Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa
File:                     34f32e5b-41b8-3f88-a0fd-599b96182977.roa (raw, json)
Hash identifier:          8x23sTq6+754sBgKzo1VRP71he1CZQ1GgQJvr19MFoU=
Subject key identifier:   00:3E:DD:A0:D5:9D:08:E7:E5:70:94:C0:D2:B5:1D:E7:D2:8F:E8:0F
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584DDBBB240139C7BECE0E120380
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     61317
IP address blocks:        206.51.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:24:01:39:c7:be:ce:0e:12:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=187795e7-63b6-41f3-a079-a8342457cb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:6d:c5:80:d0:8b:97:8c:4a:67:29:60:0e:
                    3c:33:f3:00:3a:02:ee:fe:cd:8c:35:4f:ed:ec:c7:
                    9a:e4:9a:7c:77:1a:92:d6:f7:a2:67:c8:cf:d1:af:
                    d9:bc:8e:06:30:3d:98:14:0b:c3:68:6f:3f:0f:e4:
                    c5:c1:7f:53:17:37:00:3f:f8:45:34:9e:36:1e:2a:
                    5e:3d:d2:d6:cd:cc:f7:60:44:f3:ac:19:1d:05:6e:
                    6b:9b:6d:9a:bc:d9:84:d2:c2:0c:6a:d1:e5:7e:42:
                    7f:f0:51:4e:e9:08:4f:f2:e2:34:d0:fb:16:bc:c0:
                    dc:c1:5b:f8:f2:59:ad:0e:ab:69:24:6d:8a:ff:36:
                    44:68:10:6c:0e:76:fa:92:78:84:35:61:1d:b0:d6:
                    0a:6d:99:df:0d:6e:ab:fc:85:70:9e:1f:a7:c9:3a:
                    4a:56:94:70:3b:d8:37:4c:a0:bc:dc:56:8a:69:bb:
                    be:e6:e6:53:d2:9b:c0:08:ec:20:60:6e:5c:bf:6e:
                    21:52:0e:30:d3:da:e1:cf:ce:89:7c:ca:e0:a4:40:
                    ef:97:54:46:29:e1:38:8d:36:7d:9d:3d:76:cc:5c:
                    6f:22:c1:46:f9:98:74:df:c3:f9:5c:b7:30:fb:37:
                    69:3b:25:e9:85:3f:4c:1d:fd:0a:76:58:03:4b:bd:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:DD:A0:D5:9D:08:E7:E5:70:94:C0:D2:B5:1D:E7:D2:8F:E8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/34f32e5b-41b8-3f88-a0fd-599b96182977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:e6:f2:33:a4:e5:2b:07:32:1f:09:a4:e7:8d:da:28:c0:
         13:0f:f4:79:39:27:75:72:fe:7d:25:01:5e:3e:65:50:99:47:
         fb:48:73:bd:bc:76:d4:38:67:ef:8c:08:d8:19:fa:00:7a:8a:
         93:fc:4c:88:e7:7c:e1:d9:73:a0:53:2e:0d:66:76:f0:b1:08:
         48:a5:98:74:af:9a:31:c3:ab:b2:78:2f:ba:95:87:ab:01:19:
         5a:42:c7:a6:be:3f:c0:b9:5c:e2:ce:b8:dd:ef:7d:d3:a5:f0:
         ec:ae:b2:ca:5d:7f:10:86:6e:ed:f1:18:93:0f:6d:7a:cb:59:
         4d:fa:9a:ed:f4:a6:cb:65:9b:55:24:b9:be:e4:53:f3:a5:94:
         eb:54:56:9b:ec:7f:da:7d:0f:dc:b4:62:2b:2a:04:e2:a9:3d:
         68:3c:2a:64:c7:c2:d0:1b:e1:55:70:54:79:bb:cf:35:da:3d:
         a9:5f:a2:fa:1c:10:82:f2:71:d4:10:aa:c0:db:4a:fc:4b:58:
         34:3a:9f:62:11:58:0c:1a:d7:a7:11:b2:ef:85:ec:fb:83:7b:
         de:9c:b7:bd:13:fa:a4:9f:26:f3:40:88:aa:38:2b:8a:d4:3a:
         71:97:1c:16:06:49:39:78:b7:04:78:5d:22:bf:2d:a8:7a:7e:
         6b:2f:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 10:27:16 2026 by rpki-client