Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4af61e5f-4739-39a8-ab83-ba1fe283255f.roa
File:                     4af61e5f-4739-39a8-ab83-ba1fe283255f.roa (raw, json)
Hash identifier:          40I6NZUYWYT/vKU0VeRocmLHWNqMp+uJwOoTV41L4Ds=
Subject key identifier:   16:C4:5E:9A:A8:3E:0F:19:C4:D6:1E:53:C8:5C:D7:BD:A2:20:62:4D
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584D3B34DAABC7C706D5144560C0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4af61e5f-4739-39a8-ab83-ba1fe283255f.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     14441
IP address blocks:        50.6.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:da:ab:c7:c7:06:d5:14:45:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=de1cd5b8-e354-4e55-9011-58f2b024a0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:24:6c:0b:85:df:7c:f7:ee:ac:97:22:8a:0d:
                    e5:67:02:b9:34:d3:b2:06:47:31:1c:4d:cd:92:8b:
                    a6:3d:5c:82:e8:0c:dd:c7:14:0a:4b:43:10:ee:fa:
                    1d:5c:b6:dc:9a:c3:44:b4:52:c5:1b:89:1d:73:be:
                    18:5a:30:59:32:cc:5e:d7:d3:85:0f:dc:88:11:97:
                    20:e4:71:0f:85:98:24:33:86:ae:b1:67:72:04:ee:
                    75:ce:2f:79:da:f6:3e:58:79:3a:40:63:80:cf:14:
                    62:6e:35:f1:27:96:f5:28:6e:d9:47:e8:19:a3:4e:
                    f1:07:c5:6b:d5:73:55:b9:84:fd:6d:33:45:88:b0:
                    ad:e8:25:f7:fb:60:d3:98:c9:11:52:c4:d0:e3:4a:
                    c6:ef:ed:ca:7a:8d:53:ab:af:77:33:dd:d6:4d:c8:
                    40:69:4b:eb:6f:7d:77:98:54:77:21:c3:68:e0:59:
                    5e:dc:f4:f8:11:1e:9c:f6:71:cf:c6:92:a7:89:2d:
                    ba:4f:ac:04:e4:20:b9:91:f7:e1:a1:ba:32:ae:37:
                    8e:21:ce:ed:7d:61:d3:35:e8:70:b4:21:df:df:ec:
                    16:7a:ad:4f:e9:6a:5b:63:31:36:4c:51:e5:05:fe:
                    b3:df:3f:f5:f2:41:a9:0e:32:54:0d:32:1a:4b:8a:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:5E:9A:A8:3E:0F:19:C4:D6:1E:53:C8:5C:D7:BD:A2:20:62:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4af61e5f-4739-39a8-ab83-ba1fe283255f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:62:42:8e:26:59:05:0f:6a:37:a6:2c:20:a9:26:a2:1f:
         7f:b2:22:95:ea:b1:32:0e:59:44:03:54:1f:93:fe:d1:f0:bb:
         1a:87:df:2e:3e:99:06:30:01:72:a8:3f:26:1e:0b:1c:90:4a:
         2e:1f:fe:7c:cd:b9:a1:8f:09:4d:ec:dd:a4:d5:b4:41:72:21:
         03:68:28:2c:62:46:7b:5b:b2:6a:5c:ca:4c:fd:ea:64:a4:00:
         fd:84:18:0d:b1:25:d5:27:24:09:01:97:0b:ac:44:5b:6e:04:
         55:83:4f:3e:b1:11:c5:46:8f:3d:01:db:ac:37:cd:3b:be:6c:
         99:99:51:d1:51:a5:74:fb:89:17:f0:b1:d0:7d:4d:48:41:81:
         94:83:b7:cb:60:98:bc:b3:9a:dc:a6:4a:23:3b:cc:26:ad:ee:
         ca:82:32:23:44:03:b1:66:0d:47:41:ad:d0:4e:4e:23:66:28:
         4b:c7:df:6e:03:b4:ab:c3:3c:19:59:63:6c:dc:e8:f6:fc:4f:
         ab:ef:67:10:e0:8e:df:26:03:ef:c8:ad:c6:3d:6d:a7:c5:66:
         bd:a5:8d:4b:89:37:5f:73:b7:dd:63:a7:bc:bf:01:cb:9f:09:
         47:ad:4a:e0:c9:71:37:43:8a:a5:71:b6:99:43:4a:c7:c4:ff:
         ed:6d:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:27 2026 by rpki-client