Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d2b6808-a6f6-364d-b8fa-61326a636cff.roa
File:                     1d2b6808-a6f6-364d-b8fa-61326a636cff.roa (raw, json)
Hash identifier:          v4zPQza6ibQN+KMTOg/a27KwQpsGyL9lZk7VaC/i8GI=
Subject key identifier:   90:DF:8B:40:01:FC:5F:22:44:88:A4:8C:BB:2A:46:3F:BD:DB:2D:E7
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F58CD567C87D9057B21AA74A0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d2b6808-a6f6-364d-b8fa-61326a636cff.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     1239
IP address blocks:        50.7.117.0/24 maxlen: 24
                          50.7.148.0/22 maxlen: 22
                          50.7.200.0/23 maxlen: 23
                          50.7.228.0/24 maxlen: 24
                          50.7.242.0/23 maxlen: 23
                          50.7.244.0/23 maxlen: 23
                          198.16.112.0/23 maxlen: 23
                          198.16.124.0/24 maxlen: 24
                          2001:49f0:d006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:56:7c:87:d9:05:7b:21:aa:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=3bd30727-110c-46e0-a424-dd768999ec63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:c0:17:47:68:a4:be:2c:3c:9e:79:11:1c:
                    74:a4:99:ae:32:f1:a8:e5:43:b6:15:cd:cc:83:2d:
                    d9:32:09:f3:ab:8f:31:d0:e6:15:30:e4:af:30:83:
                    a5:fc:2f:2f:2a:3f:63:18:28:e6:c4:a4:62:dc:e5:
                    f9:21:0b:a9:0a:a1:75:69:46:99:32:71:06:5b:cf:
                    a4:fd:4e:ee:72:53:41:74:b6:c0:a9:0e:d3:44:95:
                    07:f0:8f:40:23:f5:5e:c0:e9:1d:a5:b8:1c:63:be:
                    67:09:93:e3:e7:56:57:54:92:1f:e7:8d:b5:7c:a0:
                    99:ad:52:2d:c6:19:08:09:cf:3e:74:5e:cd:81:51:
                    a0:ce:08:f2:41:f3:4e:01:cc:cf:af:8b:d2:9f:b7:
                    6c:e3:8b:1f:44:89:b9:0d:b2:21:91:39:9f:86:42:
                    7e:5d:6f:f7:11:b1:78:61:a9:b4:b7:75:34:0e:01:
                    83:bc:6b:6f:20:f5:79:76:e2:56:45:e4:ad:eb:11:
                    9a:2a:c4:f1:1d:0d:aa:31:c6:c8:f3:85:e0:7a:45:
                    f8:3a:da:bc:24:4c:52:40:bd:25:93:e6:5d:da:75:
                    4a:3f:ec:66:14:dc:08:7b:c0:48:6c:b9:d6:5b:01:
                    de:c1:1b:4a:61:9e:2e:e1:da:0f:fe:05:06:43:cb:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:8B:40:01:FC:5F:22:44:88:A4:8C:BB:2A:46:3F:BD:DB:2D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d2b6808-a6f6-364d-b8fa-61326a636cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.117.0/24
                  50.7.148.0/22
                  50.7.200.0/23
                  50.7.228.0/24
                  50.7.242.0-50.7.245.255
                  198.16.112.0/23
                  198.16.124.0/24
                IPv6:
                  2001:49f0:d006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:df:5e:a0:05:5a:5f:17:2f:ee:81:7a:43:4d:4d:4a:ce:
         b0:c1:78:55:04:28:ad:f8:61:4b:f0:fe:86:26:52:f7:5a:47:
         44:c9:6d:af:2b:93:3a:0b:d4:4f:b3:28:ee:24:29:cb:89:ad:
         df:ee:ff:24:37:50:b6:44:96:aa:51:b0:26:50:bb:82:ee:65:
         8e:b5:47:aa:e9:5c:56:f0:98:c6:14:b0:fd:b8:21:80:f5:28:
         64:18:e7:72:f1:be:dc:0f:75:f4:6c:21:5b:55:17:b3:14:be:
         d5:7a:a2:2a:27:42:72:f2:32:98:e3:1a:4e:37:bb:51:26:68:
         48:83:e4:9e:73:57:3e:82:e8:bf:32:b5:88:af:2f:7e:87:bd:
         42:7b:f0:4d:0f:98:d9:10:07:7a:f5:7a:46:65:98:3e:8c:c2:
         b0:fc:41:cf:24:f9:13:d7:27:d3:2f:e2:61:f6:f7:c9:d7:11:
         68:83:42:77:e4:52:6c:ec:a5:8e:46:78:77:e6:60:17:a5:fe:
         84:7c:63:df:63:60:18:af:32:10:e9:76:ba:ef:ff:15:56:b2:
         26:41:5f:bd:fe:cd:d1:f5:e6:6f:78:ef:32:38:96:22:66:5d:
         f5:c8:57:3f:63:b9:20:93:1d:54:22:00:df:fe:62:4f:5e:5a:
         ea:70:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:26:15 2026 by rpki-client