Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa
File:                     76da557d-4967-39b7-97a3-654cbf44bf6e.roa (raw, json)
Hash identifier:          gP0D4C7a3k/70sjRlIk7Rjff/jSVWbYKbb/3t1k/1EA=
Subject key identifier:   2E:32:15:7D:34:6A:98:34:18:31:D0:BD:45:DC:E7:E8:E9:72:F4:06
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CEA5CD1965505C07D69F92F00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     174
IP address blocks:        50.7.2.0/23 maxlen: 24
                          50.7.26.0/24 maxlen: 24
                          2001:49f0:d0f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d1:96:55:05:c0:7d:69:f9:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=4db3367b-a6a0-4979-ace9-c728ba49c7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:23:83:70:20:e4:4e:c7:6f:bd:49:21:e6:
                    0c:98:03:c8:0c:f7:a9:52:13:1b:32:db:48:71:d5:
                    64:eb:51:91:34:eb:94:1a:ef:97:07:d6:34:05:b1:
                    07:94:a1:fd:0b:4a:11:16:4b:68:49:dc:b2:52:d0:
                    16:1d:db:41:d4:8a:f4:8e:92:73:7b:48:d3:ae:bf:
                    75:19:a8:fc:c7:48:bc:52:47:00:d8:53:cc:4e:46:
                    26:df:f4:fa:68:0d:13:87:28:cd:c0:c1:f6:74:64:
                    89:6a:fd:af:90:1e:27:d4:8b:3a:c6:1e:b9:46:c2:
                    b2:b2:71:00:0c:ce:bb:32:59:24:30:66:4d:f5:1e:
                    95:65:8f:36:3d:8d:7a:09:0b:31:1c:cf:d5:03:26:
                    85:26:a0:ee:31:8d:be:fa:98:5a:41:53:81:a9:67:
                    9b:39:3a:b0:c4:42:ed:39:58:db:ae:56:c0:c8:70:
                    a3:f9:59:10:90:5c:f2:71:b2:e6:a1:28:a4:81:64:
                    74:4f:2d:b7:0d:a5:7b:aa:f2:33:48:9d:4a:58:89:
                    e5:81:95:64:8a:ee:91:27:2f:e1:c4:cf:28:43:60:
                    66:e8:7a:7d:dd:a8:9c:e8:71:17:ff:4c:ee:09:ea:
                    a2:a8:3c:68:f1:5d:ad:ab:08:48:d3:8d:de:53:fc:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:32:15:7D:34:6A:98:34:18:31:D0:BD:45:DC:E7:E8:E9:72:F4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.2.0/23
                  50.7.26.0/24
                IPv6:
                  2001:49f0:d0f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:da:26:cc:3e:c7:fa:6b:42:56:78:f2:0f:64:be:86:9f:
         a5:91:0f:26:af:b1:83:62:6b:46:54:bc:5d:b0:cd:81:ba:97:
         89:91:0b:79:83:f3:9f:7c:d9:fd:4d:d4:be:6b:25:aa:46:61:
         87:d1:1d:e0:67:37:1d:a3:c3:09:46:76:90:aa:15:16:9b:19:
         a7:07:64:1c:53:3f:c1:21:f5:74:0a:09:de:ea:45:aa:9b:41:
         81:7c:c8:41:62:fe:06:f8:e2:29:2d:1f:77:4a:6b:d2:7b:5d:
         f7:a1:4f:54:31:23:9a:a1:69:51:42:e9:33:54:5f:67:fa:86:
         ec:51:b2:70:99:d5:a0:b1:d7:ea:33:d9:a5:22:14:22:f7:94:
         eb:6b:ab:9c:12:de:f6:f6:3f:57:b1:63:59:e4:df:53:dc:85:
         34:65:56:f1:e6:36:e7:de:65:dc:29:68:71:9a:5c:2a:41:af:
         95:91:5d:8a:05:89:6f:2d:32:41:7f:32:02:f3:0f:fe:e8:d6:
         b0:47:d9:5d:59:42:8f:9f:84:2f:c1:3d:87:f1:1f:09:08:af:
         23:90:90:50:ac:f1:d2:9a:09:cd:6a:d4:cd:77:37:a1:32:88:
         25:50:f8:b5:fc:94:87:c9:64:84:66:f2:88:1e:de:cb:8a:58:
         79:6d:85:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:32 2026 by rpki-client