Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/15ff9012-5f83-388f-875f-1207026ccf80.roa
File:                     15ff9012-5f83-388f-875f-1207026ccf80.roa (raw, json)
Hash identifier:          /WzIl/RIgWcnEeQx5kVcqOaJMWkob1RwgBg/6A67vQk=
Subject key identifier:   7E:CD:DC:A4:E8:CD:7B:1A:D1:4C:F5:CD:3A:2A:88:3B:1D:56:F7:81
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA791524B081674B8DA89E040
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/15ff9012-5f83-388f-875f-1207026ccf80.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1239
IP address blocks:        50.7.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:52:4b:08:16:74:b8:da:89:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=542c78f5-b582-4b98-92a3-c47150c8ba54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:91:10:2e:a1:84:44:cf:9b:38:ac:68:ed:
                    64:9f:bb:c5:d9:7c:59:e2:20:82:0d:ec:1b:da:e2:
                    6a:80:c7:db:37:93:e0:3f:93:70:16:4c:ff:71:c1:
                    e4:cf:29:a2:05:c6:a1:27:d5:7d:c2:8b:f5:85:15:
                    00:47:1a:04:1a:7a:f1:a8:6c:b7:ba:e9:4b:95:e0:
                    53:b7:94:6d:b1:04:ac:14:de:35:79:fe:a9:fc:cc:
                    07:aa:bc:34:82:02:44:61:ee:a9:62:c9:06:6e:bc:
                    0e:e1:ec:b8:32:11:8a:81:2d:26:d3:01:c1:98:b0:
                    a2:d1:76:64:5e:b1:c4:9b:b5:35:fc:8e:a9:66:d5:
                    bd:67:86:d0:ac:72:fc:ac:6e:4b:4f:a8:57:7c:5a:
                    21:ed:18:da:0f:62:bd:d2:db:41:38:27:27:d1:79:
                    6a:53:b4:e0:a8:43:c7:f2:57:2d:2b:4a:cd:9b:9b:
                    70:e2:45:8b:c0:1b:f4:06:90:f8:a9:c9:39:f4:eb:
                    71:fc:f8:c5:8f:37:08:c2:a8:ed:63:91:b0:6a:da:
                    35:cc:c3:c8:c9:d3:6b:c5:8c:14:1a:de:87:53:d5:
                    a8:28:e8:00:2d:34:45:85:b5:e5:fd:a5:dd:24:04:
                    37:d3:cf:44:50:fb:0d:74:00:4c:43:9b:cd:3d:a5:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:DC:A4:E8:CD:7B:1A:D1:4C:F5:CD:3A:2A:88:3B:1D:56:F7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/15ff9012-5f83-388f-875f-1207026ccf80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:32:f0:e5:bd:8e:fe:73:c1:4e:4e:8b:b4:68:34:d9:0a:
         fd:b5:1a:f3:ff:7b:08:b4:b7:33:9f:e1:d9:58:ab:2e:49:98:
         07:db:0d:53:00:69:82:19:a3:d8:1c:45:4d:3c:16:77:e9:89:
         5a:55:65:6b:23:e7:c0:1a:94:f8:0a:24:74:2a:60:c5:c1:bb:
         70:ad:65:15:38:ce:00:0c:19:80:e7:aa:19:3e:98:a7:70:3c:
         87:23:44:d8:18:e1:ac:33:a8:2b:55:44:80:6c:f2:61:74:c5:
         a8:32:4d:3a:a4:e4:61:00:d7:19:20:ed:98:ae:00:78:d2:9e:
         3d:37:16:93:38:35:81:dc:9b:75:dd:98:9b:e3:68:b0:a8:cf:
         24:d2:09:8c:59:68:77:4d:5b:20:6b:d1:ef:04:cf:6d:7d:ed:
         2c:83:dc:67:cf:3e:a1:f8:6e:54:4b:c6:92:28:60:96:47:c5:
         37:1a:05:df:b0:37:49:f5:d7:a6:47:ae:22:22:3c:bc:24:11:
         66:ea:e9:ce:2f:3b:5b:46:76:df:a7:8b:c7:4d:15:0d:c3:b0:
         6e:5a:e4:e1:1b:2f:0e:4a:45:cd:ab:ee:8b:6a:b5:70:b9:a5:
         a8:2e:61:31:4f:73:17:7f:75:78:06:65:96:6d:20:38:d2:65:
         1c:a0:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:56:13 2026 by rpki-client