Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/932b5e30-030c-3be4-aa39-7af243027f00.roa
File:                     932b5e30-030c-3be4-aa39-7af243027f00.roa (raw, json)
Hash identifier:          il0Ga+gRZ1F2bRjU3wDBlsDB/FuOZXgtObl3fAxJIT0=
Subject key identifier:   4D:29:15:56:34:A0:E8:47:20:DD:FA:93:F3:7B:55:9D:C1:98:96:2C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF1576DCE013612830AB9C680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/932b5e30-030c-3be4-aa39-7af243027f00.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        50.30.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:6d:ce:01:36:12:83:0a:b9:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=e8453bc7-08c5-46fd-9d9e-eac61b84dea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:b4:f1:4d:81:5c:6a:bd:36:82:87:32:ca:
                    4d:3f:84:93:fc:0f:ae:d5:b3:fa:56:4c:3e:d4:66:
                    70:d1:bd:42:8e:01:8e:94:09:c7:34:f6:2f:c3:d1:
                    c1:3f:dc:4c:96:5a:83:df:94:b7:2a:ec:17:4a:5d:
                    ae:64:d8:64:c9:a1:71:56:25:a8:0a:e6:fb:47:71:
                    8d:6f:8c:e3:70:d7:11:97:a2:82:3d:7a:f5:84:21:
                    af:5a:7e:61:94:9c:a1:a0:fd:cd:15:b7:a6:a6:d4:
                    aa:31:c5:25:4a:6f:e8:48:bd:e2:3b:49:69:2f:af:
                    f5:4b:61:de:f7:c2:34:82:b1:a2:fc:b0:46:6f:4e:
                    5b:ce:80:54:8c:b8:db:0b:ba:c6:63:44:e2:f2:3b:
                    53:17:2e:4d:fc:f9:33:cf:ab:d6:4b:24:a0:46:5d:
                    56:69:fe:30:24:48:9e:74:8e:11:ba:50:4d:12:77:
                    fd:d9:a4:15:b4:dc:30:f3:4a:79:d0:a3:45:f1:cc:
                    15:c6:14:ab:b2:06:be:6f:5b:76:8b:e4:ea:b6:69:
                    27:1c:d3:bb:c3:9e:7b:a5:b5:bb:ff:f2:68:01:65:
                    11:e6:ad:c2:81:42:fc:c6:ad:65:0f:7e:fd:3e:cc:
                    5d:0f:bf:e3:15:fe:61:94:fd:64:c3:9f:f0:e1:64:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:29:15:56:34:A0:E8:47:20:DD:FA:93:F3:7B:55:9D:C1:98:96:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/932b5e30-030c-3be4-aa39-7af243027f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:9d:23:10:7b:b0:04:64:07:2c:cd:38:6a:db:f6:3d:ef:
         4a:b2:93:85:53:5e:89:ab:b7:b3:b7:28:a9:55:f2:d1:fb:22:
         06:28:58:7b:5e:e1:f4:3c:45:84:e7:9e:23:af:41:72:be:1b:
         d9:e3:d6:b8:19:ff:8a:f0:cb:02:c3:7c:15:60:35:95:df:fc:
         4e:ee:df:70:a7:79:b0:06:7b:d7:3e:3c:ad:75:24:c3:77:c4:
         1e:7d:73:68:be:16:34:96:ec:ed:54:d6:5c:19:4d:66:23:ba:
         3a:55:14:50:1b:65:ad:bc:26:0c:f0:af:4d:79:87:60:17:d4:
         09:97:c6:f7:d9:fe:5b:6e:82:fc:26:52:d0:32:99:ba:d5:26:
         0a:ce:6b:9a:25:f6:45:4f:81:dc:b3:3e:90:13:84:73:3e:35:
         f7:61:49:84:0d:24:95:41:8e:5b:51:89:74:d6:84:ee:ec:43:
         08:be:fe:01:a1:40:4d:e9:de:08:94:3a:20:e3:72:25:b7:f6:
         9c:c6:2f:b1:a8:00:40:b6:52:7c:ab:a1:6a:5f:9d:54:90:eb:
         ed:0a:19:e3:e6:f8:65:ad:16:c5:26:72:fc:78:23:6f:00:eb:
         33:59:e8:26:24:e9:d9:78:56:11:b2:03:db:a9:8f:c9:b0:cb:
         5c:74:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:41 2026 by rpki-client