Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c36c70-59a7-311f-baf2-6c023d99968b.roa
File:                     95c36c70-59a7-311f-baf2-6c023d99968b.roa (raw, json)
Hash identifier:          ebRGHt0HcrfY+U8PyfMJMsWE3ysPjs6EPl3jVWRsjkU=
Subject key identifier:   EF:E9:68:00:9C:FA:4D:2B:F8:1D:C2:E6:E7:CD:9C:0F:4C:98:4D:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B795143FD1CA8667ACE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c36c70-59a7-311f-baf2-6c023d99968b.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        50.110.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b7:95:14:3f:d1:ca:86:67:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=ff698c07-7aa9-4b61-9389-3456ba0ec483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:ab:15:fe:c2:eb:a6:59:df:3a:f3:54:57:
                    9d:ca:db:01:8b:8c:90:0d:bb:26:d8:84:8a:1b:c7:
                    d2:e2:3e:51:38:a5:44:ac:59:43:e5:9e:9e:02:50:
                    00:0e:38:a6:48:02:05:e4:39:7e:88:80:1e:b2:f7:
                    8a:d9:3b:67:23:40:fd:a4:43:92:85:e4:da:a0:b4:
                    1f:79:c7:e5:e3:c5:57:33:60:84:1d:c3:7b:95:ff:
                    ae:ab:c7:3a:6e:e2:6c:78:d4:22:de:c8:0d:86:2c:
                    f7:7f:ca:6d:89:37:97:04:9f:a9:0c:07:7e:47:f0:
                    27:da:5f:c9:23:e3:dd:a9:6b:fa:f4:5e:93:ba:59:
                    39:7a:79:99:e7:be:bc:1d:ae:bb:26:d4:4a:c5:4b:
                    0c:8f:01:85:0d:dc:6a:8e:21:db:38:32:32:a8:b1:
                    84:d1:d7:23:af:d4:48:74:32:22:ec:bf:48:e8:fd:
                    d6:dd:1c:c4:91:df:ab:9a:ba:3b:f2:44:31:cb:91:
                    22:3e:3d:fb:e3:b9:9b:87:f2:7d:40:37:10:cc:0d:
                    c6:f8:8b:35:e3:74:2a:48:71:c6:8d:97:04:e6:f3:
                    e5:3b:3e:0b:f8:61:2c:f5:15:3e:a1:a6:a0:96:2b:
                    72:a9:ab:e6:ac:53:77:05:45:d0:f5:dd:f6:a6:d8:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:68:00:9C:FA:4D:2B:F8:1D:C2:E6:E7:CD:9C:0F:4C:98:4D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c36c70-59a7-311f-baf2-6c023d99968b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.110.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:9a:94:21:94:bd:b8:7f:99:a8:0d:e9:e1:98:e9:ec:cf:
         91:6b:1e:24:e9:5d:13:8e:cd:2d:e8:14:5a:c2:55:3e:46:93:
         c7:2c:a8:20:1a:f0:36:46:76:2f:5e:2e:93:4e:2e:a0:d2:07:
         2d:d4:7c:2d:c9:98:27:ba:b7:5d:18:9c:5d:4f:d6:b2:4f:09:
         5a:f1:ef:09:c0:14:f0:79:98:03:5c:fe:8e:b1:6b:84:a9:0b:
         b8:64:83:85:e8:cf:57:f1:0b:49:d6:f8:76:75:e7:8e:4f:bc:
         03:19:1c:2e:8e:aa:21:49:9c:81:68:ff:54:f2:5d:96:ab:86:
         a0:02:9b:c2:15:f1:c3:ad:91:3f:e3:15:81:06:bd:85:14:74:
         71:2e:34:cd:14:d3:41:3c:aa:dc:04:d8:1d:85:ba:7c:15:3e:
         d5:dc:be:33:c2:0b:50:24:8a:ff:2b:df:b8:f6:3a:d7:8b:0d:
         49:8d:f2:b2:7d:cf:a2:fd:6a:41:da:ba:ff:c6:1e:1f:30:82:
         9d:07:79:31:ed:14:15:3c:09:82:77:f6:cb:ac:92:b9:3e:21:
         0a:52:9e:85:cc:76:82:67:d4:da:9c:05:a1:36:da:81:15:62:
         c7:77:32:41:ff:26:5d:b4:46:ed:9b:af:3b:82:f3:8d:29:03:
         c0:12:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:15:51 2026 by rpki-client