Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7afec1b-af70-3c62-936c-7bf7e5d479f5.roa
File:                     a7afec1b-af70-3c62-936c-7bf7e5d479f5.roa (raw, json)
Hash identifier:          qd8wie9NJEoPOPgXyND4x59xMXyounHGLhJjZMerKvU=
Subject key identifier:   6A:35:C4:38:A6:2B:53:5E:CE:11:37:E1:CA:95:C3:F4:24:8C:00:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F5E62F0DAD48B4234BCAB7880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7afec1b-af70-3c62-936c-7bf7e5d479f5.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     18779
IP address blocks:        50.117.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f0:da:d4:8b:42:34:bc:ab:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6a4a1877-86dc-43ee-8afd-0db25b8e838b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:35:f4:a8:e9:56:f5:aa:ab:5c:4f:6e:8c:
                    30:c1:24:0b:27:2c:47:e5:58:5f:65:e8:02:4e:44:
                    7f:9a:d1:fc:8c:73:6d:f0:80:cd:6e:be:42:03:96:
                    e4:81:fa:44:40:7b:c5:c9:65:60:55:e9:9b:66:f8:
                    79:36:0a:a2:76:b8:4f:97:a9:9a:56:7f:50:07:7c:
                    a4:36:ac:bd:2d:9c:91:c2:03:7c:18:4d:9a:34:1f:
                    06:6a:cb:2d:33:c3:e0:07:97:c1:c9:52:32:77:dd:
                    19:01:56:06:72:c9:23:b2:28:82:d8:bc:e4:5e:4d:
                    21:fd:73:67:90:6a:bb:a3:79:54:4f:b1:81:13:5c:
                    43:50:fe:2c:4b:85:9d:ef:b6:f0:ac:8c:b8:e9:76:
                    f4:0a:d2:49:18:81:fd:c6:92:79:69:b3:00:4f:6f:
                    a6:de:e0:5d:23:78:1e:02:cf:58:7a:3a:c4:3d:22:
                    4f:93:65:a6:28:11:45:dd:78:60:db:5c:72:8e:36:
                    38:39:3c:d0:08:6b:99:31:46:3a:00:be:45:ba:be:
                    bb:2d:53:82:53:60:67:8d:aa:ef:99:c9:94:a8:48:
                    3b:84:ee:7c:cd:73:ec:0d:a3:6f:77:01:9d:77:98:
                    b8:2d:b2:10:b6:41:c0:cc:ab:35:f7:87:18:f3:ec:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:C4:38:A6:2B:53:5E:CE:11:37:E1:CA:95:C3:F4:24:8C:00:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7afec1b-af70-3c62-936c-7bf7e5d479f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:17:4d:ff:32:b0:63:be:19:6c:d7:ce:74:18:55:74:6d:
         17:1d:bb:97:69:2b:7a:ee:82:e5:06:77:74:5d:5a:d0:a7:7f:
         ae:7f:2c:1f:73:89:27:48:f6:bd:05:8d:26:a0:6c:37:32:aa:
         cf:1e:d8:f7:5b:b5:2c:36:e6:c0:6e:f1:7c:c1:20:02:74:f2:
         ab:77:59:b1:d0:5a:43:52:f2:7a:eb:47:e9:39:ac:c2:a3:e7:
         2e:87:7d:1c:71:c6:6f:70:6a:36:a2:75:a4:44:1a:73:c9:ba:
         9c:97:28:fd:1f:7a:f2:cb:18:9e:b4:be:e5:1d:8d:22:8d:89:
         cf:ff:79:4d:ba:80:b7:78:49:48:03:f2:6e:89:ee:e0:bb:38:
         7c:30:50:b3:96:5c:64:2e:c7:82:14:a3:48:fc:5a:0f:21:f5:
         d6:65:d8:4f:3c:c7:1b:f8:ed:ba:3f:20:48:35:e5:8f:fc:9a:
         8d:a4:eb:5c:bc:93:08:81:f4:0a:22:8a:0e:66:2e:35:9f:a1:
         db:80:f5:b2:59:13:46:d7:3f:de:bf:a9:a6:9a:95:45:8e:95:
         12:44:48:53:75:7f:d8:a6:db:90:90:41:06:c0:23:11:9c:be:
         4f:1a:3e:86:b8:56:3b:bf:7f:18:57:27:12:b2:b1:1c:64:0d:
         91:32:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:31:37 2026 by rpki-client