Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
File:                     50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa (raw, json)
Hash identifier:          hULi/csbJ3pOzvi2jZ6Eqeaec8G5sx1dXgp0GOXMVTE=
Subject key identifier:   02:38:05:15:CB:EB:8C:4F:7D:89:B3:A4:29:7E:E4:5E:BE:92:C6:E3
Certificate issuer:       /CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
Certificate serial:       010D0C9F4328584DCAFAF9AF0B5E237699819A00
Authority key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        45.95.209.0/24 maxlen: 24
                          141.193.71.0/24 maxlen: 24
                          203.57.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f9:af:0b:5e:23:76:99:81:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=497ccfdb-7938-46e2-ae1a-c483b9a34cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:94:b7:e5:ec:e6:a6:a9:ed:1a:af:d4:07:
                    26:95:b7:c7:72:b3:50:42:86:4a:c0:5e:0b:e6:95:
                    19:f3:bc:9c:d4:d9:95:99:43:28:f5:27:b9:12:ec:
                    3e:60:41:36:2c:f5:08:56:34:1d:7b:98:00:6e:59:
                    85:8e:dd:5b:b0:56:11:96:72:c5:7f:bd:ef:5f:ff:
                    3b:49:d1:84:0b:d5:64:d1:6a:a2:cf:de:45:5f:70:
                    43:d0:16:b3:4b:48:2f:f8:87:b5:98:c2:a6:a5:33:
                    db:66:e3:17:e7:d8:a0:d4:0a:43:ce:3e:d8:64:f7:
                    7e:dd:82:08:39:81:08:f0:7f:b6:57:7a:27:2c:ca:
                    ea:e0:a7:22:54:1b:8c:44:1a:f8:26:15:5d:70:b9:
                    01:e3:5f:a4:54:6a:01:c5:9d:85:a9:5e:f3:d0:d7:
                    09:8b:21:0e:6e:b3:00:54:74:3b:6c:0a:ae:f3:24:
                    63:0f:4d:fc:0b:24:2c:2c:ba:19:48:86:fa:59:dd:
                    dc:89:74:c2:9a:c7:79:24:7a:43:5d:83:e0:15:79:
                    c7:40:23:0e:f7:cf:31:d3:69:a9:5d:c5:4a:2f:15:
                    41:14:65:81:a8:4f:7b:03:12:a1:be:5c:9e:40:ba:
                    9e:e7:90:d4:93:cf:6c:3c:4e:12:3e:6c:2a:c7:47:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:38:05:15:CB:EB:8C:4F:7D:89:B3:A4:29:7E:E4:5E:BE:92:C6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl

            X509v3 Authority Key Identifier:
                keyid:E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.209.0/24
                  141.193.71.0/24
                  203.57.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:d2:71:b8:fb:70:7a:d7:84:01:56:9c:f2:6d:c4:3d:25:8c:
         e5:ef:30:f0:02:8a:f3:28:55:15:16:66:f3:36:dd:dd:e5:c2:
         5a:4e:53:a6:9c:42:cb:d2:52:e2:df:64:e4:46:21:26:79:30:
         e5:79:e2:18:1f:23:36:fb:14:16:4f:f2:15:c0:b1:7b:d3:d4:
         85:8a:90:c5:58:4b:6d:d5:4e:38:9a:74:a2:0e:da:10:48:29:
         13:21:dd:d4:be:b2:d1:0c:62:e3:c3:6a:6e:e5:db:0e:40:f2:
         d9:14:45:b1:24:0a:ce:ff:e2:d5:a3:6f:c1:6a:1e:53:e5:8a:
         22:2b:e3:5e:18:d6:0e:50:20:2f:63:dd:0e:de:62:60:90:bb:
         28:6f:f1:f5:1b:bd:44:b8:39:9b:d5:bc:ba:76:a0:ed:02:87:
         cb:a2:c6:9c:92:5f:c2:f0:57:07:1c:c0:cb:75:b1:b7:a0:ed:
         71:f0:3b:8a:6f:a0:58:ea:2e:c1:e5:5c:01:0c:0b:2f:63:f6:
         30:89:1d:e8:0e:23:77:e3:e1:52:bf:c3:df:74:3a:d9:19:8a:
         6c:d1:6f:bb:4e:51:5d:47:c4:87:b4:25:c3:87:40:3a:42:3e:
         0a:2b:e0:23:98:1e:1c:da:cf:7c:19:cc:71:c5:74:4f:3b:ab:
         08:95:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:08 2026 by rpki-client