Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa
File:                     b7224c0c-df06-3f39-8925-071b3136bbe4.roa (raw, json)
Hash identifier:          RM9hQf7CfATGYgqVtTVU1DWyvQxtfAzLqvl2IHZkRR4=
Subject key identifier:   A3:23:F0:1D:2D:31:88:DD:93:68:70:65:AB:50:82:62:D7:51:29:31
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584D571FA13B2024D7BBFD5A9640
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     201385
IP address blocks:        50.54.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a1:3b:20:24:d7:bb:fd:5a:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=03eff340-c88d-4277-bde7-7c5a89c36ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:ba:86:0a:61:2a:ed:34:46:f2:f9:dd:ff:
                    d5:c8:6d:ba:f3:53:40:10:a2:53:8c:19:83:c1:ee:
                    9c:d0:a7:d8:73:50:97:ab:e5:69:eb:0a:fb:01:10:
                    4b:8b:59:2b:f6:26:6d:f6:97:a2:0b:89:54:bb:69:
                    f7:84:3b:1a:96:eb:2e:69:17:07:1a:e9:03:90:1f:
                    63:71:9e:42:5c:df:a2:5d:65:b2:15:6b:a8:1b:b5:
                    66:8d:bc:e4:c1:5d:54:d9:ad:56:33:20:d9:84:cc:
                    4f:b5:3a:69:b6:c2:d1:86:a4:d9:1c:c4:b9:16:d8:
                    e2:e2:a5:ab:af:1b:07:f8:cd:7c:44:3e:87:71:07:
                    37:2f:fd:32:ae:ce:59:05:c3:7a:b2:b5:e7:db:91:
                    92:75:cb:93:88:c3:9d:6f:77:6e:c4:80:eb:84:28:
                    48:b4:c4:61:33:17:b3:b1:93:0a:d7:f5:5d:5c:a1:
                    81:8f:67:15:5c:9a:db:01:c9:7a:4a:6c:6e:88:a0:
                    bc:76:8e:3a:58:69:41:0e:f4:fe:6a:80:6f:2e:1d:
                    34:2c:3f:31:63:eb:64:b3:dc:e5:a6:bd:45:7e:41:
                    ec:dd:cd:c2:71:de:72:be:1a:ad:4e:54:d8:f4:65:
                    2f:22:74:33:25:fd:21:df:1a:57:ef:c2:99:58:34:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:F0:1D:2D:31:88:DD:93:68:70:65:AB:50:82:62:D7:51:29:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7224c0c-df06-3f39-8925-071b3136bbe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.54.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:d7:7f:9a:ac:12:f1:af:a3:47:85:82:b9:a0:91:7d:a2:
         81:4a:b6:6c:0a:32:61:db:b1:d3:7f:8e:f6:a4:d5:28:eb:61:
         79:27:a3:5e:d5:75:7a:00:7a:5e:ba:24:c6:6a:e0:d5:fc:88:
         ed:2e:49:7f:71:52:2b:5e:ca:44:ab:a8:4f:81:91:0b:90:ec:
         bc:54:e6:ca:71:ac:17:0b:77:63:d0:01:67:85:5f:e1:41:ba:
         21:5c:4e:86:29:70:cc:a8:6c:fb:b4:fd:83:2f:4a:7a:32:fe:
         25:00:d1:f1:af:b7:45:64:08:2e:20:af:7b:12:32:50:97:39:
         6c:d8:f0:a6:dd:69:08:28:7c:c6:dd:5a:3a:7c:82:c4:10:d8:
         64:1d:da:ab:d4:bf:bc:3a:9e:24:e6:e2:83:60:a2:86:75:ce:
         49:27:da:c3:9a:aa:a6:5f:27:6b:01:ef:cd:b8:7a:28:a6:a0:
         2d:5f:70:65:91:34:29:6e:1b:a6:42:f1:0e:03:83:7d:5c:c7:
         c1:4b:74:c7:a7:d3:4d:9c:08:f3:8c:36:b0:a3:60:df:53:5d:
         30:7b:9f:7d:ec:59:b8:bd:09:04:cc:90:05:92:c0:ab:7a:68:
         6b:42:e0:d0:b1:fc:d2:94:ad:c5:93:84:95:6b:30:71:48:71:
         90:f0:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:08 2026 by rpki-client