Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa
File:                     4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa (raw, json)
Hash identifier:          3ECeSVC2XXH5MbtzA2NFkqYapdhNhmQaFtP5kvTcmtQ=
Subject key identifier:   0F:73:A5:16:EC:7C:C6:9E:A5:B0:7E:7C:47:FD:29:1A:92:86:8B:25
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF1576F28E890CD5E16237470
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        50.30.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:6f:28:e8:90:cd:5e:16:23:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=cfd3b87d-91a6-4211-885a-3c5e6dd2e43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:04:93:8f:e0:5b:6a:83:85:8b:57:63:33:
                    9f:5e:a7:53:c1:0d:46:a4:e9:a2:da:9a:b1:92:18:
                    8c:d9:d1:82:c7:26:1b:f4:f3:4b:f3:82:ee:db:50:
                    f2:02:a4:89:79:af:62:9e:d8:74:82:46:e2:d2:5c:
                    3c:74:7c:13:c4:f2:9a:22:7a:e7:77:ca:4b:db:2c:
                    c8:14:e9:ef:c5:f5:85:f8:c5:10:2a:71:40:0e:6c:
                    0f:bb:37:b4:ec:63:05:57:d6:64:01:bd:5e:b4:72:
                    87:b7:78:cd:dd:3e:cb:ec:59:38:1d:55:c4:a4:ed:
                    bc:d2:1e:76:67:42:8e:14:c5:b6:6e:0b:a3:c9:9e:
                    bb:ed:8a:ef:bb:45:c9:23:42:d1:b5:c1:3c:02:93:
                    9a:16:fc:63:8f:26:33:5a:b6:a2:83:9c:ae:9f:12:
                    63:d2:be:c0:e8:ac:a9:bb:20:86:d2:8b:79:2a:7c:
                    26:e5:77:a9:7b:10:2a:6d:e2:5e:63:3b:f3:29:ec:
                    5a:59:3a:44:aa:e8:33:dc:3f:3a:6b:99:9f:39:35:
                    53:83:7b:f4:94:05:e6:dc:c3:35:71:b9:0f:b9:61:
                    be:d0:38:1d:0d:cf:7d:ee:97:1e:c4:ad:1c:77:86:
                    d6:52:58:d3:80:fe:7c:3a:17:9e:e3:8a:07:35:f5:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:A5:16:EC:7C:C6:9E:A5:B0:7E:7C:47:FD:29:1A:92:86:8B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4c2ded7d-5b4e-3c1b-b94f-8e9b9097aab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:bb:b3:8f:cf:42:c9:c0:24:0b:bf:7e:a7:12:bf:7d:62:
         8b:cf:66:2a:77:67:01:20:8a:99:5b:fd:a3:29:38:b1:7a:93:
         02:58:cb:bc:eb:e1:cf:7b:b4:c4:e3:3b:1e:8b:74:7b:86:f0:
         89:0f:f1:69:ff:00:cb:e3:ea:cb:f3:a7:d3:2d:3d:bd:12:cf:
         ae:b0:18:17:a7:0a:eb:9c:1f:3f:25:aa:02:45:6d:19:86:c0:
         91:91:dc:8f:1e:05:bd:da:dc:89:b3:33:da:73:32:57:20:7b:
         f0:02:e4:23:32:76:15:3d:2e:05:59:d2:9c:9d:df:33:a6:bb:
         50:be:89:73:a7:00:a9:48:db:c5:60:0c:3b:b3:aa:e6:27:f2:
         1f:15:54:d2:ef:78:ce:ee:d2:f5:32:ab:c5:84:ef:fa:6a:6c:
         b8:c0:7e:12:11:c3:59:1e:54:01:8f:ee:0f:bb:01:c1:23:d1:
         93:9a:be:59:44:01:40:d3:21:4e:0e:e0:77:4b:50:d1:09:88:
         b9:0a:32:f5:11:a3:9d:12:97:d4:50:4a:79:1c:d7:07:41:ba:
         b3:67:8c:be:16:90:c2:af:8e:5b:48:f1:14:9d:8c:24:c0:60:
         22:df:f7:c6:3e:30:fe:8c:c4:e5:11:ba:5a:1f:b3:43:b4:71:
         c5:cc:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:43 2026 by rpki-client