Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa
File:                     12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa (raw, json)
Hash identifier:          e3ei+innsYYDo/Wo0eaZwt2WNWkXXp8/IAr7LadrIUU=
Subject key identifier:   AC:CE:A7:7F:24:4D:8E:44:56:82:12:0D:FD:69:9E:E4:D6:EF:B6:D9
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584CC611EEC369B864CBF69C2C80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     29802
IP address blocks:        209.133.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ee:c3:69:b8:64:cb:f6:9c:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=5ed6f607-dcb9-4135-9a6d-ee3760d38e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:e1:b8:fa:f4:b5:3d:40:56:6b:14:96:87:
                    70:ba:41:26:7b:1a:45:a1:77:e0:51:22:74:73:19:
                    a2:c9:c0:f1:75:42:d3:8b:be:cd:fd:38:59:6a:34:
                    c6:67:a1:c6:ac:35:07:64:17:dc:69:a3:1e:60:11:
                    f5:b4:9c:21:df:7b:d5:f3:12:33:08:95:4f:dd:eb:
                    50:2f:8e:a7:fe:5b:0e:13:3d:03:da:43:b6:5c:dc:
                    4d:b8:9b:56:6f:67:d8:39:17:cc:26:fc:25:01:5e:
                    b7:73:56:63:e9:12:1a:38:e4:39:7f:b7:45:19:05:
                    31:f9:e4:48:43:14:e2:c8:70:20:00:42:5f:46:8a:
                    8a:7c:cc:76:f7:d1:55:ff:0a:24:c4:4c:d0:83:ec:
                    6e:3f:6b:93:80:7d:c0:58:9a:1e:ea:a5:04:0d:4f:
                    e8:25:29:a8:60:a6:f5:0d:e9:f6:79:3c:0b:21:0e:
                    3d:fa:da:00:05:2e:09:79:95:d8:eb:4d:03:b7:2a:
                    50:e8:00:be:c2:9c:ed:96:44:8f:41:6c:2e:0c:b1:
                    eb:66:54:68:6e:7d:c7:30:26:7c:27:c6:b2:58:38:
                    0f:d5:20:c4:55:f6:be:00:89:b3:60:14:4d:f3:74:
                    62:13:ce:89:60:07:08:07:e9:16:a7:45:d7:81:3c:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CE:A7:7F:24:4D:8E:44:56:82:12:0D:FD:69:9E:E4:D6:EF:B6:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:af:32:7b:37:33:4b:b4:3c:b5:b6:3f:30:19:7c:ca:22:
         97:42:b5:5c:a4:5a:3d:93:11:1a:6d:5d:41:a5:10:50:f7:5c:
         ac:da:11:3d:ff:fe:6b:8d:d4:2c:a5:a3:48:5b:dd:cd:20:4e:
         7a:96:4c:33:a9:f7:01:87:ac:4e:5d:31:4a:ea:bb:24:c6:92:
         b1:42:a8:17:98:e3:b2:c0:86:b9:1e:c6:84:9a:56:e1:b9:90:
         fa:18:34:e0:38:aa:b5:52:6c:28:ae:b1:b3:53:2e:d3:0f:52:
         bb:27:36:49:a2:61:20:4b:72:a6:7e:62:f3:9d:37:7b:e4:dc:
         89:6b:c1:5f:e7:09:59:52:a9:73:1a:e6:a7:d6:73:2b:71:12:
         bd:1a:40:da:ff:b5:ce:e1:c6:84:e6:ec:ce:3f:20:dd:fa:6b:
         ac:ae:4a:a4:ee:ab:af:d9:10:70:19:0a:3a:19:f2:74:d7:7f:
         0a:88:73:f8:7f:55:19:db:06:8b:e7:a7:02:d5:bc:17:6c:e0:
         8f:fe:5e:a8:72:84:af:a0:17:6c:e4:9b:a9:c3:f6:d5:ea:5e:
         b6:64:af:a0:24:79:3a:8f:32:a4:77:12:e2:eb:ff:17:21:9c:
         a5:94:9d:0a:62:f0:2d:7b:2f:c0:3d:d4:cf:42:f0:41:bf:3b:
         59:9b:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:31 2026 by rpki-client