Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/210f7e8d-6501-35cf-87e4-266049a74803.roa
File:                     210f7e8d-6501-35cf-87e4-266049a74803.roa (raw, json)
Hash identifier:          MNRdu0rG39WGzK1d+c9NoDVnAB6rfW2+0LEK8f9iGLY=
Subject key identifier:   B5:6A:5A:64:24:36:4A:89:DE:DC:B8:5D:A1:F4:8F:66:D0:13:41:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA2DFC9501DCF202751E103C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/210f7e8d-6501-35cf-87e4-266049a74803.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     33491
IP address blocks:        50.171.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c9:50:1d:cf:20:27:51:e1:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=cde7391d-f759-49bf-b93c-4f985010b1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:72:b4:f8:f3:13:65:44:ad:a2:7b:f4:95:
                    d9:13:84:27:f1:71:22:e6:d0:79:68:9d:d5:b6:d5:
                    39:77:00:4f:8e:58:c0:d8:e0:98:45:f6:bd:65:28:
                    40:44:0a:43:b8:d5:1f:3a:f2:10:e0:0b:b3:37:d3:
                    73:b1:5d:c0:48:8a:12:48:bf:74:eb:36:a8:1d:02:
                    c9:17:c6:ee:4d:85:7b:94:72:09:75:69:63:2e:88:
                    4e:dc:7e:5e:13:09:27:92:74:4d:69:13:22:55:77:
                    c3:b3:54:25:ba:e1:e5:03:3d:6c:30:33:e1:3d:72:
                    ba:c5:f1:86:90:82:e4:0d:52:4d:2d:6a:99:05:5a:
                    47:50:d8:27:df:4b:f5:38:f8:4d:4b:46:15:ae:4b:
                    f3:e8:de:2b:52:92:06:5d:37:25:ab:79:6a:25:0e:
                    8a:a7:48:2d:5e:6a:ad:bf:b7:ee:45:ae:d2:3d:b3:
                    33:bf:06:cb:79:08:46:0d:89:3f:1a:92:97:2c:b0:
                    26:04:0e:fa:eb:46:e7:67:ba:92:27:e8:10:1a:ca:
                    ad:99:de:3b:63:26:78:a0:8f:6e:e4:36:8b:02:ad:
                    df:e6:39:e9:15:0a:e7:0d:26:59:36:c2:09:ce:39:
                    23:40:c1:af:52:d1:a1:be:2a:0c:e4:2e:5c:74:ab:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:5A:64:24:36:4A:89:DE:DC:B8:5D:A1:F4:8F:66:D0:13:41:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/210f7e8d-6501-35cf-87e4-266049a74803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.171.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:cb:86:c7:c7:7b:fa:3e:f2:e2:6f:15:0e:ff:c0:69:a9:
         d4:2c:5f:a2:b3:b0:e8:5c:e0:bd:3c:90:3c:3a:58:c5:d2:82:
         02:b0:54:75:72:21:92:fc:4a:4e:37:3b:5b:7d:80:05:99:aa:
         cc:e3:7a:d7:31:47:e0:64:ba:86:d6:0f:39:77:ae:9b:45:92:
         a4:41:17:06:e1:e6:78:fc:1a:e3:30:94:92:f9:41:50:7d:a0:
         ce:04:bc:e0:83:53:c4:8d:1a:a1:20:ed:41:c6:c3:0b:19:fa:
         25:9f:0b:47:7c:2f:ab:e4:4e:49:34:9e:14:b1:27:fc:c4:68:
         38:4f:31:be:81:09:34:87:c8:19:e0:13:b5:cd:be:d6:e0:04:
         e8:83:1c:92:60:08:65:32:be:bb:77:20:86:9b:b2:59:54:bd:
         7a:08:34:33:a0:23:d4:72:4f:93:a2:38:6e:36:8d:60:30:0d:
         df:eb:aa:0d:6a:aa:56:e2:3d:ed:ec:63:0c:df:24:73:0d:d1:
         27:e6:a3:76:3a:f1:3b:f5:a3:2b:7c:3f:18:34:ae:10:0f:ba:
         3a:a3:71:cf:e4:8f:87:e8:16:65:d5:ae:ff:c9:54:c8:56:59:
         a5:41:c1:90:71:99:a3:ce:1a:01:08:a7:da:76:d0:9d:58:2c:
         c0:35:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:27 2026 by rpki-client