Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa
File:                     4ec09f16-c397-3c88-8ea6-24c1813addaa.roa (raw, json)
Hash identifier:          QA2FeVuwRlNiQTZZfXJwp+aiRg7m2Ef9nogjKG1LKnA=
Subject key identifier:   C3:47:DA:BF:4B:5B:D3:1A:60:CE:C3:2F:67:5B:AF:28:C1:75:A0:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE853F2506698DCB80ABF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33662
IP address blocks:        50.239.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:53:f2:50:66:98:dc:b8:0a:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=52d22387-51d7-4a8d-afeb-be753964de24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:d4:c1:82:4f:02:0e:cb:70:f8:72:a4:86:
                    80:f2:a8:7f:53:8a:12:2f:2d:4d:8e:20:72:db:9f:
                    1b:26:33:4d:35:20:b9:37:5c:a5:56:e5:00:2e:1e:
                    19:05:b1:81:8f:08:58:43:67:12:73:86:bc:61:22:
                    c4:90:cb:10:99:73:32:31:78:da:33:a2:82:15:90:
                    3a:67:c1:01:ed:0e:e8:fe:be:dd:f4:31:5b:08:af:
                    f6:81:c0:f9:71:0b:20:03:6a:09:c3:41:88:66:58:
                    eb:03:ee:90:f5:09:b7:4a:77:ee:52:b1:68:a8:9d:
                    43:a6:8f:80:da:b6:ed:fc:f3:a9:8c:a4:35:22:6d:
                    91:80:c2:59:90:cf:ae:ae:0e:c0:e8:12:bc:d8:ca:
                    c9:bc:91:33:ac:99:7c:bd:73:24:75:62:0c:f4:2e:
                    60:a0:06:02:ac:17:70:57:13:7d:f5:1f:c0:47:5a:
                    0d:0d:85:77:d7:f7:fc:cf:f8:a7:64:b9:6c:0c:f5:
                    f3:6f:37:61:31:24:4b:80:7a:10:c6:fa:9d:d7:a4:
                    4e:9e:a8:68:04:00:d6:f4:bd:80:a5:c4:40:23:a2:
                    56:ad:56:8f:5e:a1:2f:bc:be:c6:dd:aa:3c:05:40:
                    5e:7b:29:26:52:1f:2d:c2:0e:5e:d7:a0:2a:9b:99:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:DA:BF:4B:5B:D3:1A:60:CE:C3:2F:67:5B:AF:28:C1:75:A0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.239.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:74:3b:4f:23:a0:c9:5d:b8:7e:75:c9:5a:3e:f0:24:ae:2c:
         81:ae:b3:69:00:20:6c:07:d5:04:60:9f:af:4e:8d:83:f3:da:
         af:df:b2:3f:08:55:1a:cc:e5:97:1f:65:e4:63:4f:12:7b:87:
         1d:0e:53:72:f4:6c:6e:4e:12:11:bb:23:6b:d6:60:58:87:63:
         9b:28:de:42:70:1c:86:fb:b8:f5:e0:72:55:c8:00:9b:bf:ce:
         9f:98:74:50:b4:01:0d:d4:55:f1:af:65:0c:c3:b6:8f:e7:78:
         52:40:a4:eb:69:29:73:d0:1d:97:2a:63:37:d0:6a:cb:99:f6:
         77:09:67:f3:ba:ff:7e:3d:c6:c5:1b:09:59:d1:27:97:88:c8:
         4f:e6:88:af:41:02:01:39:73:f3:44:01:f3:92:fd:a2:af:44:
         a4:73:e8:c1:3c:ea:fe:0d:4f:0d:a5:b3:3d:f5:57:4c:14:c4:
         39:41:00:20:b9:c1:6d:d9:70:28:76:a2:21:29:47:20:78:44:
         30:80:72:da:a9:b8:11:2a:4d:1b:52:ad:e0:33:07:a6:b9:74:
         fe:02:44:4e:d0:22:6c:43:da:5d:91:9d:76:b6:8b:e8:06:24:
         eb:8c:3c:84:b7:67:ff:99:3c:3a:90:d7:5b:a3:e0:f4:dc:8b:
         45:6e:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:57:04 2026 by rpki-client