Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/49b8c42a-ed2c-31c9-9714-60f327e35ff6.roa
File:                     49b8c42a-ed2c-31c9-9714-60f327e35ff6.roa (raw, json)
Hash identifier:          fPSJ+Teb60LrwDfPVAIUMnkU2lQw9V7kFv1R0/p3DPQ=
Subject key identifier:   3B:20:3B:84:E4:66:3C:61:B3:6C:CB:ED:6B:7D:0E:6B:70:A7:59:7B
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F29D5A324561D9F63AD8CBC40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/49b8c42a-ed2c-31c9-9714-60f327e35ff6.roa
Signing time:             Sun 13 Sep 2026 17:14:03 +0000
ROA not before:           Sun 13 Sep 2026 17:14:03 +0000
ROA not after:            Sat 12 Dec 2026 18:14:03 +0000
asID:                     48266
IP address blocks:        16.5.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:d5:a3:24:56:1d:9f:63:ad:8c:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 13 17:14:03 2026 GMT
            Not After : Dec 12 18:14:03 2026 GMT
        Subject: CN=06c624af-1546-41b1-92c3-ce38fe4a3ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:bd:81:4b:20:ad:f7:dc:91:7b:00:81:47:
                    7e:57:57:21:09:84:c9:65:6d:82:c6:66:c4:03:e6:
                    41:dc:ea:f7:e3:9e:ab:8b:c5:ef:50:db:df:7f:99:
                    79:3e:b6:c6:4d:ba:7d:11:27:50:8c:13:4d:2d:29:
                    1f:4d:59:f7:61:97:38:a8:cb:a6:4a:cd:9f:2b:c1:
                    4d:da:ee:16:f5:49:7d:bf:3f:95:1d:5f:72:9c:63:
                    1d:80:4d:e4:9e:ef:73:3a:e6:31:50:4b:d9:a2:8d:
                    67:d9:15:06:f7:e6:a3:b3:03:92:54:33:56:b0:76:
                    33:d7:09:a2:bc:d4:cf:ab:5e:15:b9:c1:b0:d9:8a:
                    64:6e:0f:ef:ba:da:62:49:33:e7:6d:09:f5:4a:c8:
                    ea:a6:c4:12:31:e1:17:8a:a5:e0:f8:02:b5:ae:2a:
                    fc:bf:a6:9f:6b:77:d2:ed:ca:f1:57:bb:db:9c:bf:
                    7d:67:53:43:40:19:a9:e3:ce:13:0f:a3:ec:70:60:
                    5b:eb:ac:f9:49:0c:47:d1:09:a4:ff:d7:8d:1d:2f:
                    d0:58:11:0a:17:96:1d:28:79:ed:0f:5a:ca:63:35:
                    9f:92:9a:b7:bb:d1:8e:8f:ce:a9:da:a9:d7:c8:a8:
                    46:a5:a0:6f:02:02:83:c2:15:62:7b:21:7f:e0:c7:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:3B:84:E4:66:3C:61:B3:6C:CB:ED:6B:7D:0E:6B:70:A7:59:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/49b8c42a-ed2c-31c9-9714-60f327e35ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:01:a7:24:b8:ba:b5:4c:a6:1f:6c:f8:9e:a0:e8:c8:30:
         4a:80:7b:90:18:81:3f:2e:9e:46:47:20:12:7a:81:1f:33:97:
         a3:d2:2e:4b:be:e4:b7:ba:15:83:bf:93:7c:f0:5a:35:0c:17:
         9c:ff:21:01:4f:07:d1:37:72:6c:86:20:36:38:eb:f6:c0:8b:
         e7:18:53:3a:1c:2e:c2:1f:90:61:78:97:95:91:b8:c2:86:d6:
         3a:ca:4d:3b:b4:09:b2:17:72:5b:d9:62:0a:9f:3d:f1:13:50:
         47:83:17:ee:7d:9c:ae:68:ba:42:db:a4:11:e9:91:26:01:8e:
         da:bf:44:c7:d3:59:9e:d0:27:84:1a:2c:2a:02:82:23:10:50:
         cc:df:ff:24:83:01:c8:4f:1b:7d:1b:ae:da:f0:ec:46:55:43:
         94:f5:5f:e3:04:6a:c0:b5:62:4d:a7:f5:10:89:3e:90:d9:c0:
         02:38:ef:f9:5b:c5:97:12:d7:6b:86:06:de:30:cb:52:80:2b:
         4b:56:11:ae:c8:1f:49:09:ce:3b:57:6a:12:4c:30:07:6d:49:
         04:9c:9d:5f:b4:2f:99:7b:b1:9d:ce:c7:3c:42:e9:4b:3b:93:
         76:c7:35:98:1b:b3:29:ac:97:b1:b4:72:1f:98:6f:fe:5d:e7:
         d6:ac:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:25 2026 by rpki-client