Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b778d966-557c-3c2f-9c39-52d37c4c776f.roa
File:                     b778d966-557c-3c2f-9c39-52d37c4c776f.roa (raw, json)
Hash identifier:          lEbHt43yNM3pPwsvrgiGlqxGW8ZVJtJXCRVqhypbpCc=
Subject key identifier:   0B:50:D3:98:F5:7B:11:5B:4A:4C:C3:EF:C9:3E:30:FC:14:7A:42:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB63587CB3AB3DC19C7640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b778d966-557c-3c2f-9c39-52d37c4c776f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        47.50.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:63:58:7c:b3:ab:3d:c1:9c:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8d5d3192-6153-44d0-b8dc-32505992c82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:33:ca:dd:75:5e:40:d1:f3:89:2a:a1:97:
                    c5:2f:ac:ad:4a:e3:73:66:4b:ee:d6:94:05:a1:e5:
                    f9:43:d4:9c:db:8a:7e:0a:37:a3:0e:85:57:36:f4:
                    d2:99:ae:de:d3:05:3d:66:83:a1:57:ba:ec:d9:40:
                    8d:10:ca:fa:67:ee:92:a1:82:35:18:97:0e:88:05:
                    03:e1:6c:56:d1:cd:5e:d5:ef:a9:ba:52:d7:12:ec:
                    aa:eb:c5:d8:9c:16:8a:f6:78:75:6c:0e:9f:0c:90:
                    d3:69:d0:1f:30:0f:20:df:13:e7:4b:e5:72:c9:cc:
                    ac:38:49:50:7c:a6:d4:1f:38:9b:80:c4:79:ae:8b:
                    47:8c:b7:04:3c:e5:25:74:0f:75:e5:a2:01:b6:27:
                    51:10:2d:46:9d:99:95:35:b3:20:13:c0:6b:1e:02:
                    8f:d0:b6:04:e2:ff:c8:f6:53:74:7a:17:64:52:60:
                    3d:62:8a:d1:e7:62:6b:0b:fd:26:07:00:e6:fc:6b:
                    0e:7e:cd:22:36:41:72:41:7b:d6:98:09:57:a8:34:
                    b7:65:eb:ca:24:8d:7f:10:5f:c2:37:06:28:f0:75:
                    b8:cd:a4:85:33:7f:54:21:be:cc:4e:d4:45:6f:eb:
                    16:29:58:c4:39:56:07:d2:97:d8:f2:3f:ba:a9:86:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:D3:98:F5:7B:11:5B:4A:4C:C3:EF:C9:3E:30:FC:14:7A:42:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b778d966-557c-3c2f-9c39-52d37c4c776f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.50.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:a7:ee:c3:5e:38:5f:d2:c2:27:19:ef:08:fa:bc:7a:f3:
         d2:12:b3:92:4e:74:f8:00:a7:d0:36:ae:e0:2b:6f:50:b0:fa:
         3b:a1:11:12:8f:ef:5f:51:f3:8a:04:87:65:b7:15:5b:44:2b:
         45:b0:42:70:e1:73:0f:5f:e0:c5:eb:7f:7f:a3:16:1b:41:f2:
         ea:b6:ff:22:77:7c:ee:02:6e:c9:6a:09:a8:66:8c:dc:12:78:
         b4:d9:53:e7:d4:a9:38:3d:95:25:63:ac:07:1c:47:33:77:2c:
         c3:6b:98:31:53:92:1f:3b:46:ef:66:e1:77:0f:22:6f:37:a3:
         3a:ee:4a:80:08:b4:9f:c9:d8:e4:a9:6a:6b:ed:2a:ef:52:bc:
         ac:46:e9:0f:6d:2a:e9:03:fb:1c:aa:43:a4:10:1a:1c:1d:b9:
         67:04:ac:1c:cb:37:9f:3c:69:cc:20:96:84:f8:8f:76:18:5f:
         a7:ed:2d:ff:86:85:e6:34:c7:3e:8a:a6:eb:11:d6:83:85:92:
         4a:24:fc:1a:b8:2c:2a:44:08:a0:e2:ba:19:9e:e2:f5:d7:3a:
         26:5a:76:3f:79:6f:99:8c:3f:47:84:2e:32:04:ff:90:b2:04:
         3e:79:e6:ef:22:a7:d2:c1:2a:e8:96:c3:e5:24:60:c0:ad:a4:
         8c:73:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:46 2026 by rpki-client