Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b08d4656-1967-3aa7-93b6-799cddbef0b3.roa
File:                     b08d4656-1967-3aa7-93b6-799cddbef0b3.roa (raw, json)
Hash identifier:          0OF4pGv9Fbc6QgdVxN1X0xIZwe4F5aMMtbyT31LFYBY=
Subject key identifier:   11:E0:B5:53:79:D9:EA:52:89:03:B8:11:E1:DA:1A:55:7D:EC:A6:D7
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CA5F7401F8BEE4AD461B66800
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b08d4656-1967-3aa7-93b6-799cddbef0b3.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     174
IP address blocks:        50.7.32.0/23 maxlen: 24
                          50.7.51.0/24 maxlen: 24
                          2001:49f0:d0e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:40:1f:8b:ee:4a:d4:61:b6:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=ea3a6d9a-8fb3-4b41-90f7-b76811b89920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:5e:71:d2:e7:04:9b:04:62:8e:b1:5a:04:
                    8a:1f:6d:c3:c2:95:d2:a7:5e:6a:28:1e:fd:88:13:
                    02:5f:05:dc:41:a5:cb:00:0c:72:53:68:65:a4:fc:
                    b2:c8:47:d6:54:5c:14:6c:8e:65:e5:8e:11:a4:18:
                    aa:4b:21:33:31:15:7a:a6:a8:5c:c7:b7:53:c4:94:
                    dd:8b:1b:8b:6a:b2:b5:0e:1f:60:78:f0:0f:ed:a9:
                    03:00:aa:d4:ea:68:9e:05:01:1b:60:17:e6:82:58:
                    1b:ca:6d:3f:ca:a9:c8:69:f0:8e:99:e5:d1:f8:2e:
                    ca:6b:3a:1f:2c:7b:07:73:6e:3f:35:ca:05:02:19:
                    a7:36:a1:45:43:19:cf:b4:ed:ab:46:c1:77:3a:32:
                    67:11:58:ec:a2:a6:50:8b:6c:60:10:de:f4:29:1d:
                    80:c5:a5:5e:d6:70:ff:4a:c1:93:5f:67:eb:f3:03:
                    4f:8e:e0:2f:84:78:04:f3:f2:a3:06:76:66:d8:0a:
                    8d:ef:da:42:cb:b0:5d:d6:e5:32:1a:a9:6e:5b:90:
                    4f:0b:2c:37:85:73:df:56:0b:ca:73:0d:a7:8a:d0:
                    6d:25:67:06:ff:74:07:e9:0e:79:49:9b:4e:1b:85:
                    e1:f7:d5:7e:09:58:29:3c:02:18:cc:97:13:af:a2:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E0:B5:53:79:D9:EA:52:89:03:B8:11:E1:DA:1A:55:7D:EC:A6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b08d4656-1967-3aa7-93b6-799cddbef0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.32.0/23
                  50.7.51.0/24
                IPv6:
                  2001:49f0:d0e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:aa:3d:1f:e6:fb:1e:ad:eb:9f:f9:a4:7a:12:0e:ca:9f:
         67:51:9e:d5:7c:d2:e3:61:42:02:95:01:8b:99:77:8a:7b:2c:
         c2:de:7d:ee:cc:36:ca:4b:d5:7a:e0:88:dd:27:80:f2:d8:8f:
         d9:bf:9d:5c:50:60:d2:20:5c:d8:ab:aa:d9:62:52:39:71:28:
         49:96:e4:e2:47:cc:50:48:0b:a3:33:ae:32:2a:33:2b:e8:4a:
         f0:9c:3a:c4:9e:e0:f5:e8:25:4e:e7:ba:e0:d0:55:fc:e9:bd:
         9a:88:8a:6f:0e:39:57:fe:97:d9:29:cc:6d:a9:14:f9:bc:12:
         0c:08:49:a3:3c:fa:cf:ae:8f:aa:d7:ba:3f:e1:93:77:28:b4:
         cb:a4:55:18:11:30:a3:47:6a:24:d7:83:2f:f5:0a:83:64:82:
         00:8d:8d:27:f0:61:a4:f3:7c:09:e9:48:e0:2d:40:6e:95:f3:
         4f:e1:63:85:0a:12:e8:e2:eb:a3:09:6f:2c:70:45:2d:bf:69:
         51:fb:e2:ad:f1:c7:7c:2f:3b:09:c7:7a:45:06:db:f7:91:f9:
         4a:39:d8:5f:5c:a5:27:1c:f2:e4:1f:e2:66:46:71:04:a6:0a:
         91:9b:72:c5:e9:4c:ae:44:7e:09:3b:48:dc:1c:e2:9c:ae:30:
         ad:b4:03:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:36 2026 by rpki-client