Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa
File:                     f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa (raw, json)
Hash identifier:          5SCMZNTVndRXk5hZSpLbPqocd1cNQH+AXXtOr+E+F1M=
Subject key identifier:   04:C1:7A:7E:EB:E9:80:5E:FA:DE:67:46:DD:6F:2B:74:54:11:52:7A
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D9E5006DE87769EC85E829800
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     29802
IP address blocks:        2604:4500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:06:de:87:76:9e:c8:5e:82:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=3b16a974-469f-45fd-a70d-6fdc66be08ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:4d:a3:a0:2d:20:3c:01:cd:03:12:25:fc:
                    2f:0f:b1:29:6a:22:83:92:0c:a6:9e:d1:04:83:86:
                    89:a4:8e:47:5c:33:d5:d2:df:72:a6:5b:33:7c:b3:
                    e9:b2:53:ea:1c:d9:4b:a0:72:43:b6:3d:c3:09:63:
                    91:31:9a:18:25:3a:bf:1f:49:47:e5:ff:0c:12:7d:
                    5c:ee:9e:90:72:c5:12:ba:12:e8:66:51:a1:59:d7:
                    cb:d4:49:66:68:7e:86:a8:13:78:4f:10:00:d2:32:
                    dc:b1:05:73:f6:c8:be:a3:9f:04:b9:7a:f3:56:c6:
                    9c:38:dc:23:f3:f1:4a:ba:72:4a:0f:58:4d:50:5a:
                    ec:2e:af:d3:3d:ca:3f:4c:07:eb:6b:98:e3:ee:10:
                    00:fc:82:9b:6a:bd:96:b7:99:5e:99:7d:bc:17:70:
                    2d:9f:06:f8:84:fd:fe:7b:b2:d4:40:5c:a2:b5:66:
                    e4:84:ed:a7:80:19:48:e0:58:3e:a7:62:3d:2b:60:
                    4c:f4:c9:0f:c9:dc:bc:75:1d:2e:a8:4b:1b:a5:09:
                    e4:b6:5a:24:e1:80:97:69:a9:00:56:5e:a3:7e:21:
                    ed:b0:53:10:58:3a:d4:b5:95:a4:76:34:c5:11:d0:
                    fe:3e:7a:d6:c6:e2:cb:83:b3:89:7a:e1:42:c8:05:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:7A:7E:EB:E9:80:5E:FA:DE:67:46:DD:6F:2B:74:54:11:52:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:ba:e1:3a:dc:dd:13:c9:56:4d:27:c5:32:15:b0:29:a3:
         6b:6c:5a:fa:dd:8d:4b:2d:5e:a7:90:ae:38:bf:be:51:de:e6:
         11:34:22:5b:5c:ba:23:2f:53:c1:d3:a1:38:70:ee:a6:eb:d8:
         de:67:1d:31:f8:8c:c0:57:f6:c4:49:e8:97:d5:1a:59:4e:5c:
         a1:ef:31:fb:c0:97:25:5b:82:76:c2:11:6c:63:8c:b4:ee:9b:
         42:e3:b3:8e:42:f3:e8:e2:f5:dc:50:ca:43:5c:05:10:3c:52:
         de:74:c9:03:d2:aa:78:cc:09:36:bd:0e:45:54:6f:5c:bc:b8:
         0a:17:93:05:26:b8:74:d0:d6:0c:f4:01:23:b7:04:a5:d3:e6:
         7c:fe:92:85:bf:85:8d:54:81:01:d6:d5:bd:63:a0:50:ec:8d:
         23:5b:7e:19:c9:83:cf:e1:9f:b2:ec:c3:15:b8:88:85:38:fc:
         f2:45:9b:e4:cd:9e:89:ae:e9:07:06:89:c3:f4:18:73:06:91:
         0f:2c:18:93:f9:c6:91:71:6e:9a:ea:3d:ec:85:46:48:f1:7a:
         c4:0a:3b:98:f9:82:d2:53:a7:f5:b8:c3:7a:12:ce:87:89:6d:
         15:b5:b2:7b:36:d2:2c:16:d4:2f:bf:eb:af:7e:28:30:60:27:
         bc:f9:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:19 2026 by rpki-client