Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa
File:                     83fddd14-2dd9-3b15-a71c-194b34405f05.roa (raw, json)
Hash identifier:          uPjvPlQQX4GIQYBrZ7ftSSTeYiGC4nUoNuh6/CARHdQ=
Subject key identifier:   73:06:AD:5E:2F:4D:2E:89:4C:B0:53:EA:24:E9:DF:D9:5A:7C:01:41
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F225D01CC6732F37F51C8F580
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        162.213.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:01:cc:67:32:f3:7f:51:c8:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=f31d0385-0632-4b9d-8283-96e99eb3998c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:ec:ad:a8:33:78:6a:27:ae:57:fd:78:a1:
                    c0:4a:1c:b5:31:27:bf:e0:39:b2:6e:53:51:b2:39:
                    45:0c:16:ea:96:03:1e:18:07:d0:4e:b1:95:66:0d:
                    dd:03:a2:66:c0:a7:ee:5b:01:60:e2:94:c8:42:6f:
                    81:28:04:71:a1:29:26:61:a4:04:d1:38:e5:d3:cb:
                    78:c4:07:95:c8:f4:ef:e2:7d:f5:39:b3:fd:a9:55:
                    9d:e8:73:e8:74:2d:f9:3b:2e:43:d9:ab:ca:78:d0:
                    a4:ff:26:aa:6c:1d:c1:f6:cf:d6:eb:c0:7a:41:71:
                    de:19:25:68:8a:9d:05:79:7b:67:93:79:be:b2:7a:
                    bd:7f:3e:b1:de:a9:f8:89:4e:96:b5:02:eb:c9:94:
                    fe:28:31:80:8b:bb:5c:86:d8:09:72:85:91:12:ad:
                    19:53:0b:cd:9b:d9:8b:78:4d:66:a4:3c:93:d3:c0:
                    40:42:71:35:98:29:05:3e:5c:4e:2c:db:94:f4:ae:
                    e4:42:23:f1:34:10:b8:a4:d6:83:59:c9:ac:8d:3a:
                    b0:65:e5:a4:1b:b6:bc:b0:8e:26:81:bc:f7:ca:f8:
                    95:6b:f5:88:fa:0e:25:b7:85:83:08:f1:25:68:f6:
                    06:94:fa:b7:d7:60:47:8e:9f:dd:90:a5:16:e8:b4:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:AD:5E:2F:4D:2E:89:4C:B0:53:EA:24:E9:DF:D9:5A:7C:01:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:7c:b2:63:88:d4:2c:70:28:42:e6:58:b7:8e:14:79:a5:
         0e:df:b2:7c:bf:d1:e3:fa:e0:6b:70:8c:b8:2d:48:59:7b:49:
         28:74:47:08:81:24:7e:e9:cb:c7:09:6b:b8:1e:8e:5f:2a:b2:
         f5:36:9d:c5:ba:de:0e:43:2e:6a:26:08:02:99:b6:ea:07:f7:
         4d:f3:28:7a:04:b5:09:29:f3:72:07:ac:f9:1c:6f:86:41:6e:
         4b:04:42:e1:57:4c:68:6b:a9:d7:4e:f1:fe:0d:55:79:a5:a9:
         fe:2d:20:13:f4:7b:99:80:ac:ff:18:eb:ac:5b:22:2b:19:f2:
         84:44:a1:24:a0:77:b7:2c:2e:43:0b:fc:86:7b:8d:08:db:40:
         3b:63:0f:a2:5e:57:3b:17:45:3e:9b:a2:0f:0f:a7:89:d4:9c:
         1e:47:df:1c:e2:26:73:3a:f0:f3:f1:eb:09:b8:1e:a9:1e:9b:
         8f:b1:2e:e5:79:31:b7:12:6f:0a:c8:19:b1:db:70:b7:ab:a6:
         c0:ef:58:86:82:c4:a1:fa:79:fc:e0:c3:62:0a:44:41:64:98:
         38:47:31:28:fc:15:11:c2:7a:0b:58:bf:fc:6c:db:a8:00:c8:
         0e:cb:da:f8:cd:5f:4d:33:9d:f2:f9:55:0b:58:ed:d3:10:0e:
         e4:f5:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:52:46 2026 by rpki-client