Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6f7ba636-4abd-3309-b6eb-05b042db0268.roa
File:                     6f7ba636-4abd-3309-b6eb-05b042db0268.roa (raw, json)
Hash identifier:          RkymaPVvFxZDTzEX9klW+FsiJVwsctrM+BxQ0dTfivs=
Subject key identifier:   89:98:A2:ED:0D:37:78:48:F8:5A:B5:9F:DA:B4:45:55:49:0C:DE:29
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584D386A340288044B0729A8E880
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6f7ba636-4abd-3309-b6eb-05b042db0268.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     19871
IP address blocks:        50.6.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:34:02:88:04:4b:07:29:a8:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=6218bbe5-b9b1-4e04-bdef-7c8879148a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:43:c9:77:23:bb:ed:70:95:12:52:db:b9:
                    41:8e:f9:ce:ed:e4:43:01:8b:a9:77:90:41:14:98:
                    81:d6:a5:b3:e0:30:3d:76:80:2d:17:3e:3d:50:c0:
                    03:84:5d:51:fe:cd:bf:b5:31:65:1c:a4:89:55:5e:
                    b8:e4:c3:bf:ed:77:88:4a:ca:e5:47:0a:01:25:02:
                    c6:b1:e9:ee:0a:9e:d5:8b:df:d5:ad:a2:0b:25:ea:
                    72:56:22:c6:15:cf:46:a8:25:9a:d5:79:94:5e:79:
                    87:c8:ab:20:6f:e2:20:4c:2a:8f:57:7f:2e:e9:f4:
                    d2:92:5f:bb:5b:52:9d:25:fc:f5:b9:28:95:c0:fd:
                    11:28:40:29:62:c2:7d:87:5c:ff:f0:b6:ff:53:68:
                    72:28:58:8d:db:38:92:72:7d:f2:23:c8:ec:25:0a:
                    98:29:64:4f:68:23:88:ad:ed:98:92:ed:a8:78:f2:
                    d2:70:9c:c8:9e:90:2b:74:e0:74:d0:39:a3:fb:e7:
                    b3:bd:08:77:9a:15:b2:57:0c:5c:fa:65:ac:eb:2b:
                    80:b6:04:b4:46:62:03:3e:de:f5:1a:9a:06:aa:d2:
                    57:b1:44:5b:6e:65:51:13:95:93:fa:ed:fd:90:f5:
                    13:93:f1:5b:79:dd:26:38:ae:22:c2:87:24:ba:0b:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:98:A2:ED:0D:37:78:48:F8:5A:B5:9F:DA:B4:45:55:49:0C:DE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6f7ba636-4abd-3309-b6eb-05b042db0268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:03:82:10:0a:39:6d:60:eb:1b:5e:11:00:9a:17:2b:49:
         f4:37:57:de:32:c7:92:2b:44:a3:6e:92:6a:97:94:79:32:6b:
         e2:4b:19:d3:fe:75:06:4b:32:26:c0:60:b2:24:fa:5f:5b:75:
         59:62:3f:6b:e3:5d:b4:3e:4a:2a:4a:da:e7:f4:32:2c:19:83:
         4b:48:b4:cd:b9:c8:ef:3b:b1:4b:4d:c1:3d:c0:83:72:83:85:
         21:ee:9b:3c:55:e6:e8:6c:df:5a:95:bd:c5:ed:f1:c4:a1:7f:
         62:37:78:27:dc:2b:f3:61:19:db:60:f4:dd:3b:30:eb:d6:f3:
         5b:3d:39:9c:2b:63:dc:17:d1:ff:fe:32:b2:d8:a1:fa:48:a1:
         e9:41:11:27:6a:c1:17:20:2a:38:13:17:3d:de:1d:26:9c:20:
         59:05:32:e6:9e:3c:d8:81:d1:ee:94:d7:7e:32:e3:76:ef:72:
         dc:65:77:fb:fd:95:52:82:ff:ab:33:87:a8:e5:a6:4a:4b:f7:
         fd:19:3c:b0:6e:26:c8:d2:53:87:33:3d:f8:62:15:9e:93:d2:
         a1:5e:dd:29:d5:15:6e:d8:73:26:f9:eb:87:0b:2c:b5:a0:a1:
         d6:cc:4f:13:d5:40:8e:d6:7f:55:69:62:13:e8:eb:4e:12:dd:
         d8:6b:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:09 2026 by rpki-client