Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a6bf2697-7761-3819-ac06-3b2f7bdd2937.roa
File:                     a6bf2697-7761-3819-ac06-3b2f7bdd2937.roa (raw, json)
Hash identifier:          hswv+Y67uMFBpE7aYhh4am9laniBFBiU07hqnbsfsBw=
Subject key identifier:   AF:F6:38:B6:72:EB:BE:78:F1:EB:FD:D2:4A:BC:33:46:7D:86:37:BE
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584AFEE6A399F76979D62895E619
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a6bf2697-7761-3819-ac06-3b2f7bdd2937.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        162.212.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a3:99:f7:69:79:d6:28:95:e6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=f2cd8783-fecc-489b-875f-33c8175d13b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:e7:15:ec:dd:9a:a2:76:70:6f:0e:a9:09:
                    c0:d1:be:36:6c:34:a7:b1:b4:14:93:46:94:12:01:
                    5c:2a:2a:0d:5b:68:0c:33:80:0a:d8:b6:b5:43:aa:
                    09:5a:e3:5b:30:06:9e:f4:09:67:e1:58:b3:c1:a8:
                    68:61:89:0b:dd:70:9e:a2:cb:44:1b:42:ea:7a:ae:
                    fc:c3:21:f3:93:9b:35:b9:7a:58:ea:04:73:d5:fa:
                    6e:e2:8a:19:94:5a:2a:f5:72:45:37:e4:6f:f4:97:
                    ce:d9:19:05:5b:c8:e3:5f:a6:70:d5:53:64:ad:81:
                    a6:89:16:19:a3:b3:21:fd:3b:d0:35:20:96:c4:e3:
                    cf:bc:66:42:8c:bc:e7:63:7d:7d:bc:99:ad:02:71:
                    85:8a:d2:ff:84:e5:ec:8b:06:36:16:80:11:7c:ce:
                    e3:de:5c:be:89:2d:a9:9f:08:42:ed:b6:84:ed:bd:
                    73:5b:1a:b2:45:c9:18:e6:9b:40:7b:73:c8:7f:d0:
                    d8:21:50:6d:02:54:73:0d:60:2b:ce:58:94:70:f9:
                    15:f0:40:79:25:a1:27:76:91:16:59:e9:5f:4c:9a:
                    a6:df:19:77:f2:a0:11:b2:d2:8c:8a:1b:af:d5:60:
                    a6:f1:30:5d:c1:e0:2e:81:a9:57:22:89:a8:94:ae:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:38:B6:72:EB:BE:78:F1:EB:FD:D2:4A:BC:33:46:7D:86:37:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a6bf2697-7761-3819-ac06-3b2f7bdd2937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:62:dd:77:8d:a5:42:ce:fa:86:aa:17:dc:c5:23:c7:96:7c:
         88:d1:6e:d7:e1:9b:ad:c8:82:d7:f2:98:e7:73:17:45:51:fd:
         30:a4:3c:22:10:3f:de:9c:9a:d4:7f:11:02:60:54:91:09:92:
         b7:a3:fa:bd:fa:1d:6e:db:46:5b:91:8a:f9:0e:ae:6c:8a:27:
         bc:59:17:13:99:20:f6:03:88:f3:b4:bc:bc:22:5e:ac:05:f0:
         ff:ff:e7:ad:91:6f:b9:81:ec:ad:c2:67:97:c8:b2:3e:a9:8e:
         ff:5f:46:1c:46:1f:e2:ec:25:0e:8a:d8:36:ac:6d:a4:6c:98:
         d3:2b:7b:9c:f9:0d:79:86:29:da:0e:23:81:d2:8d:5d:c6:6b:
         44:a7:59:db:1a:31:12:b7:ce:cc:31:27:93:e6:da:58:29:fe:
         7e:3b:29:16:ce:b5:e0:ab:cd:bf:d9:b1:68:c9:43:0c:61:7e:
         48:c5:51:2e:68:6e:63:5d:74:d8:af:91:c6:a5:fb:b0:f2:06:
         71:2e:b7:81:96:5a:80:08:17:ec:2b:65:70:c7:ba:ec:e6:6b:
         03:91:a6:56:83:d1:7e:fc:2f:2d:4a:30:82:96:14:08:b7:31:
         ad:de:db:55:ba:79:59:b2:16:56:1e:b3:4b:e2:f1:3f:3c:cb:
         a7:9e:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 14:00:13 2025 by rpki-client