Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/50f9e20d-28ec-31e3-8c05-a4d3b06e790a.roa
File:                     50f9e20d-28ec-31e3-8c05-a4d3b06e790a.roa (raw, json)
Hash identifier:          QyxFTfsWG5tAcHgqsdV8Buvs+XbtbVmI5C7TZIj+Grs=
Subject key identifier:   74:D8:3D:A3:B3:7D:F3:D6:1D:25:05:98:79:15:82:6B:49:96:1D:FD
Certificate issuer:       /CN=f5903ded-0596-4674-94c8-856dc82e8cbf
Certificate serial:       010D0C9F4328584D27AAC0C2A24D7C65CC022F00
Authority key identifier: 4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/50f9e20d-28ec-31e3-8c05-a4d3b06e790a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     18692
IP address blocks:        66.119.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c0:c2:a2:4d:7c:65:cc:02:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5903ded-0596-4674-94c8-856dc82e8cbf
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=19600c27-8fe4-4e7a-a8f8-dd572f5e1f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:d3:a1:b5:64:ec:1a:b6:b4:de:d9:bc:56:
                    f4:6c:9a:91:f7:a7:ca:fc:36:ce:12:ff:34:2d:8f:
                    19:34:bc:29:dd:97:3f:eb:c4:86:96:d3:4f:81:0e:
                    34:b8:53:7d:55:17:16:e3:03:1d:45:fa:bc:73:13:
                    d8:3c:94:50:4f:7b:2e:79:32:4f:48:d2:66:55:f8:
                    af:0a:44:36:e7:f1:59:a4:cf:59:1e:bd:58:65:19:
                    0a:c4:d9:08:53:1b:63:f1:f1:4b:69:21:14:a7:95:
                    d4:ee:4f:c5:a4:e8:fc:34:15:8e:7d:9e:51:b7:7e:
                    6f:a3:6e:35:dc:20:0d:41:b7:15:60:b1:e7:c9:f5:
                    64:07:ac:80:56:cc:57:ee:4f:43:ca:b5:71:a8:ab:
                    7e:4d:5e:63:5a:46:63:99:30:6a:91:84:9c:84:17:
                    34:3a:92:26:4a:0f:ba:69:fb:0e:6c:06:4e:8b:a9:
                    d2:d8:5d:4b:cf:e8:ba:1b:20:ed:dd:e9:32:00:c6:
                    4e:8d:04:54:21:d1:fa:9c:b9:0f:95:4c:6b:1c:66:
                    cb:21:7b:a5:58:55:a0:87:f9:ab:90:04:6f:b4:20:
                    2d:64:5e:fe:c9:a3:31:e7:7b:75:47:9d:b8:b9:bb:
                    e6:26:d6:28:d6:7a:d0:ba:30:48:1b:17:ce:02:a0:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D8:3D:A3:B3:7D:F3:D6:1D:25:05:98:79:15:82:6B:49:96:1D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/50f9e20d-28ec-31e3-8c05-a4d3b06e790a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:92:24:1c:5b:b5:bb:3b:63:e2:da:dc:e0:ef:29:d6:cd:
         d6:03:79:e6:13:1d:00:b1:9b:79:b3:6d:f4:2b:05:97:0e:57:
         91:75:3b:46:0d:01:e3:a6:6f:a2:4d:5d:d4:50:3e:3e:03:e1:
         24:d0:68:3c:19:49:b1:28:f4:be:7e:fb:db:8d:e3:a9:c1:ab:
         d6:c0:e7:68:94:69:1a:16:47:40:4f:07:5f:9d:a1:f7:34:6c:
         78:0a:3b:cd:0c:43:a4:79:d9:5e:b7:43:d6:9b:86:01:21:e4:
         a0:46:59:1d:d8:c0:4e:31:3e:e7:5e:78:3c:e6:02:78:cb:87:
         8c:98:94:51:65:41:d6:6c:80:c6:ee:ee:47:4c:ad:9b:ce:53:
         9b:7c:05:6b:6e:d4:d0:14:97:cb:28:8a:3d:cb:68:96:fa:09:
         2d:29:9b:c9:dd:c9:c9:23:5e:f7:bc:ef:52:72:f8:5e:1e:de:
         bb:8d:b0:a9:5f:a5:0d:0e:3b:98:f0:8a:7d:3a:9a:b5:94:e5:
         b7:db:28:c8:d3:96:fb:4d:d0:34:f8:59:ff:a2:3a:b1:3e:9e:
         f9:9f:7e:32:32:76:19:39:c6:92:2d:61:74:ae:9a:86:dc:a1:
         d6:fe:c4:b0:c8:c0:70:5e:ef:9a:c8:23:f5:1b:6a:c1:22:eb:
         29:58:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:28:05 2026 by rpki-client