Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa
File:                     8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa (raw, json)
Hash identifier:          WK5Jw0TVkj16aZkuQ68iELAW532DkBZ9epnFIf2OC+w=
Subject key identifier:   47:F2:78:54:C8:74:86:F2:77:E0:CA:01:40:3F:29:96:FA:C4:ED:74
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E7FFA3393F8F2158BF8F8AD80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     54540
IP address blocks:        144.168.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:33:93:f8:f2:15:8b:f8:f8:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=f09a10e6-f851-4a43-9813-413fb49062c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:97:4a:51:fa:a9:e8:49:64:35:6d:1d:51:
                    c4:7a:e0:43:f0:d3:0e:1e:d6:1f:36:c4:ae:5d:92:
                    eb:65:41:da:30:d7:ca:ce:b7:39:85:73:4b:ce:91:
                    a7:0b:d2:0c:ff:1e:9c:47:04:4d:f2:34:d7:b9:ff:
                    d5:9e:f3:8d:9e:13:91:10:ca:43:c5:d8:ed:a9:78:
                    ad:76:39:aa:00:e3:de:32:eb:01:0d:6a:50:14:07:
                    36:0e:0e:3b:ca:85:07:ea:7f:7e:fb:dc:8e:7b:90:
                    20:47:a2:6e:26:97:71:52:99:9f:24:62:94:50:72:
                    20:e0:17:7b:8d:1c:38:80:7e:b0:3c:44:e7:bb:70:
                    95:38:95:fb:26:5b:26:29:86:ad:87:74:16:32:4b:
                    c4:2f:f5:6f:e0:72:7d:7b:7f:c0:17:b7:bb:83:45:
                    0e:de:bd:fe:63:77:32:fd:24:c8:47:ea:42:af:f5:
                    31:85:5b:5c:a9:c4:00:3b:d5:e0:ff:25:b0:8f:59:
                    85:32:24:76:2f:dc:68:3f:16:57:67:09:d7:7b:61:
                    20:8c:76:d2:69:76:dd:92:eb:5b:56:35:d0:92:47:
                    54:8a:ae:14:9b:4b:b4:18:61:40:ab:42:bb:f5:73:
                    fb:61:6b:dd:1a:f0:61:7d:0b:6f:6d:89:64:45:96:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:78:54:C8:74:86:F2:77:E0:CA:01:40:3F:29:96:FA:C4:ED:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8ae6ca94-2fa6-3a5c-9548-cdd5f3970876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:c2:98:ce:08:77:90:7d:df:80:fb:2b:1f:9a:30:49:70:
         44:ef:c9:bb:a1:68:71:af:a1:02:f9:56:9d:6f:b3:aa:af:d6:
         9d:c9:26:e4:5b:ae:c6:03:9f:97:8a:24:9b:11:78:d1:bc:cd:
         4c:94:d7:e8:21:20:4e:18:71:20:fb:28:b0:42:68:07:3e:c6:
         0c:3b:a5:57:2b:12:31:36:71:eb:99:2f:34:0f:b8:5a:69:75:
         0b:33:6e:d2:1a:e7:25:2d:97:71:3a:d3:48:15:e3:9c:99:7c:
         ae:3e:f4:4f:4c:b0:03:7b:09:c7:f3:9b:07:51:d6:d5:4b:20:
         57:c6:a3:49:d2:fd:f9:cc:71:ec:da:ab:85:1f:ec:65:5e:a7:
         a3:95:bb:7b:5a:be:34:19:84:74:34:a7:a0:22:2b:28:eb:cc:
         9c:2c:70:4f:18:d7:fa:26:64:30:ce:16:5a:6d:f4:02:cd:a1:
         83:8f:ea:b9:71:21:55:4b:ff:57:02:87:8a:75:58:48:bf:29:
         da:ff:c3:4b:fe:6f:05:5f:2c:b5:3a:2f:eb:ed:ba:bd:fb:8e:
         6a:85:8e:cf:c8:bd:98:d1:99:64:59:8b:f0:b5:d8:91:9b:b1:
         3d:06:3e:44:ed:a2:91:48:d3:a9:f2:cd:9e:22:9b:81:b4:d2:
         24:24:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:06 2026 by rpki-client