Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/de691664-e06c-3a58-8d53-fb68af2e8bb0.roa
File:                     de691664-e06c-3a58-8d53-fb68af2e8bb0.roa (raw, json)
Hash identifier:          7nw9FS5GXX9TOR8+KfR/JcqmQHzIsKkhLho0VUpW4nU=
Subject key identifier:   03:E2:BF:78:EF:A3:C2:98:CF:6D:5A:F7:1E:CD:EF:76:66:F7:42:C5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D186CFB4552A371A4979A5D80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/de691664-e06c-3a58-8d53-fb68af2e8bb0.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        50.30.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:fb:45:52:a3:71:a4:97:9a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=9a4ed077-8b64-4f77-a8b3-f3d3f5e6520b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c6:fd:c0:00:2b:4c:51:d4:54:08:45:b2:14:
                    3d:a1:18:f4:e2:be:44:95:0a:b8:f3:99:80:7b:7e:
                    6e:36:aa:91:36:3a:96:d2:d2:98:6c:78:42:76:dc:
                    bf:bc:ff:e7:e8:91:64:5a:de:1b:0c:aa:55:2c:fb:
                    1c:29:76:c8:3b:8c:96:02:b0:81:c0:d3:29:51:ef:
                    90:f4:5b:e9:f9:a4:3a:41:aa:70:59:ab:a8:94:5a:
                    3e:0f:68:e3:db:d5:54:5e:32:e2:d3:4f:7c:57:ab:
                    ef:45:c7:fb:f8:39:97:de:ac:94:a6:fb:68:6e:79:
                    d9:74:9d:e7:7e:74:cc:b1:8b:88:3d:23:f0:9e:50:
                    40:ea:c8:fe:dd:5f:b2:5a:70:6b:3c:1c:7b:ae:fe:
                    b7:da:65:62:7d:6c:42:5d:13:fa:91:c4:54:67:bd:
                    41:4f:29:ba:5a:3b:82:33:23:31:d4:8f:b2:1f:ed:
                    09:1c:e9:c0:da:bd:06:53:32:49:9e:24:71:24:e9:
                    a7:74:25:15:53:ab:c4:b1:ea:5a:5c:1e:0c:be:de:
                    0d:5e:d4:b6:c7:f4:95:16:6a:c7:e8:3c:ee:9e:61:
                    98:57:dd:f6:de:07:03:e7:db:cd:35:47:91:1a:30:
                    96:b2:ab:62:67:75:d0:df:24:ae:0e:5a:51:37:1d:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E2:BF:78:EF:A3:C2:98:CF:6D:5A:F7:1E:CD:EF:76:66:F7:42:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/de691664-e06c-3a58-8d53-fb68af2e8bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:3b:c9:fc:5f:59:de:0d:fa:20:5f:6a:0f:b8:a8:aa:1e:
         89:9a:84:c1:4c:50:ce:a6:84:ad:fc:c6:8d:fb:ad:08:61:32:
         46:0a:45:d9:fe:ca:ae:5b:86:ed:19:fd:08:58:00:86:ca:77:
         d4:99:17:fa:84:10:57:bd:ba:17:a7:72:10:7d:19:14:96:a3:
         70:96:05:76:06:e9:c9:de:81:48:4d:84:b6:6c:09:67:37:4e:
         de:84:8b:bb:f8:36:28:61:be:7c:41:ba:14:45:d9:16:2c:b6:
         69:e7:0d:59:21:94:df:0e:0b:bc:79:58:c1:e0:b5:92:26:b8:
         e0:e0:e5:ad:b4:97:12:86:12:d7:f4:86:7e:09:20:8f:d9:39:
         48:0b:e0:e6:3b:3a:58:e4:b4:04:3e:8a:f9:cb:2a:d2:f8:88:
         6c:db:4a:69:0d:c4:be:60:ec:3b:b2:83:e4:1f:65:a7:33:83:
         6e:ca:bf:7b:34:78:8a:9b:ff:6e:09:99:ab:96:2f:b9:38:b8:
         ed:c0:61:f9:10:3a:45:f1:5f:ac:59:d7:f0:fb:0c:ba:18:24:
         41:90:a9:92:8a:9c:d4:d3:9a:ad:27:4a:40:26:7a:74:f6:51:
         da:d2:2e:3f:b9:55:71:0c:89:a7:84:28:bc:c2:fe:77:cc:5d:
         d5:e6:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:52:29 2026 by rpki-client