Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa
File:                     be2c2835-fa77-370c-8faa-62321153a639.roa (raw, json)
Hash identifier:          rPd7lfzKuBRQf9wmNLMX/Y/VyotpT3T2IsUsYMFejNY=
Subject key identifier:   2C:04:0D:B4:1D:BF:96:00:87:01:87:1C:14:10:CB:0C:47:2D:95:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4F1F60137703D236C760DD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        184.50.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:60:13:77:03:d2:36:c7:60:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=ce211541-a47c-431b-8f63-7dca4761d1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:62:10:83:7e:89:1e:ed:0e:3b:f6:c6:f4:12:
                    ea:8b:7d:39:75:4e:99:0f:56:4a:03:b2:f0:67:d5:
                    36:35:4a:65:b2:97:13:7b:42:67:f4:13:37:8d:ef:
                    43:09:c5:76:eb:d3:97:ff:dc:c5:33:ac:0e:1b:31:
                    8a:ac:ac:97:f8:c5:97:68:cd:66:90:91:cd:8d:5b:
                    9e:8e:1c:57:93:f4:4b:50:5f:a3:75:d9:a1:5a:03:
                    0b:7f:4b:a2:8a:4d:dc:c8:62:4f:7e:8d:8d:50:d7:
                    31:4a:59:9e:20:bf:5c:3a:10:0b:32:bb:5f:40:29:
                    8e:90:53:d2:11:a4:7a:2c:7f:0f:5b:0d:ba:81:75:
                    7e:9f:94:c4:1f:56:36:74:50:aa:3a:25:80:72:fb:
                    c1:dc:be:97:dc:68:fd:be:66:b2:65:d0:c9:30:20:
                    41:68:a9:50:13:a2:f1:d1:b9:f6:23:1a:f2:09:95:
                    08:37:5a:ea:c3:2b:d0:1a:73:10:16:18:49:c7:8e:
                    b7:0e:9e:66:b0:d2:a8:3d:78:27:c1:41:5b:a8:ce:
                    f3:dd:ff:f6:d1:b7:b7:f7:d0:dd:00:9e:9d:66:85:
                    dd:24:f4:67:5a:7a:3d:07:87:88:cd:a4:28:61:26:
                    7e:e5:96:ef:47:51:e7:90:dc:b2:ef:da:80:fe:03:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:0D:B4:1D:BF:96:00:87:01:87:1C:14:10:CB:0C:47:2D:95:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:57:0a:d9:86:13:73:f8:93:49:90:68:23:d1:a0:05:fa:fe:
         16:56:62:96:cd:87:4b:19:d3:76:54:6c:ae:94:9f:f9:ab:bd:
         e8:b7:64:f3:ab:b8:b0:6a:00:f6:63:0f:df:32:2e:f9:16:3b:
         de:e2:01:e9:59:56:5d:bb:89:cf:6f:f0:73:71:a1:34:38:54:
         49:33:60:b8:3f:0a:2f:d6:e3:6d:eb:45:86:58:19:0e:f9:42:
         f2:5a:33:41:96:f0:85:24:e7:67:0c:a6:db:ec:6d:ba:b7:c9:
         26:60:ce:cd:cb:23:6d:01:2d:04:00:de:12:52:eb:07:2e:57:
         7a:7e:9d:97:16:1b:47:4a:7b:44:33:5b:b1:7a:ad:4e:e8:9d:
         dc:2b:c7:5e:94:54:cb:c0:e0:04:e4:0d:2d:d2:ab:44:9b:5c:
         a8:46:57:6c:32:cc:dc:fb:47:55:28:9f:8d:d3:d0:c5:90:ff:
         bf:ae:b9:d5:e3:a9:d2:c5:7b:8c:71:14:e5:ab:70:cd:c7:b8:
         a8:4b:6e:08:b9:23:a1:fa:89:f8:4d:8f:7b:fd:93:c7:05:e9:
         95:de:92:40:07:13:9a:e8:b8:eb:16:fa:8d:98:7f:52:75:82:
         48:69:a4:c6:9b:af:69:ec:49:71:78:bd:95:04:83:d0:fa:cb:
         ca:87:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:43 2026 by rpki-client