Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3126e5c-9199-31f6-b579-130a6c718ff7.roa
File:                     b3126e5c-9199-31f6-b579-130a6c718ff7.roa (raw, json)
Hash identifier:          a664tgMGkDPjK+k6lAB3w2bXUKZ3ofq9iTY/fulfwjk=
Subject key identifier:   4B:95:6E:78:5E:2C:A4:CA:6F:6D:76:FF:0A:62:1B:A6:AB:3E:98:D3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA787FAA62593DF0816945980
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3126e5c-9199-31f6-b579-130a6c718ff7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        50.30.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:fa:a6:25:93:df:08:16:94:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c55bff40-98a6-47d9-8b1a-4dbc18775cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:55:d6:80:ad:da:68:1f:4f:4f:e1:02:59:
                    56:a3:49:fe:b2:3b:35:40:f1:86:14:b8:5e:a7:ec:
                    a1:20:45:bd:73:08:00:27:72:e8:59:1e:53:3a:1a:
                    17:1f:4b:7b:3f:1c:0e:2b:2e:80:a3:72:80:4a:2c:
                    29:fc:ec:88:f4:d4:8d:9a:80:f3:81:14:a4:7a:c8:
                    0b:62:54:b5:45:dd:26:a2:89:c0:41:af:e7:43:8c:
                    73:49:55:11:c8:09:17:fe:6a:de:69:21:4f:49:cc:
                    62:db:d9:a7:45:3f:bd:97:1b:10:36:ad:b8:62:cb:
                    42:1f:04:29:46:d3:26:af:88:65:38:a4:12:9b:ea:
                    e7:98:38:57:82:15:bf:7b:30:40:12:8e:83:eb:e0:
                    ef:c2:ed:5a:81:13:05:5e:f6:85:44:b3:8f:6b:f9:
                    ee:94:c9:dd:48:e5:a3:da:27:e2:d6:8b:be:f1:81:
                    2f:d0:80:c5:c4:f9:66:27:2f:f7:ad:81:29:e0:28:
                    be:be:0d:01:57:39:fe:47:fa:fe:f7:30:41:bc:7d:
                    c8:c1:9b:e4:a0:20:81:07:6c:cb:ce:f6:72:f6:73:
                    80:34:66:f8:ac:36:19:d9:96:cc:d5:1c:dc:c1:96:
                    39:8b:5f:85:6b:4a:1d:97:72:a4:88:ff:f8:8f:15:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:6E:78:5E:2C:A4:CA:6F:6D:76:FF:0A:62:1B:A6:AB:3E:98:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3126e5c-9199-31f6-b579-130a6c718ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:74:79:af:6b:39:61:ec:bf:9a:d3:b0:57:b3:34:34:18:
         6d:36:c9:41:f6:fb:02:b5:51:95:5b:ae:39:92:23:65:eb:c4:
         a3:59:ac:82:f1:2b:32:c2:00:a2:50:d9:c1:84:da:73:9b:de:
         f5:44:da:af:19:a6:cf:e2:6e:40:79:75:34:55:8a:fd:d8:b1:
         7e:87:05:ba:0b:6c:e8:58:f8:fc:16:ad:be:0c:0e:46:f4:ea:
         3b:27:32:e0:97:8f:b0:6e:51:3b:c4:70:bc:4e:af:61:83:3c:
         c6:5d:bc:bd:e0:8c:0c:b4:d7:3f:64:2b:59:53:62:14:33:d4:
         f5:db:44:b1:b0:fd:d3:91:a5:f8:13:f9:7f:4b:53:11:ee:f8:
         3d:0b:32:e0:d7:d2:3d:dd:d2:7c:83:54:ee:55:89:19:21:88:
         11:81:56:29:e3:cd:02:b2:1b:e0:c1:a7:df:70:fe:a5:9d:59:
         f7:0b:05:d8:cf:fd:c9:da:a5:6e:ca:e6:25:79:89:e1:1a:c4:
         49:77:57:da:b9:24:7f:f1:ae:29:ab:5c:0b:4c:ed:a8:ad:f3:
         94:92:b9:e9:ed:ea:04:29:3c:ef:1b:dc:a4:ab:70:b1:24:74:
         46:86:11:1d:cd:7a:8a:9e:0e:57:3e:72:f6:67:35:63:48:92:
         34:40:67:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/qmJZPfCBaUWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzU1YmZmNDAtOThhNi00N2Q5LThiMWEtNGRiYzE4Nzc1Y2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVxV1oCt2mgfT0/hAllWo0n+sjs1QPGGFLhe
p+yhIEW9cwgAJ3LoWR5TOhoXH0t7PxwOKy6Ao3KASiwp/OyI9NSNmoDzgRSkesgL
YlS1Rd0moonAQa/nQ4xzSVURyAkX/mreaSFPScxi29mnRT+9lxsQNq24YstCHwQp
RtMmr4hlOKQSm+rnmDhXghW/ezBAEo6D6+Dvwu1agRMFXvaFRLOPa/nulMndSOWj
2ifi1ou+8YEv0IDFxPlmJy/3rYEp4Ci+vg0BVzn+R/r+9zBBvH3IwZvkoCCBB2zL
zvZy9nOANGb4rDYZ2ZbM1RzcwZY5i1+Fa0odl3KkiP/4jxVbtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuVbnheLKTKb212/wpiG6arPpjTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjMxMjZlNWMtOTE5OS0z
MWY2LWI1NzktMTMwYTZjNzE4ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMh6GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERPdHmvazlh7L+a07BXszQ0GG02yUH2+wK1UZVbrjmSI2XrxKNZrILx
KzLCAKJQ2cGE2nOb3vVE2q8Zps/ibkB5dTRViv3YsX6HBboLbOhY+PwWrb4MDkb0
6jsnMuCXj7BuUTvEcLxOr2GDPMZdvL3gjAy01z9kK1lTYhQz1PXbRLGw/dORpfgT
+X9LUxHu+D0LMuDX0j3d0nyDVO5ViRkhiBGBVinjzQKyG+DBp99w/qWdWfcLBdjP
/cnapW7K5iV5ieEaxEl3V9q5JH/xrimrXAtM7ait85SSuent6gQpPO8b3KSrcLEk
dEaGER3NeoqeDlc+cvZnNWNIkjRAZ5A=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:26 2026 by rpki-client