Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa
File:                     1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa (raw, json)
Hash identifier:          w5pl61kdbQhDd4lCt00A+NtAEv7O/pU5FGffu1ov3jA=
Subject key identifier:   32:89:69:55:EC:DF:22:E1:28:36:BC:29:BE:12:64:AE:F2:36:7F:CD
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584DA6B01158FF9BBEAAAD0BB440
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     10480
IP address blocks:        199.91.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:11:58:ff:9b:be:aa:ad:0b:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=53a2a858-a4dc-4314-9e4d-2c7fd12f5f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:e6:98:d1:8d:90:ab:b6:a7:fe:1a:30:c7:
                    f9:e8:05:31:25:a6:e4:a7:1c:83:60:81:7e:bb:19:
                    13:82:c1:e1:5a:1d:aa:83:1b:45:2f:55:ba:79:1d:
                    6e:be:7a:69:0c:cb:bd:52:bd:93:1f:ed:75:21:31:
                    dd:e3:49:cd:96:11:70:9c:9f:82:54:5f:b6:e6:1b:
                    b1:9b:93:e9:bc:f6:9e:0e:5b:b9:30:0d:7f:bf:65:
                    11:88:b1:96:50:fb:4e:05:ae:6b:af:7e:f7:1b:c5:
                    e8:a1:b5:7a:10:ad:e5:92:f7:47:e3:21:a6:f3:c7:
                    11:1e:48:fc:43:38:63:11:96:c3:1d:e3:29:2e:ae:
                    98:51:53:b0:14:59:7c:78:d4:a5:57:34:c3:c9:1f:
                    33:81:a6:a0:6d:14:7f:43:e6:21:c2:0d:1b:3d:03:
                    70:4e:96:3c:7c:e8:99:8a:ef:46:20:04:68:0a:42:
                    da:b7:4b:37:c0:38:c4:ec:2d:07:14:b7:e5:fe:88:
                    a8:ac:4a:03:be:19:61:e2:81:6b:e3:93:b4:a7:75:
                    19:28:81:6e:da:7c:bd:4f:cf:e5:69:59:fc:db:e4:
                    88:5c:e1:81:b0:b6:cb:5d:ab:07:b1:ef:fb:57:5c:
                    4c:62:cb:9d:6e:f7:58:44:8a:79:33:ac:81:3e:b7:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:89:69:55:EC:DF:22:E1:28:36:BC:29:BE:12:64:AE:F2:36:7F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1e3d8d50-a8f7-3d17-b5d1-7018d6601dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:40:92:7c:84:5e:13:a8:67:d6:b0:d4:b7:01:4f:dd:2d:
         85:f3:c2:35:7b:26:93:60:2d:bb:e2:85:64:22:ee:c5:8e:c5:
         33:de:7c:3a:75:cd:d7:aa:10:69:63:2b:b2:5f:29:68:a2:3e:
         71:67:37:ff:f2:af:f6:f6:c7:37:44:44:d3:da:d6:dd:3f:a2:
         be:43:f5:47:39:98:d0:69:18:46:6e:a8:59:a5:72:16:1b:0f:
         3b:37:d6:a0:57:77:70:c8:60:ea:0a:ca:32:9b:de:7a:2f:88:
         2e:b0:29:1b:22:4e:f0:5e:94:ad:0a:0a:94:e5:c9:64:af:9e:
         63:45:ed:8b:42:f5:25:38:1e:b3:dc:5a:00:36:64:22:7c:2f:
         21:e0:47:df:91:82:1b:6e:6d:1e:5f:7d:ae:9c:06:a9:96:18:
         07:bc:3d:97:7e:10:0d:2d:08:eb:b5:96:14:36:33:8f:49:9c:
         39:1a:4b:39:70:d9:57:4b:61:ee:48:72:71:2d:b0:e7:7b:82:
         6d:da:96:9a:f9:65:e0:06:55:81:75:96:12:2b:54:12:3c:a3:
         f9:f3:12:8e:86:bf:f1:b9:f8:56:28:1b:b3:c1:90:d8:c1:c1:
         da:7a:44:20:b5:c0:e6:8b:c8:56:a7:2f:ae:19:50:57:a5:00:
         98:b7:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:00 2026 by rpki-client