Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8352521-9735-3166-917a-a8829e3d641c.roa
File:                     d8352521-9735-3166-917a-a8829e3d641c.roa (raw, json)
Hash identifier:          aUh3BLOoycVDyw7ZsJUr+xMq7ov/XIpFtwk6OHyrvfA=
Subject key identifier:   59:EC:0B:3A:78:33:F3:39:93:B5:1A:57:66:DA:AA:5C:7B:1A:5E:9C
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E1D359D92CD68A6A57AB7BF00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8352521-9735-3166-917a-a8829e3d641c.roa
Signing time:             Tue 09 Jun 2026 11:54:59 +0000
ROA not before:           Tue 09 Jun 2026 11:54:59 +0000
ROA not after:            Mon 07 Sep 2026 11:54:59 +0000
asID:                     207343
IP address blocks:        199.235.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:35:9d:92:cd:68:a6:a5:7a:b7:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun  9 11:54:59 2026 GMT
            Not After : Sep  7 11:54:59 2026 GMT
        Subject: CN=71731d26-290f-43ec-ab0f-b9a4d60f40b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:a6:c8:8e:db:c7:cc:2e:f5:14:0f:db:7e:
                    a7:c1:5e:1a:42:93:c7:7e:94:8e:2e:75:55:45:d6:
                    ea:8f:6f:b2:73:d1:c9:f6:64:f3:f0:50:a1:40:70:
                    8b:7d:3f:9c:5a:11:b5:c9:74:92:23:35:39:d3:cc:
                    f3:24:64:1a:e0:8c:17:5c:c3:75:fb:47:65:e9:44:
                    59:08:d1:00:04:a9:fd:e0:ce:dc:a5:94:37:d4:6d:
                    93:e0:65:42:06:36:90:40:53:74:80:77:53:75:cf:
                    1a:71:2e:41:4b:d5:54:69:6d:26:af:b3:47:4b:4f:
                    5a:09:85:ed:a5:b2:ee:18:3a:20:92:98:21:5e:03:
                    7b:ac:5b:51:41:20:ad:3c:77:3e:0e:a9:4f:0b:77:
                    e0:be:71:f8:3a:35:cd:cb:a7:38:58:36:da:9c:8e:
                    63:fd:6f:f1:79:26:73:e2:b8:6b:3c:15:a0:58:10:
                    a8:96:da:a5:21:a2:bb:90:36:68:8e:aa:e2:f4:c7:
                    09:b3:e7:f2:20:a6:b3:10:be:f4:ef:10:4b:da:68:
                    46:d2:48:8e:c4:44:73:0f:f8:9d:57:be:01:a5:d2:
                    a6:85:9a:f8:f3:0a:47:58:8b:bc:f5:80:31:eb:b7:
                    76:37:03:13:3b:44:45:57:2a:d3:50:c3:31:aa:f7:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EC:0B:3A:78:33:F3:39:93:B5:1A:57:66:DA:AA:5C:7B:1A:5E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8352521-9735-3166-917a-a8829e3d641c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:98:5f:fe:1e:2a:44:7f:0a:e0:40:e7:76:69:12:e0:fe:
         cd:1e:f6:d4:16:7f:72:54:f9:f3:39:b3:30:83:58:9d:50:2a:
         75:6a:cb:47:c7:5f:34:32:78:da:e8:24:48:a4:47:c4:6e:1a:
         bf:d9:06:3a:73:16:bd:46:49:1f:b5:a6:d5:98:aa:eb:32:3a:
         b5:b6:b7:b8:84:03:39:c2:71:34:5b:c4:be:22:0b:7b:00:8c:
         9e:89:67:33:6f:9b:5c:d4:32:f5:8c:4c:1e:1e:90:99:e5:93:
         8d:e7:57:9d:92:e2:fd:c1:14:39:bb:7a:f1:36:cf:94:96:23:
         95:ac:1d:42:e3:65:8c:dd:d8:ec:54:4c:eb:fb:56:7b:53:6e:
         92:37:08:1c:8a:bc:a0:81:d4:5d:13:9b:0b:7e:69:28:b8:34:
         76:33:23:95:d0:37:b1:f4:f3:5b:e9:b8:11:23:b1:d9:61:f5:
         4f:5a:75:45:5f:fb:89:53:fe:12:ce:70:2b:dc:e9:a2:eb:f6:
         6c:36:64:8f:70:b3:f5:19:9e:0d:2e:e3:36:9e:db:8a:68:44:
         99:8d:5a:66:4d:5d:83:2d:47:04:6b:fd:b3:e0:2c:99:83:c2:
         72:d6:bf:f5:8e:f6:31:53:1f:44:bf:7b:a6:bb:c3:4a:f7:53:
         12:aa:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:32 2026 by rpki-client