Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa
File:                     9f668b55-403c-3f01-a513-c3fdfe797f26.roa (raw, json)
Hash identifier:          JUT6uKGWm6h0iFfqnSuU7JkOiEtzGAX96e3uUFA88hk=
Subject key identifier:   48:AE:98:9C:46:21:ED:EB:12:17:F6:F0:08:43:FD:28:4E:35:D1:F1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DFBD5D3458B0976099EB5DB00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     852
IP address blocks:        50.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:d3:45:8b:09:76:09:9e:b5:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=2a8957d1-c66b-4a27-a521-3c5ca42dc2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:1b:61:48:11:87:7d:ed:18:2d:0f:16:a8:
                    3c:8e:01:45:91:c7:db:85:30:0a:e5:13:70:77:7a:
                    ae:12:23:c2:2a:28:0f:b8:73:46:c0:ea:13:e7:0c:
                    bf:95:2a:aa:39:7a:13:1e:c2:c6:8e:a1:67:10:0f:
                    20:79:e1:a8:b0:cf:95:a9:90:00:d5:ce:d9:08:77:
                    f8:0e:3b:32:7e:1a:28:4e:82:76:4f:2e:45:21:30:
                    30:78:29:f4:24:a3:6d:b3:9c:7f:f1:fd:d9:d7:16:
                    90:a6:8f:58:7f:1d:ee:f9:b6:3a:00:fb:2d:c7:33:
                    84:11:8a:b3:57:5a:69:ae:88:35:23:e5:88:d6:70:
                    d1:85:a1:92:91:f8:65:10:d9:94:a8:97:df:1b:29:
                    48:0a:52:28:66:57:61:13:23:b5:8f:1a:4a:69:ce:
                    6a:ee:6d:ac:d3:93:74:b8:b1:73:2a:26:47:09:76:
                    96:18:53:2c:82:ce:8a:d3:37:08:36:99:c2:14:1e:
                    76:62:84:29:54:57:3a:fb:ae:8a:21:c3:06:3f:cd:
                    b3:70:16:31:ee:58:95:d2:61:23:c9:69:aa:fd:bd:
                    c3:b7:e8:a2:ba:7e:8f:06:c5:9e:d4:0d:95:e9:6e:
                    36:cb:13:1b:6e:c7:39:5b:44:2f:09:9e:88:0b:a5:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:98:9C:46:21:ED:EB:12:17:F6:F0:08:43:FD:28:4E:35:D1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:e9:94:68:a6:44:33:f9:76:78:bf:b1:71:8a:f4:1b:e1:a1:
         1b:53:eb:81:d6:23:bc:e1:d0:37:31:17:b5:93:3f:03:81:fc:
         45:89:c6:b3:66:a7:e4:c8:1e:79:92:2f:35:d4:bb:a2:c2:a6:
         c1:1b:a0:79:a4:34:5a:19:ea:82:db:00:ea:6d:9b:28:f3:0b:
         2c:4e:8b:32:84:2d:70:f9:00:de:ae:0a:67:f1:d2:a0:0a:ef:
         02:e8:b8:be:e6:23:6b:db:ab:0e:2f:d3:05:f6:4b:dd:f7:4f:
         62:6e:c4:06:9c:d3:9c:9b:34:21:52:7b:b8:bc:cc:2d:dd:46:
         5f:f6:1f:be:b8:c6:d0:ee:8d:6e:9a:04:58:74:ec:43:94:94:
         fb:78:d9:55:39:49:47:ff:8b:e8:59:5c:16:18:d4:c6:f3:4e:
         5d:f5:ce:e0:a2:a9:a0:ca:a2:f3:e7:69:16:89:94:82:b2:fd:
         86:41:a7:b1:33:24:e5:da:ca:22:c9:80:b8:33:4f:b5:8e:99:
         c2:be:ca:e6:c4:c5:0c:c2:35:94:10:76:13:f4:bd:33:f3:bb:
         d7:5b:7e:e0:ae:c5:e1:08:43:c8:0f:9e:a6:dd:9b:19:f9:93:
         31:a8:b9:3f:a3:d0:dc:a4:98:8b:a8:1b:e4:65:e5:f6:da:1d:
         08:b2:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:49 2026 by rpki-client