Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa
File:                     11d9e6ae-0c24-3c07-adc0-46331017c63e.roa (raw, json)
Hash identifier:          xPlpuFxetKn5uWX0XRCNO+zj3v/0yKK5y/OMbwmZxWk=
Subject key identifier:   48:0B:FC:6E:40:94:94:03:FD:85:0F:D2:CE:51:76:7B:98:31:A0:FB
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584DA11AB679A1A8B5620B83BB00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     29802
IP address blocks:        190.102.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b6:79:a1:a8:b5:62:0b:83:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=550ee1b5-1025-464a-bf15-f1008e12874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:5c:38:1f:99:5c:10:f7:1b:3b:8a:ec:3c:
                    53:ac:e6:a6:0b:a2:92:32:1a:1b:37:b2:54:12:65:
                    12:17:ad:be:4b:9a:ae:dd:2a:4e:bb:8d:90:5c:40:
                    98:62:fd:d2:39:7f:70:d4:0d:d5:4c:d6:1d:a2:ad:
                    d0:40:c6:98:1d:87:f5:31:64:62:a2:b8:73:e2:c7:
                    6d:a8:3c:04:bd:ed:46:11:64:bc:cf:a5:11:15:90:
                    5f:f6:4e:71:94:6b:a9:f7:c1:f4:ae:76:dd:f3:7f:
                    91:a5:e7:1f:21:fc:23:b7:bf:df:e2:8a:c1:cd:4c:
                    93:39:f2:5e:ec:3c:7b:49:a5:6b:44:3b:86:5a:0c:
                    fe:03:ca:35:a0:91:33:97:a4:40:68:e5:4a:c5:be:
                    3d:ef:b3:48:4e:a3:3f:df:a7:50:20:56:76:39:0f:
                    29:2f:23:5f:67:68:ba:4d:10:74:24:d5:56:c0:22:
                    e1:8e:65:8d:65:54:e1:a0:de:93:69:d0:f0:4f:db:
                    d1:3d:e4:50:93:f2:fe:39:48:6d:31:9a:0e:0c:94:
                    1c:e2:e9:c8:43:e6:58:56:0a:e8:c6:9f:25:9d:e0:
                    3f:69:29:19:31:42:bf:91:11:1b:41:bf:ec:13:12:
                    fc:09:58:e4:6f:4c:3f:3a:a7:bb:95:c4:d8:92:76:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0B:FC:6E:40:94:94:03:FD:85:0F:D2:CE:51:76:7B:98:31:A0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/11d9e6ae-0c24-3c07-adc0-46331017c63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:4d:4b:3a:5d:79:f1:e1:af:90:59:fc:8e:90:12:74:d9:
         62:bc:9e:6c:d8:38:da:76:0f:01:e7:ce:84:59:60:ec:b2:2e:
         dd:00:30:16:ad:44:c1:52:56:09:1d:f6:e8:80:14:79:4a:4d:
         99:3b:98:e8:61:f5:3a:68:4e:a0:6a:e2:62:71:ba:68:47:56:
         d6:dc:78:96:1d:b2:bb:b1:58:c9:be:c4:ec:f3:d9:d8:1a:61:
         eb:83:7c:7a:74:d0:d3:c1:df:f8:47:c6:77:8f:3f:ae:5f:00:
         20:59:73:85:ab:70:61:5f:92:62:20:a2:81:b7:01:e7:03:d1:
         4a:f5:21:5c:68:17:db:88:52:f9:cd:cf:ec:73:f7:49:7a:ec:
         91:fe:87:a8:d2:47:fe:84:ae:90:15:cc:a5:62:ed:e2:66:8e:
         df:d9:4c:d7:05:b7:f1:8f:6d:ee:45:56:63:4f:a1:5b:ba:c1:
         30:bb:bf:3a:ed:6b:d2:74:51:94:37:34:30:29:49:87:b2:f5:
         d0:08:ac:92:ae:28:41:a4:62:f3:3a:27:52:6d:75:e9:8b:5c:
         02:e2:00:d2:c1:41:d9:fc:93:e4:d0:5d:09:06:db:71:04:fe:
         70:9f:20:b6:77:7e:5a:f3:9e:de:1f:af:ed:1d:cf:ef:5f:62:
         b2:9d:b8:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrZ5oai1YguDuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
NTUwZWUxYjUtMTAyNS00NjRhLWJmMTUtZjEwMDhlMTI4NzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1JcOB+ZXBD3GzuK7DxTrOamC6KSMhobN7JU
EmUSF62+S5qu3SpOu42QXECYYv3SOX9w1A3VTNYdoq3QQMaYHYf1MWRiorhz4sdt
qDwEve1GEWS8z6URFZBf9k5xlGup98H0rnbd83+RpecfIfwjt7/f4orBzUyTOfJe
7Dx7SaVrRDuGWgz+A8o1oJEzl6RAaOVKxb4977NITqM/36dQIFZ2OQ8pLyNfZ2i6
TRB0JNVWwCLhjmWNZVThoN6TadDwT9vRPeRQk/L+OUhtMZoODJQc4unIQ+ZYVgro
xp8lneA/aSkZMUK/kREbQb/sExL8CVjkb0w/Oqe7lcTYknYdmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgL/G5AlJQD/YUP0s5RdnuYMaD7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTFkOWU2YWUtMGMyNC0z
YzA3LWFkYzAtNDYzMzEwMTdjNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFY9TUs6XXnx4a+QWfyOkBJ02WK8nmzYONp2DwHnzoRZYOyyLt0AMBat
RMFSVgkd9uiAFHlKTZk7mOhh9TpoTqBq4mJxumhHVtbceJYdsruxWMm+xOzz2dga
YeuDfHp00NPB3/hHxnePP65fACBZc4WrcGFfkmIgooG3AecD0Ur1IVxoF9uIUvnN
z+xz90l67JH+h6jSR/6ErpAVzKVi7eJmjt/ZTNcFt/GPbe5FVmNPoVu6wTC7vzrt
a9J0UZQ3NDApSYey9dAIrJKuKEGkYvM6J1JtdemLXALiANLBQdn8k+TQXQkG23EE
/nCfILZ3flrznt4fr+0dz+9fYrKduM0=
-----END CERTIFICATE-----
Generated at Wed May 13 12:01:26 2026 by rpki-client