Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
File:                     5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa (raw, json)
Hash identifier:          caOTxWMRVmg3w0kFJmdMcFNrivbL1aLq8jchMjqKxww=
Subject key identifier:   7F:75:00:3F:F2:F5:5A:14:A0:4A:7C:A2:4F:17:29:ED:CB:B5:7E:1E
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4975DA5A360295F48C152390
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1239
IP address blocks:        50.7.120.0/22 maxlen: 22
                          67.159.6.0/23 maxlen: 23
                          2001:49f0:d01b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:da:5a:36:02:95:f4:8c:15:23:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2c872a61-24c3-4f7c-84fd-7185d1ec3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:8a:e8:f3:8d:54:bf:fd:63:e9:e8:1c:ac:
                    7c:8c:9f:e6:3e:6a:2c:25:80:74:d9:ad:5c:82:3f:
                    b7:1b:02:42:e6:b0:20:17:66:2c:59:38:86:31:85:
                    ee:7a:11:b0:a3:9d:72:21:bc:96:e2:35:f7:34:10:
                    33:db:f9:00:54:51:53:c1:54:09:fc:46:b9:96:2b:
                    23:4c:a3:62:da:b2:fe:f5:bd:f3:6c:a0:ca:cc:b5:
                    66:9c:f1:0f:6b:05:eb:d1:b1:f2:e5:75:3a:95:f9:
                    1c:ae:2d:36:63:8b:ab:6f:70:42:ad:38:ad:a6:54:
                    04:6a:75:c5:aa:79:06:fd:46:d0:0d:35:d8:b5:17:
                    9f:ec:f4:5e:4e:7f:ce:fb:b0:47:89:c8:cb:59:83:
                    44:e6:2b:59:c4:d6:0c:36:c1:33:5a:38:b9:0e:31:
                    a5:25:38:24:55:c9:ca:63:ee:1f:cb:70:08:f1:14:
                    a0:a7:85:d7:b2:0a:ec:42:8d:24:21:88:cb:81:96:
                    40:2b:93:df:5a:6c:13:81:85:a4:a8:34:f0:d5:32:
                    17:8a:bc:c0:c4:58:1b:34:f2:a6:25:51:33:55:75:
                    1a:b1:29:1f:cc:bd:f0:64:86:49:73:db:11:d3:63:
                    f1:1e:82:91:a5:13:f6:e9:f5:d3:a9:96:7e:ad:22:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:75:00:3F:F2:F5:5A:14:A0:4A:7C:A2:4F:17:29:ED:CB:B5:7E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d90ce8a-7dd9-309e-8899-9ecdda52854d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.120.0/22
                  67.159.6.0/23
                IPv6:
                  2001:49f0:d01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:6f:3c:65:ff:d0:d2:33:2e:b4:3b:ff:ad:6e:0c:af:51:49:
         67:9b:d7:d8:91:02:e4:d9:29:33:0e:ff:49:40:4f:70:8a:2e:
         26:6e:e2:57:c3:0e:1b:6e:f3:a8:f3:a0:41:5e:a2:64:a6:fd:
         a4:b0:ca:0c:9b:fb:54:ab:70:ea:95:1b:76:c2:9f:f4:c5:9d:
         78:8a:a3:ff:c0:84:35:46:d7:df:ed:5b:8c:d7:78:aa:de:14:
         a3:8d:49:df:8b:82:a4:8f:e9:0d:32:9f:75:85:af:0c:fd:84:
         f2:ad:36:67:6a:b5:c6:5b:f6:95:cc:cf:82:46:b9:9b:f5:07:
         a8:2c:f4:44:06:87:f3:9d:0e:bc:db:74:ab:87:07:46:5e:07:
         66:60:cc:10:3b:0f:fe:b4:e3:4c:12:29:30:ba:5a:3e:f5:33:
         86:a7:7d:c1:08:7d:3d:90:2a:8a:42:7e:37:48:ae:09:88:eb:
         ac:13:4c:ef:c2:40:3c:42:bc:f9:a0:77:5e:ab:6f:c2:fe:17:
         d1:f9:c8:ce:04:23:7c:e2:a4:f2:b3:8d:40:59:45:f7:4e:97:
         8a:75:a2:b5:4b:4c:e6:87:fc:d1:be:1b:88:91:b9:fd:be:e0:
         67:4e:c8:21:bb:9f:2d:bd:9e:61:91:08:7b:d1:6f:64:21:bf:
         92:80:f3:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:07:16 2026 by rpki-client