Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa
File:                     4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa (raw, json)
Hash identifier:          NFhMRz7g2SRcvOFx1oHEj0mSB6YJRISzcmkkVaKFhLM=
Subject key identifier:   42:E6:96:C1:C4:81:DE:D6:A9:A0:36:C6:A0:92:92:DB:B1:06:C8:AB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DD1F5C3700FE36E78BFDB5E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        50.30.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:c3:70:0f:e3:6e:78:bf:db:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=9f2fb261-2f58-40c9-a3b1-2ac7967e3ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:75:dd:a9:16:a5:de:60:89:8f:7f:bf:48:
                    5b:3c:b4:4d:df:99:af:84:d1:b2:1c:17:28:46:56:
                    08:91:6c:ea:bc:24:ce:72:eb:69:d0:e6:28:40:d8:
                    65:e4:61:44:39:05:ba:77:ef:cb:8d:0f:1d:99:05:
                    78:95:0f:26:86:e3:2f:2b:a5:55:ce:01:25:9f:93:
                    12:0d:b0:af:a0:95:f5:86:aa:a6:77:e2:6a:27:ef:
                    d5:c2:27:9e:0e:52:25:19:11:40:c7:aa:08:57:53:
                    79:90:33:89:05:54:28:1b:07:3e:23:ea:0d:32:e1:
                    b0:e5:0c:b0:84:b5:7f:7a:44:39:ee:d6:d7:28:6d:
                    c6:e2:65:e4:4e:0c:b5:b8:1c:3d:80:6f:ec:d8:72:
                    1b:4d:b8:14:89:24:db:c9:18:0f:14:9a:0e:61:89:
                    7b:95:3f:0a:f0:47:22:39:38:41:2e:e4:6b:cb:54:
                    25:0f:4b:0c:f1:3a:f5:1f:3c:5e:81:29:97:58:dc:
                    63:c6:94:5f:d1:0a:5d:6c:3d:e0:52:a9:14:e3:a5:
                    88:c3:13:0e:05:a5:3e:71:4e:5d:9a:96:64:5a:25:
                    f7:7c:29:61:21:29:c2:78:c6:e9:53:8e:a3:32:86:
                    ed:2b:ea:dc:80:bf:4d:5a:dd:cc:ad:28:f3:7b:f7:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E6:96:C1:C4:81:DE:D6:A9:A0:36:C6:A0:92:92:DB:B1:06:C8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:66:f3:39:74:d0:92:71:3e:bc:7e:00:43:e9:8a:4f:28:
         06:d1:ba:93:17:42:07:43:0d:ad:c1:56:37:1a:56:dd:92:d2:
         14:55:a9:d9:49:90:19:57:d1:a0:8c:7d:3c:a3:e1:f6:93:59:
         98:ad:a4:6b:62:47:ee:5a:20:9a:a1:4f:8e:53:30:85:d0:a7:
         df:3f:85:86:fe:ab:eb:e2:4e:fd:61:88:24:e5:db:58:ab:3d:
         2c:c5:5c:37:7f:d1:3c:fa:00:a3:11:85:45:da:98:d1:b9:24:
         f6:07:a4:06:8d:ab:4a:b0:9f:58:85:e2:3e:36:ad:3e:42:c2:
         75:0f:ab:38:ad:52:64:bb:e8:bd:53:ac:74:e8:b5:5d:32:81:
         4f:a1:24:94:68:f8:95:99:48:ab:bf:4c:d3:4b:35:92:70:57:
         38:82:55:46:0e:38:95:1d:eb:6f:7e:d2:a0:4e:16:d3:34:db:
         bc:ee:a6:50:9f:2d:6c:97:fc:29:67:92:44:a0:5b:42:fc:65:
         10:94:ac:a7:31:04:af:5f:ae:6e:34:ad:e8:20:42:0a:b5:ad:
         35:f2:4f:85:17:92:a5:79:dc:94:79:3c:1e:91:89:2f:61:3b:
         07:47:80:75:5b:bf:87:c9:f5:23:fb:95:6e:8e:fd:a9:44:4f:
         2c:34:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:08 2026 by rpki-client