Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2eb1acf8-bd3b-3d3a-a8f9-b79da9189f41.roa
File:                     2eb1acf8-bd3b-3d3a-a8f9-b79da9189f41.roa (raw, json)
Hash identifier:          gMbTRtFYNjE4lOAxowMwVw0Ip8pgjaZ0cGIy2YqHZaA=
Subject key identifier:   F2:23:10:2F:64:73:1D:3E:80:F8:B0:64:8B:F8:3B:81:75:3C:A8:C1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DCAFAF0EDF70B72B05580BCC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2eb1acf8-bd3b-3d3a-a8f9-b79da9189f41.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     23473
IP address blocks:        50.30.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f0:ed:f7:0b:72:b0:55:80:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=12561501-2d50-4d8a-8ec2-c1c9b4e97f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:94:ee:99:89:4c:37:b1:88:4c:1c:f5:1b:
                    00:8c:b6:1a:67:b2:e2:84:e5:d5:62:a5:be:5f:16:
                    61:be:28:bd:b1:50:e6:9f:8a:01:7d:9c:18:c1:16:
                    e3:64:d6:cf:5d:f8:96:58:bf:1c:69:67:41:95:37:
                    8f:35:68:f3:55:9c:79:e3:ce:07:66:0a:ad:a7:bd:
                    38:ad:6a:48:9d:6c:51:f9:69:9e:08:51:63:29:8a:
                    2e:93:25:7b:bd:a7:6f:c1:7a:96:61:17:e0:cd:d1:
                    37:5b:32:25:41:64:87:a3:17:97:a5:97:ab:d1:b0:
                    ff:fa:6b:d0:41:ec:8f:d3:d8:7b:42:7a:5c:cb:8f:
                    a9:80:e2:68:e7:8a:06:06:eb:d9:03:85:c4:af:8a:
                    00:68:06:62:48:8d:78:d1:cf:2e:b3:f1:a4:ed:0a:
                    b4:b6:21:86:70:21:68:2c:6f:03:10:28:e9:a7:86:
                    b8:1b:0a:6d:63:56:b0:d1:e7:ed:96:ae:b5:13:a6:
                    20:44:a8:d0:35:d6:9a:17:31:17:8a:89:0a:bd:51:
                    88:e3:41:73:ce:e7:f0:e7:1d:68:a8:f8:72:83:22:
                    c6:1a:dd:92:ea:56:40:3b:f9:70:1e:c1:f1:84:a2:
                    5d:46:ba:29:2f:9a:54:4f:4c:65:f9:e4:4d:b7:ad:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:10:2F:64:73:1D:3E:80:F8:B0:64:8B:F8:3B:81:75:3C:A8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2eb1acf8-bd3b-3d3a-a8f9-b79da9189f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:9c:89:2b:92:9d:83:23:4f:46:52:56:6d:6e:8f:f6:65:
         54:80:10:e8:5f:c0:a7:56:fb:3e:d6:f8:dd:75:05:a8:a2:bb:
         c1:c5:28:63:73:4c:85:41:18:c6:74:ea:66:ac:dd:10:13:06:
         5f:db:36:90:2f:df:b2:2a:03:95:90:e6:b1:b2:1c:e4:84:b4:
         c0:f7:4e:78:00:ac:5b:30:94:2c:34:fe:a9:ee:b6:f9:ca:cf:
         bd:35:d3:9c:67:18:e5:fd:17:0c:0e:7b:bf:97:19:5c:a7:f0:
         c0:81:70:45:9f:e4:f8:cb:c5:d1:0e:21:dc:a5:5c:cc:d6:bd:
         e2:8b:17:73:34:5c:a8:48:42:cf:dd:3c:78:21:71:7c:f1:b5:
         2d:fe:b2:de:50:1c:ea:0a:ad:25:cc:2d:a7:29:16:fe:04:71:
         0d:62:26:78:7f:fb:e6:b5:00:7f:6d:d5:3c:a8:66:48:9e:dd:
         ea:4d:e3:87:9a:c6:2a:4b:83:01:a1:c9:d3:a3:20:ba:4b:99:
         aa:71:c7:b8:be:9d:d8:6f:78:63:f1:41:e8:f7:5b:7a:6d:1a:
         83:b4:15:7e:aa:74:92:e0:42:c5:3c:e4:2d:15:13:47:30:6a:
         62:90:36:08:20:13:92:32:ad:66:7d:cd:fe:37:7e:1d:80:d3:
         47:04:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:01 2026 by rpki-client