Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fa0dc6dd-180a-37df-88a9-1c8353c00e0b.roa
File:                     fa0dc6dd-180a-37df-88a9-1c8353c00e0b.roa (raw, json)
Hash identifier:          YNP8TCWYtiuk4NYX9iW04dGHiAKLtE89XT540ScVdhY=
Subject key identifier:   77:63:30:03:A2:8E:5F:39:ED:E7:6C:A4:55:60:7A:72:AE:A2:04:BB
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E5BAF5793B24854D298734C80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fa0dc6dd-180a-37df-88a9-1c8353c00e0b.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        50.7.96.0/24 maxlen: 24
                          50.7.99.0/24 maxlen: 24
                          50.7.104.0/23 maxlen: 23
                          192.240.108.0/24 maxlen: 24
                          192.240.110.0/24 maxlen: 24
                          198.255.6.0/24 maxlen: 24
                          198.255.7.0/24 maxlen: 24
                          198.255.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:57:93:b2:48:54:d2:98:73:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=eecc0a74-253a-4ab8-bb34-2c1aae8eaf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:c2:19:b6:f4:02:12:2a:b3:bb:53:82:37:
                    dc:44:e7:db:59:8c:b0:74:35:d9:94:48:90:32:99:
                    4c:bc:6c:2f:bc:39:f4:7f:f6:ac:2d:5e:dd:7f:ce:
                    b0:4c:f3:80:1c:c1:d2:71:d0:14:c8:19:2a:73:72:
                    89:55:09:28:d0:0c:c3:a8:ca:50:61:44:17:e1:4b:
                    60:4f:a8:82:16:5f:ba:7f:83:73:0d:e2:38:dd:c0:
                    f7:12:ff:ea:93:30:87:35:37:93:2a:19:fa:e0:60:
                    fa:27:93:ae:f8:af:23:43:bb:84:33:1f:b8:ab:cc:
                    a9:fe:39:f4:0e:7d:7c:27:74:52:af:ac:6b:bf:0e:
                    9d:60:5b:a4:83:df:47:69:83:43:e6:c2:c9:27:91:
                    39:db:09:95:38:5f:c2:d8:8a:95:a7:2c:d7:a1:e3:
                    dd:78:32:8b:b6:24:77:7c:bc:62:5f:86:09:5b:40:
                    3e:55:68:41:7e:f8:11:05:ab:7f:d9:d9:fe:a1:bd:
                    e5:e5:91:3c:b4:f7:e7:d4:a2:c3:d9:f4:b5:ff:6a:
                    d3:ea:7a:5b:a3:3e:30:3e:bd:c2:c4:24:1b:a4:32:
                    36:08:d4:d9:69:e6:34:e3:ca:7e:35:82:ee:39:bb:
                    5b:de:9f:d6:4c:5c:58:99:46:67:c4:bb:f4:51:de:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:30:03:A2:8E:5F:39:ED:E7:6C:A4:55:60:7A:72:AE:A2:04:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fa0dc6dd-180a-37df-88a9-1c8353c00e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.96.0/24
                  50.7.99.0/24
                  50.7.104.0/23
                  192.240.108.0/24
                  192.240.110.0/24
                  198.255.6.0/23
                  198.255.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ab:00:d7:83:ca:15:e2:fa:b0:38:f4:7c:d0:d9:ef:e5:34:
         6d:86:9a:a4:c1:d0:51:3c:b2:77:40:d0:21:1e:33:98:3e:49:
         a6:11:da:19:ca:3e:54:6e:fd:3a:7d:be:68:cc:fb:8c:ee:cc:
         3f:4a:95:d3:58:42:4a:55:06:34:52:07:29:7f:55:30:35:69:
         ad:0a:51:25:6d:72:e0:aa:d7:67:b0:f4:b9:66:dc:cb:99:bb:
         78:6d:ba:da:c7:e6:d9:08:ee:bb:78:e3:86:d3:e6:f5:cf:22:
         45:1f:e1:a5:6f:88:90:4e:e6:5b:dc:6a:93:52:0c:dd:f6:0a:
         b0:b0:49:01:77:95:d9:83:75:38:25:d0:c9:f7:33:97:31:76:
         28:88:a7:8f:6a:55:d2:44:d7:8b:7e:f6:d6:04:8a:67:52:64:
         94:0c:ec:ed:82:ec:88:dc:29:bd:9a:37:50:e3:9e:ac:41:a1:
         48:fe:2a:b4:e4:3d:b9:9a:98:0e:1f:72:26:ac:71:a6:2e:aa:
         0a:17:23:5f:00:ae:39:72:8b:bf:9b:6d:a3:f1:c5:d1:0b:94:
         f4:82:64:27:2b:df:9f:73:17:f5:17:da:23:b8:71:68:39:82:
         88:ca:91:b2:ee:cc:3f:8c:fe:a6:4b:b7:21:f0:46:9d:1b:b8:
         75:28:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:33:14 2026 by rpki-client