Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
File:                     2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json)
Hash identifier:          lzRId/jNwIJcLLZOIH8S874+nKlaRII/49hOab4VGNQ=
Subject key identifier:   6D:98:E2:A3:1E:0D:D1:53:A5:33:41:7E:4C:D2:34:23:B8:69:EC:4B
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E815F8BA9DDE142C9AF41FC00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     29802
IP address blocks:        162.220.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8b:a9:dd:e1:42:c9:af:41:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=51e70d75-3732-42db-8afb-69a28f3be40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:f6:62:cc:4f:40:8a:2c:ac:13:8c:b0:c0:
                    15:24:54:96:e7:c6:d2:f3:f4:70:2e:77:2b:b4:16:
                    6e:c7:d0:b0:c5:4f:ef:39:c0:9a:bb:5f:e8:40:05:
                    d2:56:33:9f:4f:7c:be:9d:81:ea:9e:18:57:31:10:
                    3d:38:23:67:4f:cc:e5:e1:2f:d3:b6:9f:66:99:25:
                    e1:4e:e9:2c:bd:c2:95:70:c1:5f:64:1b:81:ca:44:
                    1e:fe:bd:49:e8:74:06:8b:90:60:af:dd:e8:f3:b9:
                    a2:51:47:8f:36:d8:34:17:28:c1:b2:66:89:f1:07:
                    b0:f6:d9:75:e3:af:e7:d0:44:43:20:67:dc:b2:8f:
                    32:c2:0d:1a:9e:48:5c:94:c4:69:00:a9:78:49:57:
                    23:b7:82:93:7e:bc:5a:85:0f:e3:95:6e:e1:5a:7f:
                    91:38:ed:a9:19:f4:19:5b:5b:5d:9a:11:8d:a4:94:
                    fc:2c:79:7f:67:bd:92:2d:8a:73:d3:93:a1:49:41:
                    ca:40:2d:9c:56:38:a4:5d:37:1a:52:04:10:a5:8a:
                    35:f7:ee:ba:ef:ab:eb:0b:ee:07:a5:dd:4f:54:ab:
                    91:06:85:f0:d3:5c:70:c2:00:ca:ff:ac:ed:5c:5f:
                    c1:65:1e:e8:b4:bd:8a:e0:50:96:45:7a:7c:17:01:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:E2:A3:1E:0D:D1:53:A5:33:41:7E:4C:D2:34:23:B8:69:EC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:b4:34:f6:b7:05:fe:8d:e5:03:bf:47:4c:be:75:2c:52:
         56:c5:f5:68:99:93:c6:7b:87:c5:6f:d1:12:29:a3:8c:a5:b8:
         bc:cb:7f:f4:10:27:2a:74:a3:f8:de:a7:e2:8c:d6:7d:93:de:
         a3:99:f2:5b:53:07:ef:ba:82:e9:53:1b:0f:2b:bd:a0:ff:1d:
         e7:22:41:a5:ca:8f:04:7c:78:e3:9f:38:ff:49:59:8e:77:32:
         7f:8d:e1:14:2b:de:44:41:0c:8e:3c:33:af:38:26:19:81:9f:
         ce:bc:76:c0:50:bd:e2:d7:6e:5f:31:8c:db:d7:4e:98:6d:36:
         b0:15:ff:9c:4a:35:e9:27:32:8c:8f:ce:78:f9:6d:cb:64:ba:
         d5:bc:cb:41:2c:64:48:ae:39:d0:e6:0f:dc:c0:3f:05:38:7b:
         12:94:2a:56:3c:8e:6d:d0:29:8b:e0:fc:3e:ca:ba:c1:88:8b:
         14:a4:a8:21:65:1b:6a:6b:f5:77:20:6f:a5:24:7d:21:6d:be:
         70:58:5c:65:f0:86:75:e6:16:8f:15:ec:39:69:36:44:63:32:
         bb:8a:b5:02:fe:c0:6e:85:e1:87:24:96:fc:9a:1c:8d:60:e3:
         3b:22:fd:51:fb:9c:8e:9c:9b:cc:58:ee:8a:0d:d3:e5:e4:c3:
         5e:81:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:13 2026 by rpki-client