Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/516d0ca7-c5bb-33f1-8057-642799d31abb.roa
File:                     516d0ca7-c5bb-33f1-8057-642799d31abb.roa (raw, json)
Hash identifier:          gP8nVb96bIppxBsVsfWIVeBtfaVEKQreFSC6Fg97Qq4=
Subject key identifier:   4B:ED:35:BE:D7:B1:2B:EE:EB:20:4F:08:E6:39:06:1A:DA:6F:B9:09
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA787F2954AEF24F153EDB600
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/516d0ca7-c5bb-33f1-8057-642799d31abb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        50.30.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f2:95:4a:ef:24:f1:53:ed:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a3f7de4-8b73-430a-87f5-76dbed9c8796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:f6:44:e9:a5:b9:a4:c8:7a:9a:f1:f5:5b:
                    5d:f6:1e:8a:af:e5:09:26:16:27:f4:f8:4f:8a:ce:
                    95:dc:16:35:20:4e:c7:6c:4b:40:07:8b:b7:ba:ae:
                    e6:eb:1b:a3:e8:62:a4:ce:ac:f1:b3:63:b4:ba:49:
                    0f:40:5b:1b:b1:70:73:dd:41:eb:72:6c:f4:be:d5:
                    6c:ad:56:dc:36:bf:5e:47:3d:4b:d2:d6:3c:9f:53:
                    9a:2a:44:e3:25:cb:ca:80:aa:04:18:16:85:54:52:
                    f1:84:dd:21:70:30:2a:f9:a2:f3:5e:f0:46:a6:e4:
                    c4:bf:1a:fe:56:08:47:73:14:9b:b7:3d:a3:cc:92:
                    49:15:c9:8a:1e:6a:b8:4b:34:c5:e9:69:ab:89:61:
                    c5:aa:19:5c:ab:40:6f:b8:7a:e0:94:49:d0:cc:b6:
                    ee:7d:d6:f8:e5:fc:ae:b8:7f:53:44:95:41:59:7f:
                    f9:f2:1e:aa:25:3c:f6:1c:ed:e4:d3:b9:89:8d:8a:
                    e0:81:5d:cc:19:d5:62:78:16:bd:0d:12:eb:31:28:
                    24:5f:74:e5:d3:a1:fd:d5:fc:57:28:f7:b6:f1:d0:
                    7c:0f:22:91:87:9e:28:cf:18:95:93:df:65:42:6c:
                    b1:9e:16:cf:78:eb:d9:53:9a:71:06:6a:8b:a2:aa:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:35:BE:D7:B1:2B:EE:EB:20:4F:08:E6:39:06:1A:DA:6F:B9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/516d0ca7-c5bb-33f1-8057-642799d31abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:ab:74:a7:91:a4:f9:a0:2a:b2:05:ee:7e:fe:32:39:9b:
         d9:8d:2e:37:e6:ed:22:8d:7f:af:75:0a:79:07:91:de:aa:94:
         56:bf:19:1d:f4:31:db:ec:84:26:1b:07:0f:95:13:04:bb:58:
         5f:d0:11:1b:dc:c1:07:65:11:93:80:58:bc:31:9f:11:df:0d:
         2a:ef:c4:2c:86:f2:f5:7e:0d:98:4d:94:af:b4:9b:af:c1:99:
         74:48:19:c1:ca:ff:d8:f1:7f:26:6a:da:e6:a5:fb:bb:08:e6:
         7e:68:51:65:91:23:3b:e0:b5:cf:ba:05:42:37:da:ab:a9:f1:
         72:4c:59:6d:30:b0:ce:92:52:56:c1:72:ad:12:db:51:b5:1f:
         77:f1:84:cb:3a:35:33:1a:c3:ba:56:10:74:3a:7a:3e:e6:04:
         f9:ac:1a:c6:a7:84:e6:0c:31:ec:a0:be:1a:d2:5e:65:a9:3c:
         7a:28:a7:36:9e:d6:01:eb:9b:2e:33:e2:08:8c:e2:b4:f7:a0:
         03:41:05:3b:cb:2e:4e:43:8a:cc:ac:a5:30:a3:86:b3:62:35:
         c5:21:60:df:86:66:66:f1:30:aa:ab:ae:45:ac:6f:0e:26:1f:
         0e:18:19:8f:3b:75:f7:f0:4e:f8:ed:cd:bb:ff:23:5d:da:cf:
         ed:42:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:59 2026 by rpki-client