Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa
File:                     4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa (raw, json)
Hash identifier:          lP6Z/brp0q98SvCL+cbeBCs8hCB04qz8XzA0//VE5uM=
Subject key identifier:   C2:12:69:14:21:E5:D3:85:1F:79:67:4F:6C:7D:E8:14:37:9C:65:27
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584E683F62753C8806124FBCCD00
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     399951
IP address blocks:        50.20.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:62:75:3c:88:06:12:4f:bc:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=0e3e1fdd-6e94-49c6-8385-71a6269ed9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:17:6a:e2:8b:d3:2b:0e:c0:1a:cd:04:96:
                    da:87:96:e2:c9:37:63:d3:2c:a4:a3:3b:d5:d8:52:
                    f6:74:b7:98:fa:ac:c3:d3:c2:96:61:8d:7b:1c:8a:
                    c8:6e:a6:e2:65:b9:d3:e8:ef:6d:9b:b3:3f:c7:bd:
                    45:55:f2:91:42:01:05:a8:e1:66:e2:e2:47:73:58:
                    0c:c9:65:18:15:ff:b7:91:9f:d2:48:7f:42:10:ef:
                    75:1a:92:f5:02:01:aa:d7:44:02:0d:48:e9:72:55:
                    21:64:a0:30:03:94:37:a1:27:01:d9:45:06:61:ef:
                    51:29:c5:a3:ee:76:e7:86:37:a0:a9:92:67:9e:19:
                    4c:2a:e7:1a:90:53:29:c1:86:1b:8f:68:33:c7:d4:
                    90:cb:4a:31:7a:94:34:4a:37:d2:cb:28:d0:51:25:
                    b9:86:a0:77:a6:63:04:24:b9:c8:6d:d8:97:a6:40:
                    9a:3e:93:a9:67:ac:bd:6f:68:47:a4:40:0f:f2:c2:
                    80:fa:b3:8c:c7:b7:b4:84:5e:ef:4f:41:82:4f:51:
                    50:46:a1:f1:5a:41:92:61:e9:05:0a:63:6a:a3:a1:
                    6b:58:1d:57:6a:38:97:de:45:b9:e1:20:6f:c3:4f:
                    a0:88:f0:4c:bf:f5:a9:16:37:9c:e7:e5:24:7a:73:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:69:14:21:E5:D3:85:1F:79:67:4F:6C:7D:E8:14:37:9C:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:2e:bf:9a:f8:a8:6f:4a:56:24:b3:77:67:2e:68:fc:c0:
         7e:66:b0:20:78:c4:84:b0:ec:18:a2:98:e7:49:0b:8e:8d:6d:
         47:59:75:e0:4a:0b:88:b9:b5:90:19:ad:a3:1e:d6:cf:1c:1b:
         da:cb:f3:ce:bb:c9:20:a4:12:28:13:01:99:fd:68:5a:89:86:
         9f:70:d9:8b:a1:5b:82:78:61:e2:cc:b4:65:07:40:c2:9f:f9:
         74:f7:29:7d:93:bb:43:f9:5c:0b:a6:c5:08:3a:b7:fd:25:2c:
         44:39:79:46:36:4f:51:26:ab:0e:92:61:1f:28:c5:fc:54:84:
         7f:ab:1b:cf:d1:31:3b:18:39:00:11:b8:e3:dd:d4:88:6f:b5:
         2c:61:6f:4a:1c:d4:15:0d:fb:42:99:9f:d3:5c:bb:35:67:77:
         f0:06:57:fd:ab:b5:87:75:4c:16:6c:9f:71:7b:24:03:a6:a6:
         b0:a0:e9:61:f5:76:2d:91:af:c0:0a:8d:cd:f3:95:07:80:57:
         e1:80:0a:81:63:29:f6:e5:29:50:3c:f1:b6:33:dc:ff:c2:a4:
         74:0d:25:44:d2:e1:c2:7a:33:ae:2b:b1:48:ab:70:25:35:21:
         09:49:28:35:d8:16:80:8a:d0:bd:27:85:ce:39:f2:87:8b:5e:
         27:bb:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:21:04 2026 by rpki-client