Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
File:                     50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json)
Hash identifier:          6usMmaj6NDy0MEnWLn1tkpcOfP8ddwVQvuK8Rc2r5V4=
Subject key identifier:   4F:86:7B:BD:D7:4C:6A:D8:0A:87:98:03:A3:45:51:11:9F:04:72:C3
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F4328584EF87CC465FFD95D25D1B95500
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     32181
IP address blocks:        70.32.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c4:65:ff:d9:5d:25:d1:b9:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=4bdb64ec-c49f-44f5-b1d3-c43c87c0e97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:5d:8a:b7:05:f2:a2:95:b8:a1:73:ae:53:
                    7a:ec:0b:54:fe:88:21:1f:16:93:96:1a:3f:4f:38:
                    b3:13:ce:30:0a:12:b5:a9:7c:7d:c5:5b:bd:ad:20:
                    97:ed:6e:da:ce:88:87:d9:88:54:46:04:c3:76:13:
                    31:4b:e8:f6:8e:29:61:c3:1a:cf:5d:6d:96:19:37:
                    92:26:f5:4e:60:3c:1b:31:c0:a7:3b:46:ad:aa:e9:
                    73:68:35:82:d5:c0:48:6b:2a:d6:24:d8:65:c2:f6:
                    be:90:1f:1f:90:06:f8:75:e0:eb:f0:69:62:fd:81:
                    8e:59:60:ea:3d:11:d8:7f:01:01:25:87:1a:81:31:
                    09:e2:42:88:9e:26:fb:0b:e5:fe:15:59:be:6f:09:
                    5f:bb:19:5d:ad:3a:c5:91:d9:3c:83:84:ff:43:f2:
                    e9:8f:af:b6:b9:d6:ad:07:9a:ea:1c:e9:0d:82:94:
                    ab:d3:68:e7:65:49:3a:17:5f:06:2b:58:73:ab:2f:
                    67:51:54:a8:cd:d6:47:73:1f:fa:c0:b6:fb:ec:02:
                    f8:56:3a:02:06:26:d5:b7:1a:cc:f3:5f:36:4a:01:
                    d0:33:d9:80:d4:87:89:b0:4a:cf:ee:1b:df:90:4e:
                    bd:75:be:5b:09:09:75:e6:9b:b3:a5:c2:84:08:09:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:7B:BD:D7:4C:6A:D8:0A:87:98:03:A3:45:51:11:9F:04:72:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:13:6c:8d:93:03:db:f8:0c:2a:7d:6b:72:3a:32:78:af:
         e3:73:67:7a:fd:10:ae:4f:95:be:10:66:20:5a:fd:45:dc:42:
         55:3b:a8:25:79:7b:cf:29:3d:d7:1f:05:65:91:e2:13:b3:74:
         23:2a:80:eb:35:75:50:90:02:29:37:cd:a2:9a:21:fd:ca:7d:
         04:16:bb:6d:a1:25:37:bf:1b:cb:5e:b6:24:59:93:96:21:46:
         21:13:06:20:00:d7:e0:62:75:30:2a:e2:b7:4e:93:cc:6f:91:
         68:a4:0c:42:61:c5:8b:a4:f6:8a:77:03:38:5d:4a:c4:9e:37:
         e5:1f:53:e1:a5:ea:09:9a:d4:47:a5:70:4e:b8:d7:9b:30:ab:
         d5:9b:56:c2:ab:88:58:08:e0:06:37:a4:f9:b9:dd:a7:e6:f9:
         a6:33:a4:41:ec:39:c7:cd:17:c8:d7:a8:c0:6b:8c:f9:33:c5:
         87:ee:59:ac:60:d8:99:c9:65:54:07:be:1f:f5:26:49:4f:6b:
         ab:be:31:bd:c9:d9:9a:6e:50:73:67:32:eb:4d:59:de:bc:5e:
         e8:c3:d3:71:51:a5:ed:4e:9f:3d:d1:e0:4a:bf:37:22:21:65:
         9d:53:6a:a1:19:c1:7f:90:5a:97:e6:2b:bf:1e:78:60:1f:1f:
         97:3f:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:04 2026 by rpki-client