Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
File:                     ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa (raw, json)
Hash identifier:          H+5FoWA/2DeYNfQYO1DtLThsd42Gp8z9qcq/bP+R290=
Subject key identifier:   03:23:F2:05:59:08:43:1D:81:53:65:30:F4:85:FF:C4:6B:C7:51:51
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584DC29AE4D3BBEAD809BDB89400
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     396020
IP address blocks:        209.50.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e4:d3:bb:ea:d8:09:bd:b8:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=18e3380a-5f16-4920-a92d-d20c42fb8e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:0e:5c:5a:93:23:d4:9c:48:b2:05:81:00:
                    1d:5a:ca:bb:90:44:10:a0:92:c9:2d:2f:f8:d5:b4:
                    c7:f4:0f:fd:c8:49:35:0c:e5:01:6f:bd:23:6c:51:
                    66:43:0d:5a:f5:fb:d1:33:a0:4e:54:1d:b6:ac:b5:
                    db:7d:7a:65:d5:80:5b:50:e3:34:d6:ae:36:e9:75:
                    0d:44:df:92:6e:56:b5:f5:07:54:e8:e8:12:2d:6c:
                    17:47:95:3b:15:86:4e:9c:43:02:49:5b:87:47:6c:
                    ac:60:5b:7e:22:a4:88:b5:6b:3d:7b:a9:6e:cb:fa:
                    04:11:82:7d:b6:0e:18:a6:fe:df:49:c6:e3:31:cc:
                    7d:19:b1:52:bd:34:d8:7c:38:c6:41:3b:7a:53:2b:
                    73:a5:1a:d3:84:c1:f5:bf:96:0b:54:e4:51:20:8a:
                    da:e2:00:e3:ce:a0:0b:8b:cb:a6:a5:35:6c:58:15:
                    c2:4a:7f:36:8e:eb:6f:e1:12:1e:36:73:48:59:21:
                    36:f2:77:aa:3f:bb:b4:83:fe:89:4a:5d:ff:1c:92:
                    9e:09:6d:44:a1:05:61:33:d2:0b:05:c4:6d:2f:86:
                    7a:1c:98:16:71:26:e6:a8:ad:aa:c8:64:c1:de:04:
                    a9:96:04:a0:46:5b:9f:d7:b0:1c:32:cb:0b:06:6b:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:23:F2:05:59:08:43:1D:81:53:65:30:F4:85:FF:C4:6B:C7:51:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:be:54:d9:91:a8:ba:d7:05:a0:95:a7:b3:a0:56:7b:79:
         83:e8:6b:bf:e4:01:c1:1a:f0:45:1f:8b:eb:ba:cb:1c:ad:41:
         04:bc:90:ce:cb:f2:fb:2c:4f:e4:b1:f6:ae:bb:f2:4d:5c:e3:
         94:d0:0f:aa:48:a2:94:50:e7:ae:94:88:42:69:b9:a9:96:ad:
         81:c8:ee:bb:0d:a1:7f:9a:45:59:37:7b:ab:c9:06:72:1c:1b:
         ab:64:d8:21:25:e9:d5:d5:27:f5:40:5d:4b:37:9d:4f:70:da:
         99:60:56:8e:00:60:84:f1:eb:a1:e7:02:a6:4b:21:bb:3d:71:
         58:57:c0:90:18:3a:48:13:5c:44:1d:24:cd:8b:2e:24:bc:57:
         01:fc:e4:76:79:d4:f3:50:8e:45:29:04:5a:78:c7:db:5b:2a:
         18:d5:bb:79:e1:9a:1b:19:63:39:d7:2d:8e:49:db:05:f9:eb:
         3b:d9:a7:46:3b:7f:dd:53:1f:e0:11:4b:7f:27:e4:3c:65:fa:
         4a:2a:f1:69:47:49:96:ad:c1:91:e7:dd:70:67:df:93:fd:7c:
         b4:d8:82:21:fd:59:68:44:ed:7f:f4:a8:4b:54:75:9f:d1:63:
         20:6a:70:7f:cd:79:0c:8a:7a:9a:57:5e:d3:89:bc:06:2d:07:
         16:27:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:26 2026 by rpki-client