Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25ab0e-bd79-30dc-aeff-fe04e417ea37.roa
File:                     4f25ab0e-bd79-30dc-aeff-fe04e417ea37.roa (raw, json)
Hash identifier:          WsG+vV9Nq70bz69F9NOAN1TxjivKY87xU/nXCG1u3FM=
Subject key identifier:   89:34:99:F1:05:E9:12:24:24:B2:66:22:EB:56:58:45:56:91:88:57
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA59CCA27242D863BB1C40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25ab0e-bd79-30dc-aeff-fe04e417ea37.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        50.81.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:59:cc:a2:72:42:d8:63:bb:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=9d461b10-a090-4b3a-864c-ec27d87ca93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:5a:e4:2d:94:e1:4a:df:5d:10:48:48:9e:
                    71:9d:a4:18:59:9c:cb:34:dc:c0:4e:37:22:70:fc:
                    b9:94:fd:6b:d8:45:40:84:34:4c:d4:fc:0d:40:3b:
                    c7:e1:ec:ae:cd:82:45:27:a5:15:cc:28:4e:c7:4d:
                    3e:0f:75:40:f2:04:91:e7:92:34:3d:ea:c4:aa:68:
                    5f:8b:78:49:a4:a1:68:cb:46:53:e4:49:46:04:89:
                    7e:1a:cc:56:8e:fb:6d:67:65:1d:78:fb:9d:f7:b0:
                    86:c7:63:56:3e:be:f9:85:69:17:ed:5a:d4:56:bc:
                    5a:9d:27:77:bc:6f:67:d7:3a:cc:c4:3c:c5:ea:c1:
                    16:09:69:6e:34:97:e9:6c:5f:f9:4b:10:7e:23:32:
                    35:fd:89:24:65:4a:9b:21:90:43:51:30:86:61:7d:
                    cd:25:5f:1a:51:4b:fc:6b:c3:18:67:9f:0c:9c:32:
                    01:8d:84:5d:a5:d2:80:9c:52:18:3c:80:d7:1f:7f:
                    54:51:c0:ab:6e:b7:70:69:d3:71:2b:15:ce:7f:10:
                    4f:c5:bb:d9:a2:e7:a4:a8:2c:fb:42:90:e6:92:b5:
                    b1:2e:27:45:18:ef:3f:d2:6a:73:f8:30:98:cc:db:
                    45:d6:06:da:67:51:df:7a:ed:aa:48:2e:61:80:51:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:99:F1:05:E9:12:24:24:B2:66:22:EB:56:58:45:56:91:88:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f25ab0e-bd79-30dc-aeff-fe04e417ea37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:46:25:cf:7b:b5:e4:28:92:2e:2a:ca:02:8a:98:a3:d4:
         5a:c4:51:dc:32:13:e8:57:43:34:d0:2a:32:a7:62:02:02:50:
         d7:7e:9b:e3:a8:b0:1c:9e:34:22:56:4e:6f:01:70:27:72:5f:
         dd:f8:f8:37:15:28:ba:73:26:4b:e8:30:5c:57:b8:c4:ef:ea:
         f3:86:52:3b:0d:0e:0d:a5:53:4f:5e:8b:fd:02:0b:b6:29:62:
         4c:33:52:de:ae:f4:da:d1:96:03:c1:ce:7b:a4:26:bc:8c:1d:
         f6:d9:6a:82:63:dd:5f:1d:b3:f1:59:c8:4e:21:d1:0d:18:52:
         a5:9a:9d:30:de:96:66:d4:d4:f5:db:65:e5:a9:35:bf:27:7b:
         39:7e:94:06:7c:25:c4:f3:ee:30:56:63:24:56:40:f6:0c:1e:
         ae:31:11:22:b9:59:35:f5:26:4f:f5:c7:d8:98:d3:68:a0:dd:
         e5:9f:a3:fe:8a:88:53:61:92:35:ec:f7:ad:08:50:e6:fb:c4:
         17:a6:35:1c:74:1e:2e:61:69:63:31:fd:b5:58:36:b9:3c:27:
         e5:4d:24:15:21:66:d0:db:1f:e6:b6:6c:2b:76:27:b4:4a:d4:
         0c:ad:04:01:64:43:01:c3:13:51:7b:30:ea:fd:08:44:ff:16:
         95:23:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:23 2026 by rpki-client