Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efb5f246-93ee-370e-988d-e1bc293ed10b.roa
File:                     efb5f246-93ee-370e-988d-e1bc293ed10b.roa (raw, json)
Hash identifier:          UKzNJVphaMWnHYbhClM0jsNoEDLodbAQnIM3EOeMwVU=
Subject key identifier:   89:41:AC:9E:15:CB:8E:2C:B2:9B:03:EC:89:89:DC:73:69:28:2F:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF92B258868D9B3247C9C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efb5f246-93ee-370e-988d-e1bc293ed10b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        50.83.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:92:b2:58:86:8d:9b:32:47:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=98c9b3d6-4a4e-4a6c-9097-df24379536cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:20:a0:c4:7a:7e:e1:ec:a2:ab:25:a0:24:
                    3d:69:86:e4:ca:b2:1f:a8:35:79:a3:b7:68:e8:84:
                    77:95:31:cb:bf:36:44:9d:c4:f2:ca:32:ce:3e:99:
                    d7:af:47:7b:c7:07:d5:36:75:27:96:c3:dd:2c:ce:
                    31:64:ad:3b:dc:ac:a1:07:4b:33:ee:80:6f:67:96:
                    cf:ec:24:0f:a6:cd:c7:ff:cc:0a:e8:93:34:5b:73:
                    f0:16:9c:7e:90:d2:9d:a5:0e:28:10:4f:d8:e0:a6:
                    e3:56:ec:d1:a5:74:49:69:6c:30:16:14:5c:ba:9d:
                    9e:9e:42:02:cf:d7:b3:eb:c7:5d:d0:ae:d2:7a:38:
                    b7:3a:2c:e5:0e:ea:55:71:df:49:46:9d:52:46:41:
                    25:ff:6c:f9:78:f5:34:ad:88:f1:55:78:f5:a7:50:
                    9d:f4:8b:42:d6:a2:2a:67:8d:58:2b:99:73:6c:74:
                    ec:e3:68:ec:83:e4:26:cc:64:60:73:24:18:26:f7:
                    cc:01:d4:92:9b:94:10:d5:e1:01:ed:f7:98:6d:13:
                    ed:bf:11:5f:2a:b1:dd:c5:5b:de:6e:e5:a7:c9:9d:
                    bb:8a:d6:ad:49:21:1a:ea:12:da:b6:53:7c:52:c4:
                    23:01:98:1e:eb:41:d8:2a:35:b5:dd:24:fc:2f:57:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:41:AC:9E:15:CB:8E:2C:B2:9B:03:EC:89:89:DC:73:69:28:2F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efb5f246-93ee-370e-988d-e1bc293ed10b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.83.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:98:ef:ac:af:13:5f:f9:04:ef:2b:65:a3:1f:dc:3f:19:88:
         e3:b5:cd:6c:21:c4:ed:8c:78:e7:2e:cd:89:e0:46:d6:60:54:
         a8:9d:44:e6:1c:0d:bb:02:10:43:d9:f4:ab:45:5c:47:a7:23:
         b4:4c:dc:f6:5b:1a:77:e6:ab:68:f0:bd:aa:6d:6d:37:88:a0:
         dd:90:3a:94:c1:1d:a1:e3:08:84:91:42:1b:20:8e:9e:98:0a:
         47:f3:c3:db:10:62:e8:5f:a9:f3:95:41:15:9b:e8:fc:8f:86:
         2c:c4:a8:29:aa:7f:05:a9:d8:30:93:52:dc:e1:64:59:2e:87:
         f6:c2:9c:81:15:22:a3:da:af:ad:61:fa:22:74:da:9d:7f:d5:
         4c:14:ae:9d:a6:c5:3b:9e:d7:90:c5:2e:3a:51:95:66:b3:bc:
         3c:ea:e0:e9:fb:55:89:46:dc:d5:ec:e6:51:ed:bd:3c:96:ff:
         10:3a:d5:4e:7d:c4:ae:94:91:46:01:57:50:3d:d6:61:4b:66:
         31:09:2b:ed:75:0f:82:d1:13:96:30:12:4f:61:d4:99:ae:65:
         32:3f:f6:41:45:2e:f5:88:23:fd:74:42:c9:84:91:d7:55:41:
         0c:59:8e:9b:5f:8b:1a:f4:91:7f:dc:dc:4b:18:98:a2:f8:55:
         79:93:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:18 2026 by rpki-client