Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa
File:                     c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa (raw, json)
Hash identifier:          ertgWJYk9w0FxtgS0ppVEtz7XhFZXyhFJWfnjkofzJo=
Subject key identifier:   B6:B7:F9:F0:18:15:56:C4:A4:F7:14:4E:BB:61:BE:93:5C:69:27:19
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584F4973D166E1C05845AE81F500
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29909
IP address blocks:        50.21.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d1:66:e1:c0:58:45:ae:81:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d0bf37d7-7e08-469a-82a4-0a66db54c769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:43:ed:1f:49:22:ca:de:d0:84:7d:31:7b:
                    e7:6b:22:b2:0c:67:f0:a4:35:49:90:4a:7f:2f:ea:
                    a7:51:42:f1:6c:44:b6:84:16:06:ed:ab:ca:e1:ce:
                    4e:dd:6b:5a:22:6b:2c:ae:1c:d6:f7:f3:50:3e:41:
                    c4:83:54:9a:ea:45:66:40:48:f8:2c:a3:6f:0a:d8:
                    74:05:5a:11:7b:70:ee:63:1c:49:fb:89:ed:40:e2:
                    23:ea:5d:13:a3:7c:5f:8d:02:76:63:c8:9b:77:4b:
                    0e:78:c8:8e:2f:fd:74:07:23:d6:35:b4:07:b6:27:
                    1a:44:c2:02:2d:2b:cd:08:74:ea:fc:53:2e:be:c1:
                    e0:f9:61:2f:76:05:f7:62:56:d9:ee:4a:13:cf:57:
                    b8:70:7d:09:6c:00:0e:0f:3e:57:c8:8c:52:1f:fc:
                    e9:4a:f7:cd:1b:97:f7:0d:ff:ed:31:99:00:45:3e:
                    25:0c:fb:a2:09:ca:a9:57:5d:33:63:e8:35:13:f1:
                    0c:f5:85:60:22:23:1a:00:26:6a:c5:75:12:3d:ab:
                    54:e3:18:2c:89:c1:7d:80:fc:a4:12:d2:80:26:e5:
                    50:98:48:43:c8:9c:f2:45:09:95:58:41:7c:c4:23:
                    60:8d:64:a1:a2:85:9c:1b:e5:32:a7:6d:38:79:56:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:F9:F0:18:15:56:C4:A4:F7:14:4E:BB:61:BE:93:5C:69:27:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.21.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:48:b8:1e:7e:3b:bb:4f:86:e7:ac:b8:49:e8:1d:b6:8e:bf:
         98:b7:e6:d5:06:4b:ea:5b:50:12:a2:d6:a0:4b:fc:8f:6e:e0:
         fc:f3:d4:be:f5:22:f7:11:5a:4a:74:84:32:ed:a5:6d:19:c1:
         78:a6:99:0c:cf:3f:e5:e9:df:ce:f8:e5:c2:9d:6b:ed:85:ca:
         a8:82:0b:1d:60:9b:a1:d8:87:b8:0f:29:9c:6d:98:ec:fa:f5:
         37:38:1d:4c:72:de:36:02:bd:ec:74:63:80:d2:ec:47:15:6d:
         a7:b1:64:6a:61:63:65:5c:e5:43:97:dd:ed:8c:d9:d3:25:fc:
         d2:92:3b:8a:f5:9e:f7:b5:d8:ea:c1:c2:f0:21:0e:e2:4c:1b:
         a0:a3:58:3d:d8:d4:9c:c2:b8:d6:1c:94:e4:44:3e:b8:11:07:
         bd:41:b7:1e:f6:97:18:83:4a:a5:59:71:6f:a5:0a:e2:9e:66:
         8a:dd:10:48:f9:0d:5d:5b:47:0c:68:c8:39:57:b8:88:20:0a:
         97:cf:7c:67:02:5a:06:45:9d:e1:53:81:1b:26:b2:eb:57:79:
         63:25:81:31:a3:a8:76:64:84:bf:4d:c3:b2:dc:34:47:21:7c:
         75:07:70:33:61:3e:07:48:5b:da:a1:fe:a8:08:23:94:49:7c:
         ca:af:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:22:02 2026 by rpki-client