Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa
File:                     c3cab3c2-086b-34a3-8657-441ffff04b60.roa (raw, json)
Hash identifier:          WopeYD3vsVHWE9f/084J65R+7zGmW7c4J/kQzr+Kiso=
Subject key identifier:   95:98:07:82:D4:7F:EB:54:CB:A2:D6:71:F8:53:E3:6A:DB:79:A8:87
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF1D2FAB453EEEA445FB00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     8560
IP address blocks:        50.21.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1d:2f:ab:45:3e:ee:a4:45:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f45c3eb1-b923-4ec2-86b2-2e9212773653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:41:f7:7c:5b:d9:91:3d:6c:81:ad:41:0d:
                    66:42:b4:b0:ca:b6:db:c5:5c:80:57:7a:49:d0:7c:
                    c2:14:48:b2:1f:1b:fe:75:40:78:05:78:aa:50:fe:
                    fe:b7:b3:6e:1c:65:e8:e7:83:88:df:c0:50:ed:d7:
                    09:34:52:e3:11:90:7d:56:5f:cb:07:b7:ec:89:14:
                    3a:79:3f:e3:ad:bd:2f:cd:9d:ff:38:e4:b9:a0:b4:
                    22:39:85:18:0f:6f:66:56:ac:c8:16:0a:1d:52:88:
                    96:0a:90:87:5e:a3:da:6c:1b:f3:5b:61:7e:49:9b:
                    18:2c:34:37:b6:8a:55:73:f3:0f:36:11:8c:d6:e5:
                    7e:26:5c:70:67:25:e5:18:94:a6:e4:26:96:18:95:
                    9f:ab:e5:bc:5d:7a:f7:7a:da:98:6e:9f:c8:ae:b9:
                    d8:dd:5f:ba:e2:41:21:49:eb:27:50:0f:a0:64:5a:
                    cf:01:22:a5:50:93:a2:00:48:7c:35:d6:33:c5:83:
                    97:cd:be:53:b3:4e:46:1f:f3:e6:2f:e4:99:f3:7f:
                    c6:ef:bd:58:f9:4d:62:a7:11:85:0e:15:94:3c:31:
                    fc:f6:5f:41:42:49:54:de:5a:2d:38:88:77:80:7e:
                    88:a4:4b:e1:95:da:1d:6e:cf:bf:84:04:58:31:e7:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:07:82:D4:7F:EB:54:CB:A2:D6:71:F8:53:E3:6A:DB:79:A8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/c3cab3c2-086b-34a3-8657-441ffff04b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.21.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:ea:d6:4f:8f:a3:c7:0e:a4:22:5d:f6:ea:59:50:b6:28:
         2d:eb:7c:f8:8a:99:5f:15:29:a3:0f:63:58:23:ff:da:c7:cb:
         da:1c:0b:9f:a2:d3:49:88:49:df:4c:a0:75:b9:4a:38:77:94:
         c6:f9:cb:10:aa:8e:de:37:21:c5:22:a7:ca:7f:d8:dd:75:09:
         01:6d:d3:48:ea:f0:a8:18:db:d0:d5:8d:eb:88:09:d4:b6:58:
         89:b2:86:5a:47:65:3e:e0:43:3e:67:8e:b1:d1:26:a9:86:b1:
         0c:93:3a:5d:b9:b8:f4:89:e3:5f:6c:c3:c1:d9:66:91:89:2f:
         f2:8f:fc:1a:5d:06:f6:07:b2:a3:a6:5a:a5:45:e2:6b:c9:33:
         31:61:1d:1c:15:09:ee:2e:9e:8c:bd:cf:47:c1:aa:49:04:5a:
         ee:e5:80:a1:4b:80:ba:80:7b:f6:f6:03:48:05:c7:03:c5:8d:
         5a:8b:32:50:d2:cf:31:34:fa:60:24:e0:f3:8b:7f:3f:5c:be:
         d5:6e:dc:1c:a8:c9:e4:78:24:b5:15:1b:e3:e4:15:45:27:32:
         80:76:b3:62:73:de:1d:ab:0f:92:5a:e6:63:9a:4e:c6:f7:0e:
         a9:f5:ee:da:9f:d4:19:3e:8d:c4:eb:cd:9f:7d:df:55:0e:2f:
         9d:59:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:00 2026 by rpki-client