Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/6b5b505a-8236-3f5f-9814-095934bac1f7.roa
File:                     6b5b505a-8236-3f5f-9814-095934bac1f7.roa (raw, json)
Hash identifier:          LhJbxPmUsuiXYvZ2Jwzr724RU/9RhBBXoTzq1ThK+Q8=
Subject key identifier:   2B:A4:30:3D:8C:AE:CE:5B:9F:5F:5A:74:53:C9:9F:77:64:46:76:1A
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584ED1672141BEE4CBF0FCFA4800
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/6b5b505a-8236-3f5f-9814-095934bac1f7.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     63483
IP address blocks:        50.20.193.0/24 maxlen: 24
                          167.88.213.0/24 maxlen: 24
                          167.88.214.0/24 maxlen: 24
                          167.88.215.0/24 maxlen: 24
                          167.88.216.0/24 maxlen: 24
                          167.88.217.0/24 maxlen: 24
                          167.88.218.0/24 maxlen: 24
                          167.88.219.0/24 maxlen: 24
                          167.88.220.0/24 maxlen: 24
                          167.88.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:21:41:be:e4:cb:f0:fc:fa:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=3b8e7a8c-4f82-4c28-bb38-c292fbeaa18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:4a:d0:00:cf:a9:50:c5:f9:d0:bf:4a:17:
                    b0:48:31:a6:22:cc:bc:7c:38:22:84:2f:df:d0:49:
                    96:bb:12:8c:2f:e6:ce:16:ce:ab:53:eb:f5:dc:e2:
                    82:68:a8:a3:c8:26:04:3b:d6:d1:59:75:14:92:bc:
                    05:48:e0:8e:a5:77:3e:b9:0c:ef:8e:34:68:08:e5:
                    62:21:35:97:69:64:21:03:53:c9:6c:a5:82:c1:ef:
                    5f:0a:6d:be:a6:74:07:32:ca:0e:a2:ce:24:af:95:
                    8f:b1:e8:f7:d3:b7:84:84:a3:6f:6e:b6:85:ea:46:
                    76:66:25:cb:63:5b:5c:fe:b0:f8:21:58:85:75:96:
                    33:75:d0:a3:20:d6:d8:1f:c4:7e:a7:6a:07:b7:ed:
                    0e:b8:be:87:62:48:0a:2e:44:f5:aa:ba:a6:c1:7d:
                    32:87:0d:1e:1d:d1:9e:78:79:6f:f1:31:00:1b:de:
                    a5:22:14:4d:05:c3:67:84:10:12:49:c7:82:23:27:
                    d6:a8:e3:09:c6:61:0b:ab:02:26:83:c5:f3:ba:bf:
                    45:c8:ca:a7:eb:8b:0f:4b:e2:8f:5d:43:13:b3:e5:
                    e2:c9:8f:81:28:dc:75:22:b7:a6:3c:77:fe:20:bc:
                    06:88:d3:a1:57:84:25:97:70:3e:62:6d:af:02:43:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:30:3D:8C:AE:CE:5B:9F:5F:5A:74:53:C9:9F:77:64:46:76:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/6b5b505a-8236-3f5f-9814-095934bac1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.193.0/24
                  167.88.213.0-167.88.221.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ec:72:61:68:80:65:8f:0c:2e:19:dc:b1:d8:c5:72:a9:8e:
         63:18:8d:db:22:a6:32:df:ea:17:ab:1b:e3:0a:df:3b:a5:3e:
         7c:31:79:10:98:bb:54:f4:c5:f9:8c:a3:2f:66:2a:7d:22:91:
         b4:09:74:d4:8a:78:85:88:19:10:43:f8:04:49:e3:3f:34:22:
         9c:24:c1:fb:3b:36:6f:0e:03:b5:32:03:65:ad:70:17:a0:12:
         6d:5f:60:51:32:d2:71:6b:6c:93:0d:b8:61:59:d1:8b:67:f2:
         a1:af:8f:8b:f4:20:9c:4a:38:7c:04:6b:a5:14:60:5b:d4:f1:
         2c:a0:b5:07:54:27:4b:42:8b:0e:6c:bc:77:3e:36:16:7c:fb:
         7e:b4:3a:66:08:1e:9b:ca:7e:f8:57:24:95:8a:cc:9f:98:19:
         67:b4:b8:16:7c:28:0e:23:15:a1:9d:f4:fc:73:65:63:64:40:
         dc:c5:2f:81:bf:2f:a9:5d:a9:71:0a:e7:da:bd:66:e2:a8:89:
         79:b9:5c:23:38:4d:83:c9:d2:4a:33:05:8b:d7:62:9a:67:51:
         06:dd:36:64:ed:91:96:93:26:e4:63:b8:a7:0b:e2:0b:93:68:
         07:da:8b:fa:e1:67:b5:cb:91:ee:23:bc:4f:90:bc:3e:76:2c:
         33:36:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:13:13 2026 by rpki-client