Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/687af4e4-1321-3953-a15c-aa4453c843a2.roa
File:                     687af4e4-1321-3953-a15c-aa4453c843a2.roa (raw, json)
Hash identifier:          Om3WD4ExzRvNhTn/H+72snRB7kzZpN/LlYQtK7yj/hk=
Subject key identifier:   7E:97:80:EB:91:57:28:A6:72:9A:65:66:2C:B4:C0:98:17:BF:F5:50
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E0C1EDE0E5B963DAF09AF7500
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/687af4e4-1321-3953-a15c-aa4453c843a2.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     31898
IP address blocks:        50.6.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:de:0e:5b:96:3d:af:09:af:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=055884f3-d076-45c5-9445-c4a55d3ce498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:1b:af:33:48:7d:17:59:81:98:55:cd:0b:
                    ea:b4:74:98:7e:b0:fd:bf:e3:55:ea:69:d9:8a:78:
                    45:6d:20:00:e3:b4:1b:57:f7:2c:16:f9:5b:72:d4:
                    23:ba:6e:4a:15:de:00:c8:18:3b:09:7c:9b:66:ef:
                    9e:d4:3b:93:c9:ff:e6:73:5a:86:ac:22:2c:9c:72:
                    84:8b:55:c8:43:5c:2d:76:05:5c:7b:6c:8e:c8:fa:
                    38:f5:7f:b7:fe:fe:48:ea:c0:96:e5:46:c8:86:5b:
                    56:8f:6a:d8:93:6b:41:90:6f:a7:53:b4:a8:f8:f8:
                    b5:ba:24:e6:a1:78:a0:3b:0d:dc:67:98:d3:42:24:
                    49:69:e4:d8:a7:fc:55:44:c3:66:fe:31:9f:7b:cb:
                    05:02:94:e1:76:44:c8:64:f1:4f:ae:0c:e1:f2:56:
                    c1:e7:e3:17:eb:c3:d9:7e:26:5f:80:e9:9a:6c:c4:
                    d1:af:e8:48:fd:af:8d:5e:64:c5:32:a2:fb:67:6c:
                    ff:4a:d1:76:f9:c8:18:07:fd:09:b0:ab:2a:59:c8:
                    b4:63:83:1d:3f:8e:17:33:9f:ee:75:d3:06:15:32:
                    af:02:9c:92:15:dc:63:58:75:a4:17:7a:07:5e:2e:
                    f6:bb:8d:2d:e6:9f:3a:5d:2f:db:b1:54:c2:46:d9:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:80:EB:91:57:28:A6:72:9A:65:66:2C:B4:C0:98:17:BF:F5:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/687af4e4-1321-3953-a15c-aa4453c843a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:97:fa:ba:e3:9b:f0:9d:fe:c4:f3:6e:be:f6:78:90:0c:42:
         4a:02:c8:99:c8:bf:66:33:a2:67:48:ce:c1:fe:4c:14:2c:4b:
         b3:96:c8:d7:67:50:45:15:ef:be:5c:36:cc:05:00:4d:68:c8:
         7a:f6:e2:e7:37:c5:a3:9a:2d:f7:aa:ca:e1:64:a8:fe:fe:e6:
         56:2c:e5:6a:49:92:e3:86:19:95:72:a8:c4:67:93:fa:ac:49:
         d1:73:8d:df:a8:dc:b6:49:0a:be:13:50:04:d0:fc:2c:e4:59:
         3e:9d:62:73:8d:a0:aa:52:f7:e8:3d:1d:af:65:ba:e2:f1:29:
         b9:0d:7c:f8:72:94:a5:91:8f:e9:2f:7d:47:f4:cd:9c:eb:d5:
         4d:7b:37:e6:39:dd:a0:2f:6f:cb:8d:bc:ca:b3:fc:a3:de:cd:
         4e:64:21:52:a9:5e:76:6c:61:b7:32:ad:58:49:f7:79:79:b9:
         a2:18:47:47:d1:ed:89:69:1c:dd:53:69:c7:25:b9:85:65:06:
         41:c5:23:66:fe:ee:3f:4d:ac:12:28:b1:11:83:d5:bd:ab:65:
         ca:cc:3b:b2:8a:c4:12:31:48:af:de:88:c8:08:71:92:30:d3:
         33:b0:31:2b:83:6b:4c:d3:a3:63:96:a8:c3:07:8d:02:84:f0:
         a7:4a:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:12:52 2026 by rpki-client