Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa8c4108-69ca-30d1-ac88-ca474b42f72e.roa
File:                     fa8c4108-69ca-30d1-ac88-ca474b42f72e.roa (raw, json)
Hash identifier:          OUWkNKvydxzc8rvyutB10f/PAHmIlPtWRODY7wPtnR4=
Subject key identifier:   20:14:DA:E9:96:6A:CC:F1:1A:E4:17:A8:1A:5D:84:79:A7:D6:E2:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043603257DA84C94AD2035E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa8c4108-69ca-30d1-ac88-ca474b42f72e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        50.81.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:03:25:7d:a8:4c:94:ad:20:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=6b66ed34-ca32-4391-8f1d-09c490b08e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:5e:96:9c:3c:2c:15:f9:de:fc:de:a8:61:
                    a7:16:fd:d7:a7:42:74:1a:7e:b5:b3:92:3b:12:e7:
                    77:78:20:86:5c:a3:b7:dd:1e:9e:fb:d9:06:ee:35:
                    a6:df:50:ef:18:98:75:70:6e:03:7d:fe:1c:20:55:
                    7f:4f:cb:74:d8:e1:2b:e3:d9:d7:69:ff:0e:40:c9:
                    c1:91:fe:b2:90:9f:72:bd:e7:d6:0d:af:7c:c9:94:
                    0c:28:bd:e6:8d:52:75:9c:93:c3:11:ef:15:46:3d:
                    42:98:3f:63:e0:1b:8e:9a:a5:78:ce:e3:03:3a:7f:
                    90:e5:f1:22:45:49:27:ce:fc:9f:29:64:f1:db:9b:
                    cd:19:c4:7e:55:6a:1d:a8:ce:2d:fa:69:b1:e0:9c:
                    15:ef:ef:64:a0:d0:55:4d:f7:f6:d7:ed:8c:d6:45:
                    8a:37:08:17:61:29:b9:5e:b1:ff:74:c5:cb:e5:6d:
                    9d:7d:5b:3c:93:88:8c:10:82:a6:48:54:4c:8e:ef:
                    27:49:5b:36:9b:d4:2f:ad:b5:2e:66:f0:2b:fd:9d:
                    3b:8f:c4:8b:a9:a0:f0:85:46:a3:6a:72:9a:84:27:
                    5f:22:f1:48:0a:42:2a:92:06:57:1c:ff:a6:f7:98:
                    1f:f1:fb:d4:b1:d5:aa:ee:f6:f7:36:12:8e:38:01:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:DA:E9:96:6A:CC:F1:1A:E4:17:A8:1A:5D:84:79:A7:D6:E2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa8c4108-69ca-30d1-ac88-ca474b42f72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:07:7e:df:25:d5:05:77:b9:81:dd:51:85:48:14:b9:71:5d:
         01:c6:88:38:90:c9:97:6f:26:33:cc:85:05:a4:f7:fa:2a:8e:
         c7:b7:81:94:e4:4c:ab:80:cc:5f:21:5d:59:66:d1:64:6f:af:
         ca:51:9f:53:f5:bf:2e:42:af:e2:e7:0f:90:70:df:61:56:a0:
         a7:72:40:c8:2e:08:14:9e:9c:36:02:4d:44:56:de:f8:b5:16:
         99:4e:84:f6:28:a8:87:99:40:2f:2c:97:ad:70:9d:1b:4d:e3:
         ab:42:41:5e:77:62:7b:a0:d3:38:a7:21:53:84:eb:d7:fd:9c:
         ad:b1:21:89:69:70:61:ea:ce:89:e7:df:c6:50:82:ac:ac:1d:
         fc:09:1c:d3:a2:50:5a:13:ad:b0:81:c2:98:5f:c7:e4:b8:c1:
         e8:a3:8a:70:05:fd:d1:73:6a:5b:8d:1a:89:63:21:a7:44:a6:
         38:bb:13:f1:77:22:7e:b2:85:72:14:b6:00:42:b7:1c:b7:9e:
         34:0a:5b:a2:3c:59:e6:05:4e:14:d5:6a:26:08:c6:41:b7:08:
         9f:87:60:09:ff:86:68:95:c0:0a:86:54:5f:ea:7a:a2:b9:0b:
         fb:fc:29:82:8d:fe:b9:5f:3b:d1:a2:22:28:95:5c:f3:82:cd:
         b5:8a:36:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:34 2026 by rpki-client