Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9a93cc-a1e9-367b-a581-77492926e923.roa
File:                     0b9a93cc-a1e9-367b-a581-77492926e923.roa (raw, json)
Hash identifier:          3+PemY5MVkHlT8whYrx9pvANq9Lwa56Ek6LOv+hx3Ws=
Subject key identifier:   89:9D:AC:AA:0E:C5:BE:56:F6:ED:C2:D2:9D:5C:F2:B5:32:6C:51:52
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EEA9F69481A98DD012F97D8F0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9a93cc-a1e9-367b-a581-77492926e923.roa
Signing time:             Sat 22 Aug 2026 01:48:52 +0000
ROA not before:           Sat 22 Aug 2026 01:48:52 +0000
ROA not after:            Fri 20 Nov 2026 02:48:52 +0000
asID:                     31898
IP address blocks:        147.5.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:9f:69:48:1a:98:dd:01:2f:97:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 22 01:48:52 2026 GMT
            Not After : Nov 20 02:48:52 2026 GMT
        Subject: CN=be4837c7-0cb7-422e-81bc-ba8197543243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:1c:46:be:15:c4:b6:2e:8d:78:b1:11:c4:
                    0e:35:1f:53:42:fb:5c:a3:40:06:7f:07:d1:fa:4a:
                    bb:55:22:b5:48:2a:30:19:ea:f1:5b:13:a7:c6:c5:
                    f2:c8:11:dc:95:4f:1c:6c:45:a3:3c:1a:40:43:5a:
                    be:11:44:bc:ac:7e:c2:9c:d2:a5:58:00:da:50:f5:
                    1b:17:c2:91:3c:92:ff:ad:a5:cc:12:91:c2:22:a8:
                    65:68:4f:24:79:86:66:ec:b0:0b:9b:f1:db:d8:9c:
                    62:d7:9c:1a:5b:cb:60:11:62:93:ec:fb:4e:7a:85:
                    ac:c2:18:31:aa:26:eb:fa:b3:10:2f:9c:d2:b8:e8:
                    ab:0d:76:9a:a4:fc:28:de:3b:e1:cc:0d:bb:c5:2e:
                    79:bf:31:76:e1:8d:62:7c:9d:7a:a3:a3:da:c8:85:
                    4e:6f:8f:6f:50:d6:87:09:13:d6:95:8c:ce:19:9a:
                    bf:8d:79:e6:eb:db:53:fe:95:69:12:92:b6:3f:0a:
                    0d:c4:07:60:82:5e:c8:b9:5b:5a:0a:68:2a:14:06:
                    72:74:83:bd:c3:98:3f:3b:1d:6b:e6:be:73:e3:35:
                    1c:ef:50:e1:5c:64:64:6e:12:ab:2c:3a:cb:6f:c3:
                    6a:1f:12:68:0e:f2:df:90:58:2a:13:2c:5a:4e:ce:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:AC:AA:0E:C5:BE:56:F6:ED:C2:D2:9D:5C:F2:B5:32:6C:51:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9a93cc-a1e9-367b-a581-77492926e923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.5.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:21:6f:78:63:07:a2:3d:dc:76:07:43:35:48:b6:69:e7:
         85:35:ba:cf:46:32:16:02:b5:4f:af:7d:47:de:19:07:81:57:
         8f:ce:5f:11:8d:ec:67:4c:3e:14:9e:82:cf:70:5f:df:7c:6d:
         f9:cf:87:08:c6:48:7e:b9:81:13:b6:79:ef:17:54:fe:6f:1f:
         a6:85:28:32:5c:62:46:d1:50:44:ce:07:30:87:51:96:82:3e:
         e2:19:ea:e7:ed:50:9b:2a:fa:bb:f2:ad:c2:f1:6e:0c:1e:60:
         a6:1c:4a:39:09:64:1f:08:1b:6d:f4:f3:49:20:98:28:51:ba:
         88:40:64:90:12:ec:63:84:81:27:45:2f:96:ea:8c:4b:c2:ef:
         c8:af:32:fe:27:13:e1:37:5d:8d:51:3f:13:4c:c5:f1:8e:58:
         b9:e3:90:9a:59:0a:10:d7:a2:bf:bd:35:fc:64:e1:8f:04:90:
         20:36:5c:6b:eb:d2:15:fe:60:17:e4:80:a0:c6:7b:7b:87:f6:
         97:42:1b:31:13:2d:f9:e6:70:e6:04:2e:80:33:16:78:bb:6c:
         5d:06:e2:b4:8f:97:bc:31:3c:11:9a:45:4a:8c:d3:5f:05:a5:
         61:3f:ff:a1:34:d2:fe:d9:cc:f4:b6:6d:c1:72:96:5d:81:81:
         77:37:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:37 2026 by rpki-client