:02:ca:8b:05:00:38:37:e4:ad:4f:
         3f:a8:1e:31:6c:2d:ca:be:a6:b7:eb:93:62:37:32:3a:49:e2:
         c6:41:8d:0e:92:3a:d2:d1:a2:18:c3:17:d6:db:fd:5a:2d:d9:
         18:c5:be:60:3d:a7:48:f7:dd:1b:72:9b:e2:33:ee:32:d0:2c:
         80:e0:1d:80:00:b9:04:d5:71:51:fd:d4:12:96:cf:cc:5d:f7:
         d5:7c:fa:84:cf:67:8e:07:1d:d9:74:1e:20:6c:91:a6:b2:98:
         10:94:f6:34:c5:cb:8e:03:06:51:29:ac:ea:5a:3d:0d:c9:2f:
         e3:44:97:b4:c4:48:30:21:18:66:6c:53:39:b3:c6:0f:7a:2b:
         97:ee:ac:d7:2f:f5:1a:b4:9c:85:2d:b6:fd:16:45:d8:11:77:
         50:2f:b0:7c:54:1a:f7:a5:d7:8a:a9:ad:b7:9f:b1:74:8a:7b:
         8e:5f:70:6b:a7:98:99:d4:e2:c9:e7:f4:60:45:2f:d7:12:aa:
         4a:b7:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:01:39 2026 by rpki-client