Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9aeac8fd-c52f-3ab6-be3f-fdd003ca9bb5.roa
File:                     9aeac8fd-c52f-3ab6-be3f-fdd003ca9bb5.roa (raw, json)
Hash identifier:          4eOSVw2vYx1pktGqEUtVanmPhnDyzZ1buF+K37NG2KE=
Subject key identifier:   5C:9C:CC:6A:4C:C3:DF:D0:97:CF:19:8C:8E:A0:E3:C5:96:24:48:AA
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBE6B3AB520601E0843BC7400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9aeac8fd-c52f-3ab6-be3f-fdd003ca9bb5.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        170.114.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:3a:b5:20:60:1e:08:43:bc:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=9f528435-b7db-4e88-9c12-ce7a2fd02590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:89:fd:29:dd:72:b4:4b:9c:a4:87:c6:ee:
                    93:d0:2b:bc:43:fc:00:73:ac:9c:0a:64:99:07:0d:
                    be:9e:a8:e9:5f:b2:b2:89:e0:f0:81:9e:be:a2:9f:
                    56:a1:ac:15:70:45:22:96:bb:c0:07:ee:ee:f0:eb:
                    29:fc:86:e5:1f:7c:ce:89:69:ea:c9:53:b5:eb:20:
                    92:87:f8:76:50:33:98:ac:d6:c6:73:be:95:c1:58:
                    ec:7d:32:04:e6:a6:32:88:3b:57:75:76:2f:7f:de:
                    83:fb:3b:5e:88:b2:de:b4:3d:01:18:6b:e3:7f:64:
                    95:ba:81:de:0b:42:6b:bf:f1:45:3f:ab:44:65:54:
                    2d:4d:ab:50:fe:cc:1b:77:03:72:70:d1:e1:d5:9a:
                    8b:38:b8:ad:4f:da:1c:fc:e5:97:42:df:01:84:be:
                    2d:78:d3:78:81:7a:b6:89:9c:90:7f:e7:ae:4b:c8:
                    75:ec:54:3b:45:08:26:8d:4d:7d:03:de:c0:b7:10:
                    04:b8:56:f3:b1:51:e7:29:c2:94:f2:54:60:40:3b:
                    f9:68:88:c1:b6:36:f6:28:93:84:f6:ac:3f:3d:9f:
                    41:82:d1:26:53:b8:99:65:bc:7f:3d:51:bd:7f:75:
                    0e:8f:c3:5a:30:0d:d4:b5:c1:49:b9:d6:95:11:7b:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9C:CC:6A:4C:C3:DF:D0:97:CF:19:8C:8E:A0:E3:C5:96:24:48:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9aeac8fd-c52f-3ab6-be3f-fdd003ca9bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:9c:95:98:9e:fb:a2:7c:ef:38:d4:af:22:93:33:5d:9a:
         0d:3f:58:cd:8c:a8:f0:e2:7e:a9:2e:04:94:8f:24:0f:bf:e5:
         98:53:ee:d5:c6:85:a8:1a:d3:f5:bc:3c:07:20:ae:d4:4e:00:
         6a:c3:19:df:3b:83:de:42:fa:45:86:45:3e:46:18:ed:5a:65:
         a6:89:9c:90:90:29:b0:8b:2a:79:47:04:62:96:95:da:6d:4e:
         43:b3:7b:b1:b8:89:89:47:01:0c:1a:eb:0b:a5:98:66:ea:26:
         73:af:b8:7b:2f:68:a2:d4:71:eb:15:0f:44:05:84:36:e6:65:
         fe:3b:82:78:ae:bd:54:72:13:6a:3e:8a:0c:11:c1:33:d3:7c:
         81:eb:d5:a9:14:60:70:d9:41:5a:fc:68:f4:1c:47:28:49:b5:
         dc:f0:db:a1:df:f0:6c:44:03:69:84:44:44:14:fe:5f:c8:c9:
         5c:9a:86:6f:5e:f9:d5:66:65:d8:47:9e:9a:99:07:44:fb:10:
         6e:1d:a8:b7:6b:46:81:fb:86:07:4d:81:4c:43:ed:f6:4f:b3:
         c0:38:d1:db:9b:99:39:90:06:26:63:79:67:f9:aa:7a:8d:9a:
         11:0a:b2:01:ea:9c:75:6f:90:5c:71:5a:4e:d7:7e:28:9f:86:
         f9:58:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:42 2026 by rpki-client