Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb72e726-1b05-3e90-9530-fe6c4af128ff.roa
File:                     fb72e726-1b05-3e90-9530-fe6c4af128ff.roa (raw, json)
Hash identifier:          hxfZFDyuRAHF4n8HcZX65i7f97lDMZ12gJLE04f5yko=
Subject key identifier:   6F:C1:76:90:78:8C:5D:65:62:44:86:17:89:59:61:44:58:5A:F3:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978D025721479DBB7865700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb72e726-1b05-3e90-9530-fe6c4af128ff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33667
IP address blocks:        50.203.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:d0:25:72:14:79:db:b7:86:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bb6a8a38-39ca-4b16-b722-4bb210513a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:34:4a:ba:52:a9:d2:bd:4b:c1:28:7c:c3:
                    b4:ad:8e:bc:d9:dd:6a:f7:d0:99:39:4b:4b:d6:47:
                    fe:99:ae:44:72:17:ff:43:ae:d1:7c:38:07:72:55:
                    da:03:83:87:3e:35:4e:1c:a2:9a:13:68:3d:a2:64:
                    a3:61:1f:37:3f:dc:82:0a:69:e1:84:4d:93:f0:9f:
                    74:fb:43:28:e4:6d:80:bd:ac:18:cb:9e:16:2e:a0:
                    f7:30:12:0e:c7:f9:9b:77:7a:3a:c6:46:eb:cf:8a:
                    43:9b:15:6f:8f:91:85:90:6e:90:8e:79:1f:09:b0:
                    23:4c:41:c7:15:3e:6a:1a:7b:eb:8b:95:48:2b:c5:
                    86:39:8b:8b:5b:8f:08:e8:56:1c:3f:9b:ac:4b:67:
                    a6:23:5e:35:af:0e:1a:f1:44:09:7d:95:64:19:e7:
                    ff:79:c6:48:c7:37:77:a8:cd:8f:d1:b1:a8:88:05:
                    76:6a:f7:57:b9:ec:2c:fd:35:81:f6:47:d0:ee:f7:
                    7d:57:c6:fe:da:35:fc:f0:02:23:54:3f:21:cb:f2:
                    22:36:4a:9a:46:dc:0b:ab:c3:3a:55:25:53:8b:90:
                    11:96:df:5b:d8:6d:75:9d:87:35:26:e1:b0:28:ff:
                    9e:3c:4a:c2:82:cd:9c:c7:05:86:74:cf:d9:ea:24:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:76:90:78:8C:5D:65:62:44:86:17:89:59:61:44:58:5A:F3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb72e726-1b05-3e90-9530-fe6c4af128ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.203.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:f8:c5:b3:01:63:dd:a1:d2:bc:7e:a5:d0:e5:39:37:b5:
         cd:ae:13:03:a4:ea:2d:62:1e:09:c8:0c:27:06:2b:0d:f6:46:
         5a:b9:13:48:0b:30:b6:a0:2d:17:de:eb:27:46:8e:d5:80:8e:
         f6:9b:e7:d3:29:20:95:58:d1:dc:78:7c:86:89:88:9b:ba:e3:
         bd:0e:17:dc:43:21:22:97:a9:55:af:d9:3c:85:11:b5:f9:0e:
         75:bc:be:04:00:f6:55:4a:89:19:d2:80:91:0f:13:1f:51:a1:
         51:7f:c2:b0:4a:07:44:5c:6f:32:52:5c:c7:45:fe:34:0f:47:
         72:71:df:ae:05:44:09:e1:4d:9e:7a:50:3c:f9:cc:36:f2:93:
         bf:db:bb:4e:b8:cc:74:c7:e4:96:97:e6:90:d6:bd:62:fd:24:
         3c:d1:25:83:a6:8c:6c:4d:d3:ce:c2:09:ff:98:26:8b:43:84:
         27:ef:da:5b:a7:7b:ba:a6:87:40:26:71:84:b0:9a:a7:b9:7d:
         63:3e:eb:c1:04:b6:34:b1:93:0b:40:c9:93:64:b3:62:66:21:
         a8:86:93:88:b8:bf:81:37:a6:ef:47:24:c8:d1:69:07:93:3a:
         76:e6:54:f6:81:92:b5:da:9c:1f:22:3c:82:6f:21:4b:bd:21:
         1d:b8:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:14:41 2026 by rpki-client