Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
File:                     53f0c950-2235-3b19-b157-97c396c412bb.roa (raw, json)
Hash identifier:          cS80bsKIW0rQeeyI+1Uzz0WmuPys7SLHxWITuqmhg/4=
Subject key identifier:   EC:D1:32:0C:48:69:6B:C1:C7:52:86:B1:F0:B0:7D:69:49:88:65:96
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CF9B789F218738EB6098CB738
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     174
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:89:f2:18:73:8e:b6:09:8c:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=2b86feb2-5fe3-42ad-8b57-878bf86df71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:e5:b9:74:9d:8c:33:63:e6:ab:3f:80:7b:
                    23:03:d9:d2:04:c0:18:12:2d:a9:b5:ec:58:3a:8f:
                    e3:6e:e3:97:d7:fd:d8:0a:d9:06:36:dd:e9:52:a6:
                    70:7e:e1:be:4b:1f:5c:71:08:6c:4c:0d:35:6b:f3:
                    4f:33:1a:6b:e2:8c:6c:7d:4e:61:63:e3:00:9d:09:
                    54:5f:36:5c:e0:d4:b5:90:b7:f7:73:8e:ce:c6:c6:
                    12:4f:fb:2e:e5:db:9f:4e:a3:7e:1c:c9:2d:16:56:
                    b9:fa:13:4b:70:1a:3d:17:6a:2c:7d:9d:61:df:e5:
                    f5:99:a6:b8:21:54:7f:05:48:b1:e6:5b:c9:13:12:
                    02:02:da:37:a6:d6:23:d6:10:76:50:61:bb:0b:84:
                    39:93:67:d3:ea:c1:11:74:67:38:39:12:fe:6d:90:
                    a8:10:99:c6:59:d5:b0:5c:63:a0:9b:29:16:ee:1e:
                    2f:66:fe:e1:e1:ff:e5:c4:11:ae:36:20:48:00:8e:
                    05:77:26:69:e0:5f:a5:1a:2e:6b:7a:ad:d8:a4:5d:
                    01:a2:cf:7b:02:ff:17:f2:53:49:26:4a:94:4f:63:
                    8d:1a:92:6d:ff:27:4a:17:7c:df:71:e1:43:8c:51:
                    84:3d:00:8c:90:02:b3:c4:99:de:c3:92:ee:83:9f:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:32:0C:48:69:6B:C1:C7:52:86:B1:F0:B0:7D:69:49:88:65:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:91:d2:d7:9d:14:3c:05:78:56:9e:20:5b:70:f8:d7:24:87:
         71:e1:25:44:12:ac:14:3c:7d:b9:6d:42:06:86:9e:f9:f7:f4:
         13:0d:83:75:ad:c1:ef:42:d6:e5:59:1c:02:bd:08:30:46:70:
         38:50:b3:91:5e:0d:00:af:d2:b7:95:f4:9f:3f:b2:f5:fc:bf:
         6d:7e:16:8b:7f:fd:88:9a:08:0d:44:a6:04:fc:3d:0b:4b:84:
         16:1a:68:82:74:39:7a:04:d7:e6:49:4b:9f:c0:4e:1f:b2:04:
         d2:2c:23:f0:bf:b5:28:2d:2d:be:cc:24:a4:c5:c6:af:fd:bb:
         31:40:d8:4e:31:1e:45:04:04:74:fd:d4:bf:69:28:4a:78:2b:
         a5:3c:0b:46:f5:52:15:bf:89:a7:a8:53:55:95:18:7e:0a:46:
         ca:94:84:f6:09:eb:f9:eb:2e:3e:ab:65:56:49:f0:d1:19:4b:
         39:62:43:6a:bf:5d:1b:93:a2:3c:a0:ce:4b:f1:e1:d8:83:aa:
         c2:35:1b:0c:0b:6b:78:15:f4:4d:92:30:d7:62:0f:19:3e:ab:
         12:71:63:3a:19:a4:29:12:98:97:c4:cf:6a:89:80:2d:6d:34:
         62:c7:15:87:1c:8e:32:a0:49:52:7f:d5:f3:87:a2:a7:69:79:
         01:44:5f:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:59 2026 by rpki-client