Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
File:                     bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa (raw, json)
Hash identifier:          PO3kgNJpXg0YqZbz617sDr93uJg2TEE3TbT7gRzz2xE=
Subject key identifier:   19:84:61:C0:E7:15:15:43:06:FF:E2:98:63:A0:F9:44:3F:21:58:C7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74903E7A483841B05E300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        50.91.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:49:03:e7:a4:83:84:1b:05:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=cba4b83c-3232-40f5-a60e-3e62512b0467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:82:69:2b:b5:19:b8:04:aa:94:86:ab:14:
                    20:10:76:a2:e0:70:ac:5f:41:5f:ff:2c:b1:f3:aa:
                    69:85:5b:fe:a9:e9:af:24:e3:75:2f:0c:5f:de:32:
                    4c:b1:2a:fd:33:57:ef:05:23:2f:21:e0:01:cd:24:
                    3f:2f:09:94:22:59:d7:0f:84:d5:08:9c:6d:06:4d:
                    90:c7:94:f4:71:3a:f4:1d:d0:17:c1:13:de:c7:69:
                    2c:7a:e6:2b:31:cd:78:45:75:a8:60:8d:e8:58:2d:
                    43:30:02:48:82:15:c3:81:64:46:03:84:da:3d:a3:
                    76:a7:67:c8:ec:66:6e:08:21:fa:a6:ae:42:02:9e:
                    3f:c8:54:ea:3f:a8:a9:ad:9f:4e:e7:b1:41:68:93:
                    48:2d:25:7a:39:e1:1d:32:7b:35:79:6f:e1:78:7e:
                    4b:7e:fd:43:af:a7:e8:dd:30:9a:88:9f:1b:51:ab:
                    07:ea:04:2d:69:77:a4:05:dd:ee:c2:68:ff:d8:af:
                    6e:56:e3:56:3e:a4:61:89:70:a7:4b:cf:89:5a:7e:
                    dd:fd:db:b1:72:30:2e:cf:d7:a0:24:18:4e:ca:2f:
                    00:8d:5f:a3:2a:eb:94:e8:fb:de:d5:c1:4c:4f:e4:
                    3e:8f:31:29:3f:ff:a9:5a:c2:07:ae:1c:fc:02:b9:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:61:C0:E7:15:15:43:06:FF:E2:98:63:A0:F9:44:3F:21:58:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.91.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:fb:5a:e9:9b:9c:66:26:7a:8e:2b:64:df:9f:ee:c8:8a:
         6d:59:63:72:87:1a:3e:25:a8:f6:14:1b:99:72:32:23:12:44:
         08:15:26:49:c7:59:1f:0c:95:a4:0d:d2:9f:7d:57:c6:42:5a:
         35:0e:ce:38:8e:f7:48:30:ad:d3:78:e9:b8:e9:7e:be:1d:40:
         f7:ce:b3:17:97:a3:a3:f4:80:59:3e:c7:ac:65:1e:05:74:00:
         42:a1:38:22:d1:39:20:79:6e:1b:da:5b:8d:bf:70:68:e1:03:
         7f:e1:94:c4:1c:e3:46:57:07:b1:9b:b1:4e:0c:10:38:67:d9:
         f7:2e:85:70:3b:f1:f9:11:a7:30:8d:6c:de:b3:36:8a:ba:e6:
         3f:ed:e1:a0:4e:f3:05:4e:00:2b:37:a3:25:24:05:ba:e5:f6:
         ae:e9:68:98:8f:8f:95:15:f5:bd:0a:c9:c6:c1:71:e9:8c:d7:
         7e:4a:b3:c7:32:96:84:9e:54:fc:aa:fe:d6:af:4b:b2:84:33:
         66:f7:d1:81:13:98:2c:30:4a:2f:a1:c7:8f:51:a2:13:f8:c4:
         0f:aa:ab:20:a1:65:81:ce:59:7c:61:38:03:a3:ac:d3:0d:17:
         94:94:20:22:97:63:23:44:58:b6:60:63:b6:02:17:06:d8:59:
         29:a0:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:28:33 2026 by rpki-client