Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/08ec10b5-a33c-35b1-96a9-2432438e8ba3.roa
File:                     08ec10b5-a33c-35b1-96a9-2432438e8ba3.roa (raw, json)
Hash identifier:          i8qZW2d2HuUnOi6KczpkUUeOCh9iMu7/fFQP3smE1U0=
Subject key identifier:   AD:01:8F:18:39:18:74:3C:E8:BF:E9:45:E5:A9:03:E0:99:1E:0C:4B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D1B19E486CAC4288C6866A4C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/08ec10b5-a33c-35b1-96a9-2432438e8ba3.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        50.30.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e4:86:ca:c4:28:8c:68:66:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=8d83fff4-597d-4010-bd4e-9f4074256525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:dd:d1:2e:ce:f3:30:09:a7:f2:35:76:79:
                    31:05:d1:2a:e0:99:e5:72:e4:51:13:50:03:82:f4:
                    ea:78:ed:26:69:73:cc:1b:55:8a:ec:3c:0b:9e:18:
                    11:95:57:8b:50:9f:e0:b2:58:9a:db:de:ac:2e:a1:
                    e7:ee:dc:82:9e:70:52:f8:64:f8:5c:fb:e3:2a:7c:
                    06:d1:a9:0a:4f:6a:57:83:b1:b4:4e:7a:5a:80:ac:
                    0c:d1:8b:ac:86:95:79:4b:bb:a8:21:d6:76:60:d0:
                    57:fe:37:0a:c3:9e:77:6b:35:50:8d:ba:09:f9:4e:
                    5d:a1:27:80:18:f2:66:16:58:88:6c:61:b2:f1:40:
                    19:97:24:93:85:96:74:e9:9b:63:7e:b1:3e:1f:69:
                    47:0b:5a:12:7c:fd:09:a9:81:c6:66:0a:3b:a3:6c:
                    36:c6:f8:22:fa:0d:3a:fb:97:2e:b0:99:b9:95:a2:
                    50:eb:3c:3e:69:a1:2d:7d:5f:7a:ba:1d:d9:84:74:
                    e4:23:6f:fb:d5:c8:ec:99:12:b0:c5:58:c3:a7:3c:
                    b4:99:21:8b:5c:75:32:5e:ff:38:1b:33:6f:dc:32:
                    9b:c5:a8:2c:af:2e:5a:85:54:96:fb:3c:cb:cc:82:
                    89:de:e7:9e:4d:50:c5:b3:7e:4a:e4:74:91:13:b4:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:8F:18:39:18:74:3C:E8:BF:E9:45:E5:A9:03:E0:99:1E:0C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/08ec10b5-a33c-35b1-96a9-2432438e8ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:b9:7d:60:80:9e:4f:d8:65:be:ca:97:fc:bb:8a:e8:0e:
         a0:dd:0f:35:38:79:c6:fe:44:5b:9a:c9:b9:a4:5e:e8:60:a9:
         07:81:7e:9c:8f:63:e6:00:8a:8e:23:bd:51:6a:fa:bc:45:32:
         29:7c:91:0e:a4:9f:c2:f6:7c:94:34:51:b7:4b:bc:48:22:46:
         b1:35:10:cb:6a:24:2a:98:d3:3d:72:d5:52:40:31:55:af:81:
         bb:3c:0f:ff:47:df:92:46:cb:3c:a8:7f:1e:fd:f4:2a:e5:53:
         4b:b1:1f:eb:0b:2e:a1:43:4f:e5:9b:cd:11:30:ca:a0:70:e7:
         53:e1:f0:6e:05:cb:4a:aa:62:9a:ec:fb:bf:55:09:f7:c4:b6:
         fb:05:0c:93:f6:41:87:a0:f8:6f:c5:73:59:05:6c:74:17:0c:
         a7:46:44:dd:d9:69:62:a3:50:a0:01:fb:98:0b:69:4c:aa:8b:
         3d:09:55:be:da:f2:56:16:1d:77:9b:36:da:c0:23:28:89:aa:
         da:ea:7b:65:43:5e:16:5c:fd:ec:0b:68:b7:46:3a:4b:0b:b6:
         de:21:56:76:f4:30:4a:2b:af:8b:d9:52:6c:f1:a3:7f:79:29:
         bc:54:66:15:b7:de:39:41:e9:37:60:4f:3d:94:59:3b:a0:40:
         aa:60:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:58:26 2026 by rpki-client