Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa
File:                     4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa (raw, json)
Hash identifier:          /rBMjzL1D/Sm3Mu1ax1SseLfmtp5Uari0VyOBGLHYac=
Subject key identifier:   2B:4E:E8:B4:77:6F:41:A2:56:6E:00:FD:52:FE:79:3D:99:59:07:81
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584D87FA8EB61DFAEBAD050B6A90
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     399951
IP address blocks:        50.20.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:8e:b6:1d:fa:eb:ad:05:0b:6a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=881f866e-899d-44f3-86aa-3a53ce2c02ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:d9:07:a0:74:02:d0:15:25:22:fa:77:b2:
                    44:8d:ae:8b:69:cf:27:04:8e:e7:87:1e:9c:7d:9d:
                    c1:fc:e1:5d:24:0b:51:40:65:ba:aa:7b:23:fb:22:
                    d3:2a:52:a8:41:6a:ee:66:69:c3:26:1c:0f:25:7b:
                    b7:c1:e1:a0:b2:39:fe:cb:8e:b7:df:81:ad:63:c2:
                    e4:84:36:4d:89:eb:1b:55:64:95:88:25:2c:bc:0c:
                    9b:e4:ae:90:23:dc:d4:20:6b:56:cb:6c:d4:97:24:
                    6d:36:00:5a:53:ff:8e:9a:95:b1:6f:30:a8:78:ad:
                    1b:0a:da:af:fd:d0:08:86:78:87:7a:fd:1c:8e:c4:
                    97:a1:ca:08:48:65:84:86:c6:a6:0a:6f:18:e3:e9:
                    d2:3a:df:9a:7a:e0:a0:f7:29:c3:bc:04:82:95:64:
                    ff:98:02:1c:27:af:62:84:4e:be:73:e2:60:de:49:
                    29:59:5e:3f:13:d4:d1:bf:6f:56:10:3e:64:7d:0c:
                    d0:1b:a9:0e:28:4d:47:e7:d9:12:6f:40:8c:03:86:
                    89:ff:4d:2f:b0:40:95:99:0d:49:85:3d:cb:2b:34:
                    65:7c:87:0c:bc:0e:0a:bb:b7:0d:5c:f6:41:12:45:
                    9d:3c:9d:d5:04:f2:b8:f9:a6:d3:a2:1d:76:a8:22:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:E8:B4:77:6F:41:A2:56:6E:00:FD:52:FE:79:3D:99:59:07:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4216e932-88f8-3b1a-a9a4-d434efe73bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:f7:24:34:35:7c:1c:37:e1:3c:93:1b:5a:54:b8:3a:6c:
         d7:bd:68:a3:f2:3c:0f:9e:ac:2e:33:f2:d3:65:25:1e:6e:66:
         83:76:3d:de:32:d5:79:72:e1:8f:4b:2d:70:17:9e:cb:22:01:
         18:f4:c4:33:1a:7f:4a:ae:81:42:22:20:e8:fc:40:84:cf:20:
         1a:c1:7b:5b:f6:a5:e9:82:e8:f5:3f:8c:9d:6a:4f:4c:85:91:
         92:d3:b1:3a:b9:58:b2:98:aa:8f:69:5c:58:66:72:68:b4:70:
         a8:54:e4:97:25:68:96:59:7f:82:42:dd:bf:f5:6b:ec:7b:c3:
         72:7c:53:c6:a9:ed:4c:59:2e:bc:81:76:48:2e:72:9d:66:1a:
         1b:4c:38:83:01:b2:b4:64:a8:fe:ab:c8:2e:b3:ee:ad:2e:48:
         4a:2e:b5:8a:16:49:4a:be:34:3c:74:cd:6a:2d:e5:22:83:dc:
         10:4b:6f:fc:a4:81:fc:50:94:ce:2c:16:24:6c:53:70:72:e5:
         1d:d6:1d:1e:77:a4:cc:44:62:ad:f5:f4:fd:b1:56:30:6e:19:
         0e:3d:ae:39:5f:ca:7d:d9:c2:be:32:25:9a:d2:7f:67:49:c9:
         0d:95:c8:7c:2e:56:54:61:47:7e:dc:1c:c7:08:1e:a2:01:75:
         a3:9a:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:22 2026 by rpki-client