Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5cf7f33-55b5-36cf-873d-2db518086ec0.roa
File:                     d5cf7f33-55b5-36cf-873d-2db518086ec0.roa (raw, json)
Hash identifier:          krPx14fVeikghiu5a6BY83qXC/duJSmG7oeaM/+5PSk=
Subject key identifier:   8E:2C:D5:67:CD:61:1A:8A:E3:16:C2:B8:BA:D7:9D:27:74:8F:C3:75
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF6ECC4CA1A695565F8C8E780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5cf7f33-55b5-36cf-873d-2db518086ec0.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        50.30.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:c4:ca:1a:69:55:65:f8:c8:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=35fa3c43-ffd1-4ba1-83d2-503dc8dab033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:24:86:73:c7:d7:c2:87:49:b5:fe:f9:7f:ec:
                    82:82:ad:a9:df:5a:5d:7a:f9:d6:35:eb:d7:cc:3d:
                    b6:4f:1b:b8:2d:50:83:d7:b2:3e:e0:d1:b0:70:fb:
                    c1:f7:91:cc:c6:bb:8a:31:b2:34:4f:7c:e4:ec:dc:
                    62:41:06:2d:45:ca:fc:3d:2e:27:03:32:ef:9b:74:
                    04:8a:b6:a4:3f:86:79:8d:2d:0e:41:0e:96:12:18:
                    72:82:04:44:f4:4d:1e:51:51:ef:34:b0:20:98:49:
                    5b:dc:b2:03:8a:b1:6a:95:09:c1:d4:17:65:9a:ca:
                    9b:ad:36:ab:42:e9:df:e9:e8:f6:89:76:85:4e:09:
                    eb:8b:0a:44:5c:0e:f1:7d:f8:7f:e8:7f:fd:b4:e2:
                    7a:27:61:6f:8a:d2:3e:f8:7f:9b:64:ea:ce:da:a6:
                    37:a3:93:85:24:79:18:46:e0:4c:e1:63:b2:1b:08:
                    ca:90:a8:42:12:12:59:c9:58:da:33:8f:1c:15:f1:
                    98:c6:b6:41:ad:6b:5f:4f:ba:c2:26:53:06:3d:8c:
                    c6:74:7f:fb:89:05:29:f3:7a:70:57:b7:9a:20:f1:
                    07:4c:15:51:77:2e:00:3d:bf:6f:be:f1:d4:82:6a:
                    14:b1:c0:43:14:c2:79:a0:28:f4:c2:b8:8a:7d:eb:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:D5:67:CD:61:1A:8A:E3:16:C2:B8:BA:D7:9D:27:74:8F:C3:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5cf7f33-55b5-36cf-873d-2db518086ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:2d:bc:aa:fe:53:7c:0d:2c:00:c9:98:aa:06:44:8c:06:
         97:1a:fc:e9:c1:f4:3d:ef:91:93:97:97:5d:ae:4d:2f:0c:08:
         2b:6f:3f:1e:31:48:7e:bf:c5:26:4c:e3:39:ed:6d:07:89:83:
         40:7e:7a:7d:df:d8:4a:49:2f:fb:35:18:f7:09:1e:19:06:fb:
         4d:15:0c:da:23:2e:f6:58:81:bd:ab:df:7f:15:83:bf:c4:bd:
         6f:d5:7f:2a:60:b4:26:09:50:a0:90:ad:50:7e:8d:ae:d8:13:
         a1:76:9f:6c:c9:1b:18:b4:e4:a0:d3:ce:eb:2a:27:27:f5:1e:
         d7:61:7d:38:b0:64:a1:6f:07:74:04:14:ee:c8:d4:71:64:07:
         94:68:ed:d6:1d:30:f2:71:2c:d5:76:da:bd:a1:0c:aa:f0:dd:
         0f:61:54:00:7d:24:32:b2:9f:83:46:34:18:76:af:c8:57:51:
         bd:5e:70:a0:93:4d:04:b3:62:14:d2:11:e6:0f:9e:5b:3b:39:
         1b:e9:c6:ec:7f:f6:5e:16:71:c6:05:7c:c9:d9:99:a1:f3:05:
         2c:3e:b9:24:63:b5:d7:97:2c:72:90:d7:41:35:c9:1f:b2:3a:
         37:19:eb:e2:fb:a4:ff:1a:79:01:c2:df:9f:d4:a7:09:3a:d7:
         d6:0d:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:24 2026 by rpki-client