Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa
File:                     50923d47-0555-3840-9840-1691b555729e.roa (raw, json)
Hash identifier:          0OYkXT86IV5OgaEF2hxaeONus+bNt8eIFJNYv74NPpk=
Subject key identifier:   AE:C5:FB:BD:A0:19:91:98:87:1A:74:8F:7A:CD:44:F2:B6:8F:4A:4D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D44FA2AF0F586DD6ED30A8600
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     0
IP address blocks:        199.37.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2a:f0:f5:86:dd:6e:d3:0a:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=70855c77-8bb6-4afd-84da-56f6e6416574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:5a:35:5f:2e:b9:2f:08:87:02:6f:dc:8c:
                    d9:0e:dd:74:ae:d8:3c:07:e9:87:3f:6a:9e:a4:4b:
                    34:cf:f8:e7:1e:6d:e0:45:7b:fd:ab:b7:a4:ca:f0:
                    01:6d:89:04:28:18:cc:de:be:d3:1c:58:02:35:af:
                    93:39:6d:cd:5a:33:3c:f2:c2:32:ee:ee:22:e4:f7:
                    3b:56:ce:2c:9b:8a:5d:e7:09:b7:c8:a7:f3:72:56:
                    1c:5f:45:9f:5b:af:4b:b7:ab:cb:2c:dd:c5:76:1c:
                    00:5d:3b:34:e2:21:9e:bb:b8:cc:c0:64:39:e3:3e:
                    7e:df:1c:ed:51:d0:67:7f:3f:ef:87:a4:68:c3:03:
                    95:5a:9c:a6:b2:de:69:43:d2:3f:f1:3a:27:21:81:
                    18:3c:d6:c4:2e:a4:46:69:06:a6:d9:c8:fc:b1:b5:
                    b6:52:fe:13:09:29:58:0e:f3:a3:f4:12:1a:07:c5:
                    fa:b7:71:25:f1:10:3f:8d:9e:65:a0:97:30:ca:a8:
                    3b:d3:b8:85:29:97:6a:b7:74:ce:6e:67:ed:f5:bb:
                    1b:fb:14:f7:cc:f4:21:bf:c3:40:0b:b7:86:44:99:
                    88:a6:63:79:69:fd:88:d1:05:cc:95:91:1f:02:8c:
                    ad:0f:6a:ef:c0:5b:10:d4:d2:70:cd:e3:ba:1e:c2:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:FB:BD:A0:19:91:98:87:1A:74:8F:7A:CD:44:F2:B6:8F:4A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/50923d47-0555-3840-9840-1691b555729e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:0f:41:6a:19:11:0d:ca:9c:17:2c:1f:c1:7f:5c:f9:cf:
         ce:b2:e6:5a:4d:f6:b9:9d:5c:6e:32:90:fb:57:7a:05:84:ce:
         de:ee:b2:86:a0:3e:3f:af:e9:f4:d3:cc:82:cc:51:43:d2:a9:
         1d:6d:d7:24:13:e4:18:75:1d:d3:6f:9c:b9:74:73:a8:02:c2:
         3d:ae:fa:07:43:cc:c9:16:7c:98:3a:68:24:28:fd:9f:30:db:
         4e:a9:0f:c9:42:c9:8c:f3:a9:c0:02:81:18:cb:9f:c1:9f:89:
         0f:8e:23:26:4f:d5:43:c3:b7:b5:1a:63:cd:cc:8f:46:2e:31:
         83:35:4b:35:30:ba:01:6f:cd:6b:33:c9:33:83:46:72:72:85:
         c8:53:2a:54:9f:3b:e4:15:c6:99:fd:11:ab:5f:19:89:f3:e5:
         8b:cf:6b:69:85:18:cc:df:f7:1b:88:71:8b:5b:bb:16:57:a9:
         e5:e3:e9:6b:8a:b5:08:26:32:c2:20:3a:14:eb:2e:2f:3a:6f:
         d0:5c:ef:9e:71:d4:af:52:da:a0:59:12:56:6e:d2:09:e9:9c:
         7a:72:17:d2:1d:03:2f:c3:43:04:47:37:7b:21:0b:0b:52:9c:
         3e:4a:15:90:78:36:b1:57:7f:3d:19:1d:c5:e7:bc:10:e9:4a:
         cf:73:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:30 2026 by rpki-client