Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa
File:                     d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa (raw, json)
Hash identifier:          plFWnqv0klaqmCv/M38sumQ2hX5LKjgfdHbzLpsAnl4=
Subject key identifier:   F2:8C:12:A7:49:A5:AB:F7:66:56:0D:69:E4:9A:CF:30:21:44:75:D8
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E0436155B01E6AFD091422928
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     8100
IP address blocks:        66.232.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:15:5b:01:e6:af:d0:91:42:29:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=3709e414-abe2-4d49-a796-104ead6286a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:95:56:98:17:8e:cb:c7:2d:2e:b8:09:8e:
                    d3:e5:6f:5a:4a:84:11:05:b6:6d:e2:d3:d9:c6:e3:
                    d7:ff:75:54:82:92:5e:1e:1f:e1:af:9d:a5:76:cf:
                    52:7a:06:7c:85:d7:be:d0:e4:8f:a3:3c:a4:5b:4e:
                    58:02:9c:10:62:18:58:bb:52:b6:51:e8:48:84:53:
                    62:d1:33:22:e2:7f:36:1a:d5:ee:f8:c6:09:04:b6:
                    1e:55:81:0a:7b:3c:24:64:26:9e:a5:f3:77:06:b9:
                    5f:01:02:e9:79:14:e0:3e:6e:67:5a:0d:42:6e:ce:
                    a7:34:93:0b:47:5c:c6:0a:97:33:f7:07:55:e4:e6:
                    d8:4e:b3:49:7c:02:1f:20:f2:bf:fc:67:8d:d2:5a:
                    a5:dd:20:d9:97:f8:16:4c:06:01:05:b3:1b:66:5f:
                    be:84:c9:0d:0a:ad:dd:57:27:5f:63:3b:50:26:b1:
                    6f:df:92:2d:40:53:25:8a:51:d1:fb:ae:12:d0:03:
                    cb:9b:dd:de:d4:25:a1:b2:e4:8e:5d:ee:69:bb:a6:
                    c6:f9:7b:8c:2f:7c:e9:1e:97:b8:82:fc:7f:f5:ed:
                    bf:1a:78:d7:d2:52:42:ba:17:6a:2f:7f:be:1c:19:
                    4a:0e:64:f3:d2:ac:11:10:83:45:ab:d7:37:da:97:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:12:A7:49:A5:AB:F7:66:56:0D:69:E4:9A:CF:30:21:44:75:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d92a72f7-f2a5-3a08-929a-eb0b69626fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ba:eb:18:84:68:80:a3:7e:5f:48:50:2d:7f:42:5a:0c:b5:
         e4:29:27:dc:cb:92:e1:c9:66:8c:ef:6b:87:94:cf:ca:45:fa:
         f3:c7:55:0e:07:fb:fb:33:85:1b:3f:2b:e3:3c:38:3f:c4:2b:
         99:ca:9a:88:aa:f2:a8:43:8f:5b:04:9e:4e:e2:e2:b7:c9:86:
         1a:94:d4:0d:02:95:65:72:ed:21:f4:1c:5f:a7:4d:74:f0:48:
         73:33:c9:82:fa:ac:95:4a:b8:67:46:84:71:c6:91:0d:37:2b:
         59:0c:bc:be:18:23:e5:ac:46:f0:56:f7:6a:0f:52:fe:1b:84:
         c6:15:ff:3f:88:73:c4:c1:f2:fa:53:09:2d:43:1d:46:6c:65:
         69:8f:b8:3e:5e:98:8c:e7:97:2d:2e:e8:2c:8b:2f:1b:80:5b:
         a2:ee:1e:b3:d6:db:a5:47:c5:fb:1f:3c:75:e6:40:78:a8:8d:
         26:ac:fa:d0:aa:21:2d:79:8b:d1:ff:26:81:a5:df:5c:67:19:
         8b:3a:85:44:cf:c5:a7:de:b0:22:58:c1:51:1e:63:85:52:b6:
         bc:33:3b:4a:0a:93:eb:fd:70:be:80:ef:72:39:c4:f8:3d:d7:
         e5:b2:46:aa:c9:72:7e:30:76:60:a0:e7:cb:a7:6f:d6:74:bc:
         10:dc:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:38:18 2026 by rpki-client