Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa
File:                     96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa (raw, json)
Hash identifier:          LiJzRxqpH1bu01bwTbYILcUFX7Bs3q4gIAc8iwyWB+Q=
Subject key identifier:   AD:57:C1:C4:44:F5:9F:F9:26:C6:5D:BB:91:F9:DD:DD:7D:47:3E:01
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E7FFA3316BA2F9EA3A85204A0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     29802
IP address blocks:        91.191.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:33:16:ba:2f:9e:a3:a8:52:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=9ee49f23-cc63-479a-a803-fbb7a864efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:13:9f:43:26:5a:7a:10:50:5b:ce:fc:b2:
                    c2:85:d2:68:7e:19:d5:87:bb:cb:89:a8:4c:9b:67:
                    70:b1:80:f0:73:3d:09:4b:82:92:4a:74:5d:b9:ab:
                    15:0d:b6:14:00:af:08:b2:34:ef:ca:29:1e:00:6f:
                    72:0e:e9:aa:f7:46:98:f9:fa:0f:66:b8:02:cb:f9:
                    61:b4:d7:2e:19:77:27:ae:02:7a:73:6b:fe:3a:a7:
                    98:3e:79:33:27:e2:8e:ea:f5:36:5a:1b:cf:88:20:
                    40:c7:f5:07:33:9f:6b:89:5a:0b:7c:40:bd:50:47:
                    fa:0d:a3:95:89:ef:eb:2e:be:6b:90:09:de:d9:d7:
                    ec:0a:2d:ad:de:de:16:f1:dd:0e:e8:84:6c:69:43:
                    71:54:36:e6:ef:d0:9b:df:91:91:05:63:bd:e1:33:
                    4a:cd:6e:b6:36:e8:7b:7c:0c:88:91:aa:12:6a:94:
                    f6:20:e8:6b:f7:f2:68:cc:6f:30:3f:9e:2f:45:73:
                    ac:3f:dd:c6:38:90:7e:c3:79:b4:7a:51:3c:68:6c:
                    21:90:60:32:45:94:b5:4d:e6:ed:e8:fe:7b:2b:d0:
                    1f:45:32:c0:0e:40:7a:f1:ce:3a:87:f8:8f:7a:e7:
                    27:3b:f0:78:40:c0:ea:5d:55:2d:6b:67:c8:a0:ed:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:C1:C4:44:F5:9F:F9:26:C6:5D:BB:91:F9:DD:DD:7D:47:3E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:cf:8d:85:67:2f:88:87:ce:9e:f2:67:2d:67:db:27:f3:
         fe:6e:d1:08:4b:e0:05:e1:c9:c7:2d:a5:fa:bb:59:02:8b:f6:
         15:a6:b6:c2:27:38:aa:7f:7d:be:65:23:f7:29:5a:90:45:76:
         00:89:64:a6:1b:2c:d0:06:34:10:4c:42:2d:32:75:16:50:46:
         9a:94:1c:da:26:46:cd:3b:66:81:6f:cf:22:ed:24:14:d2:7b:
         05:75:85:2c:59:9f:91:f7:a3:9b:47:fc:e8:2a:26:2d:aa:18:
         4c:03:ee:22:10:3c:95:4b:24:6f:4c:9c:dc:78:0b:1e:3b:d5:
         c3:6f:53:a1:b1:95:4e:c9:0c:e9:95:9d:0a:5e:ca:f3:c0:06:
         83:ca:7a:d3:66:a1:aa:80:1e:73:23:bc:8f:9f:c9:13:99:b4:
         d4:a9:2b:77:a6:59:06:b7:0b:04:d5:38:a1:00:58:8d:e6:bc:
         73:93:19:aa:2e:af:f1:66:01:5f:45:70:72:25:f0:c2:15:50:
         e2:9a:f0:38:c7:20:4f:b6:d8:72:50:a8:bb:63:03:64:87:61:
         ca:71:50:c1:b7:a6:c0:14:80:67:44:87:4c:5c:8a:92:8c:35:
         9b:85:52:e5:27:1e:7e:0d:eb:6b:90:0d:45:80:82:39:b5:e9:
         4e:52:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:16 2026 by rpki-client