Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4912aa25-dbee-3b9e-a284-70d68b900977.roa
File:                     4912aa25-dbee-3b9e-a284-70d68b900977.roa (raw, json)
Hash identifier:          kJXQ0ggCzfbIcY2qzUxFwV4/b97mSn0xayq5u3A2w6A=
Subject key identifier:   09:BD:10:BD:EF:C8:BB:C9:4E:82:42:16:47:88:8F:31:21:3A:59:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9A85CD483748EDE83C8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4912aa25-dbee-3b9e-a284-70d68b900977.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33489
IP address blocks:        50.247.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:a8:5c:d4:83:74:8e:de:83:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=3d6a2ad9-2784-4ab8-aa22-fdd62d075ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:21:86:84:6c:8c:25:56:69:5f:07:80:47:
                    1c:05:eb:09:02:9f:1c:e3:ec:82:79:21:5d:ce:31:
                    2e:c6:9a:fe:00:2b:de:aa:12:dd:d9:a5:cd:7d:be:
                    d7:22:6d:d2:b3:e2:93:bd:91:3e:a6:6d:76:e8:5d:
                    a6:84:31:58:a2:b8:86:46:a7:a0:9c:5f:a1:c9:fb:
                    ec:23:4a:84:89:d2:9e:c8:84:17:08:63:10:f3:9b:
                    56:96:c1:f6:ff:0a:1c:04:ff:3a:2f:73:98:e6:08:
                    d5:d1:65:11:ab:c0:8e:fc:53:f4:e3:c5:67:42:cc:
                    17:1d:6b:e0:d9:8b:b9:6d:5b:c2:02:51:63:22:d0:
                    6e:5d:95:01:e9:da:c9:31:1d:73:c7:c2:a8:7b:a0:
                    73:62:bf:17:28:a8:39:87:3a:bc:ce:0d:60:d5:3a:
                    ae:75:4d:20:b6:be:1a:86:71:77:7a:70:b1:52:d1:
                    72:8d:c9:fc:bf:d0:42:6f:a2:2c:52:ed:66:c8:0d:
                    91:36:f6:aa:6b:ec:dc:c2:98:04:c8:23:ce:7d:15:
                    86:69:4e:73:97:58:d5:d2:21:6c:c9:e0:f2:b1:bc:
                    a4:45:5f:54:27:d3:47:8c:3f:dc:2a:ed:a3:3f:f4:
                    c0:9e:de:ca:7b:7a:2f:b8:9e:43:89:69:de:c7:ad:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:10:BD:EF:C8:BB:C9:4E:82:42:16:47:88:8F:31:21:3A:59:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4912aa25-dbee-3b9e-a284-70d68b900977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.247.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:46:9d:49:17:cf:d1:28:ff:a3:44:74:dd:67:48:09:5d:
         4d:c2:5d:94:e1:7b:a1:0c:74:6f:86:30:8f:4e:2a:69:46:5c:
         5d:7b:4b:99:f0:00:a9:e7:2b:b4:5c:dd:f5:82:c3:93:06:ec:
         3b:7c:4e:0e:1f:ec:3a:5e:6f:16:bc:ae:b4:ce:99:0c:10:30:
         1c:8e:db:30:6a:d4:85:27:2d:46:c7:86:96:ef:bd:5b:7a:dc:
         19:2a:cb:cc:3d:bc:04:fa:8d:d2:40:4a:bb:ab:51:c0:4e:be:
         8f:e6:a1:43:56:98:94:a6:24:f9:2c:ff:9b:5b:81:aa:33:d5:
         3d:2b:42:13:b4:9a:77:eb:36:bb:5d:6a:3c:49:59:b1:8b:42:
         cd:ce:20:31:d5:99:56:b0:56:0d:12:0b:03:fc:82:62:7d:43:
         73:25:40:24:f7:4f:72:8c:7b:7c:3b:5a:48:f3:15:9a:b7:3b:
         9b:cb:b8:a8:ae:65:a2:fa:f2:41:f5:84:cd:4a:ee:ff:e9:15:
         7e:6f:db:fd:cb:c3:28:1c:df:c9:2f:56:52:60:ec:86:79:5e:
         10:7c:42:41:1e:f5:82:d2:26:8f:a0:f2:71:90:a3:88:81:27:
         00:84:6c:52:50:f4:76:c0:90:97:a5:f3:b0:75:c7:d6:15:a8:
         bd:92:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:25 2026 by rpki-client