Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa
File:                     0de91a36-21ad-3a19-b00b-c7ba59483f14.roa (raw, json)
Hash identifier:          89nWHeFK2Vo3coHeddGB/BoUO2EsEntWhe678WL7nQg=
Subject key identifier:   60:B0:47:7B:47:E9:F2:C1:6B:C4:91:DD:65:0A:EB:41:65:01:BA:FF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F77835782B5FEF4D95CBDC3C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     7029
IP address blocks:        50.96.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:57:82:b5:fe:f4:d9:5c:bd:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=d69a10fd-a304-4ca4-bdbc-3e2837ef48bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:f9:b6:fd:da:79:39:cc:16:ca:6c:ea:68:
                    15:f1:13:1e:d3:f3:6e:ad:a1:69:7b:25:0a:e0:d4:
                    60:c3:2e:ac:86:7c:de:7e:d0:f7:8c:ed:b2:a5:cf:
                    d8:2f:e6:ac:ea:83:87:55:e4:14:bd:ef:60:4d:09:
                    17:35:b9:7e:48:cc:60:c1:0f:41:a9:b4:95:d8:b5:
                    93:f8:f8:da:3b:0e:d9:43:fe:f0:00:d2:15:3c:34:
                    67:37:32:30:b9:e7:ab:60:cc:34:88:4f:6a:85:f2:
                    4c:19:a8:0d:f1:c1:4b:18:fd:4d:51:54:c8:51:69:
                    30:d0:cb:06:38:b0:07:49:e6:4c:87:08:7e:62:6f:
                    70:b3:1a:95:42:35:2a:7e:75:de:c9:d9:b6:8f:d4:
                    71:17:7c:36:f8:be:1b:2c:74:a9:ef:1c:bd:2f:7f:
                    fd:9e:a7:f8:5a:4f:74:d0:4d:a7:32:03:b9:fe:ec:
                    53:d6:ea:44:d5:13:59:ac:ce:87:9a:4c:e3:ae:d7:
                    9a:f6:0a:c4:02:ab:dc:96:db:17:a0:bd:17:45:6a:
                    6d:bd:ce:0c:02:64:96:27:34:29:c8:91:b3:43:95:
                    5d:73:af:3b:5c:24:a6:76:f2:9b:1a:6e:65:bb:d6:
                    c4:24:54:ef:1c:24:fb:ea:96:57:77:c8:ad:d3:40:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:47:7B:47:E9:F2:C1:6B:C4:91:DD:65:0A:EB:41:65:01:BA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:a2:74:9b:65:e7:b0:e4:42:5f:28:b5:a5:bc:29:ba:97:
         fe:ef:92:f5:1e:8d:49:74:ea:f5:cc:ea:ca:8d:5a:07:2e:43:
         29:60:1a:a7:61:5b:cf:4c:31:1b:c9:23:8a:be:f4:eb:d6:70:
         8c:af:6f:59:24:f8:68:3d:3f:76:8e:53:6a:af:2f:d2:20:fa:
         c9:1f:a2:a0:6f:72:9a:a6:6d:d9:ea:1b:a9:3c:08:48:5a:96:
         b1:4a:ff:85:9e:50:22:dd:0d:3a:2b:a6:1c:91:a9:13:ef:5d:
         b4:10:f7:55:8b:91:f3:46:c2:9a:73:2b:0b:63:ae:58:ba:4e:
         5e:d8:a5:cf:ea:90:20:f7:d8:6c:be:ae:5c:05:4e:fc:b4:95:
         3f:b5:25:26:ec:b2:65:42:57:8d:1f:5e:6b:e8:73:64:48:e8:
         7d:a2:58:b7:b6:d0:aa:67:0e:f8:6f:00:39:1d:14:e3:5d:67:
         88:15:00:5a:c3:f2:17:45:ed:b1:20:75:34:3c:d4:d8:b2:3e:
         a5:0e:22:76:82:4d:57:d8:a9:1d:fb:29:39:95:86:65:5c:85:
         2d:7c:ec:da:26:ee:d3:69:d9:ed:44:ed:0f:2e:98:5f:45:30:
         7b:ab:38:a3:02:80:8f:2b:73:1a:26:85:ef:99:d2:5b:fb:7c:
         e0:d6:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:50:32 2026 by rpki-client