Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/50c801a9-36ef-322e-849f-53a47293b9a3.roa
File:                     50c801a9-36ef-322e-849f-53a47293b9a3.roa (raw, json)
Hash identifier:          fPBl9zyWrn+zowu4O0wFXrbxe54EqgFB0xwfGjkY0PY=
Subject key identifier:   51:AE:08:F1:6A:BC:48:49:DA:88:3D:48:22:07:54:4F:3C:F6:17:12
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584DEF46067AF6A0EC169C8F8480
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/50c801a9-36ef-322e-849f-53a47293b9a3.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     8075
IP address blocks:        162.131.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:06:7a:f6:a0:ec:16:9c:8f:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=eea1bd62-ffc5-4243-bc09-4cb8e184464c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:d4:5d:65:b9:7f:78:d9:f3:f9:ec:50:d3:
                    49:30:1c:61:d3:63:15:ae:b5:07:c9:53:db:97:b8:
                    3a:35:98:e1:a0:ef:46:4f:e8:c8:c9:06:e8:74:77:
                    6e:3b:4e:40:8b:27:b3:9e:cd:67:cb:dd:6d:11:f4:
                    f2:f8:01:78:07:2e:c0:34:10:e1:bd:b5:cb:80:44:
                    85:82:6b:46:b4:33:df:bd:73:3e:4b:19:43:b5:0e:
                    58:3a:f7:de:2f:5f:52:74:aa:78:98:11:89:ab:59:
                    e6:06:70:b4:88:19:e9:de:e0:95:29:34:70:f4:d3:
                    a1:60:fe:26:bf:59:e6:fb:0c:3f:b2:04:b6:95:46:
                    b2:53:56:05:6f:a3:23:8f:cb:66:77:e7:be:53:97:
                    e5:09:74:ed:70:36:8a:54:31:d9:8c:07:99:e6:26:
                    fb:ad:9d:8c:a9:01:75:67:7c:d5:a3:1b:fe:eb:d2:
                    ed:f6:7d:28:6c:7a:8e:6d:9b:6e:4b:65:50:a7:c0:
                    5d:4a:ba:42:f2:ad:88:02:b2:0d:a9:90:98:c4:3e:
                    30:43:6e:84:e0:c0:15:98:10:87:36:61:cc:36:27:
                    c8:a4:9d:25:53:6d:e4:b1:9f:0d:8c:33:07:13:b6:
                    8d:1a:ef:44:a4:f1:ae:16:bb:fa:11:ec:a8:4f:5e:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:08:F1:6A:BC:48:49:DA:88:3D:48:22:07:54:4F:3C:F6:17:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/50c801a9-36ef-322e-849f-53a47293b9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.131.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:c2:ac:63:09:f0:9c:4f:49:58:60:52:2e:19:de:51:ca:
         14:a6:b0:b2:9e:bf:16:7a:97:89:c5:74:8a:47:5b:30:24:d5:
         e4:fb:9e:5c:2c:4a:f0:3d:b8:30:df:89:99:c7:33:d9:9b:53:
         fd:db:07:9c:56:d5:55:37:c8:eb:e0:0b:35:e1:a5:53:e1:4d:
         e5:b5:e0:65:99:77:41:3e:47:be:a9:06:7e:ce:b4:96:4d:d2:
         52:9d:36:5f:ab:7f:86:fc:87:66:29:6b:75:01:ba:29:65:e9:
         37:39:d0:fd:a0:2e:68:b8:1a:dc:f2:71:15:3c:b3:59:02:88:
         01:86:5a:b1:9c:c7:b2:9f:03:ec:fb:5d:ac:91:d5:43:8b:5e:
         6b:d5:f5:41:f7:aa:88:d6:dd:47:50:40:71:5e:d7:45:a7:92:
         4f:e9:95:e4:b1:01:c3:97:4c:f8:00:ef:f0:b2:24:d3:32:9d:
         30:a7:a1:6e:a9:10:3f:f6:e6:fa:07:97:df:ec:ec:5e:3f:94:
         7b:a0:c5:b2:16:08:7a:44:07:ce:f4:0f:ee:5d:0b:57:03:66:
         90:5c:99:4e:20:43:d2:33:c4:2f:98:2b:70:50:7f:f2:91:67:
         c2:33:79:dc:2c:a0:1e:0e:b5:a7:57:fa:0e:9f:92:f1:c6:50:
         a1:77:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:48:09 2026 by rpki-client