Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa
File:                     76da557d-4967-39b7-97a3-654cbf44bf6e.roa (raw, json)
Hash identifier:          h1GVfXzrNpMXMID/9sGiKXcezsD0cTq6t5HxEyG7iJA=
Subject key identifier:   43:70:00:4B:90:2B:DE:ED:FF:27:97:1E:D2:4E:82:37:7C:0C:A1:E0
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F49734909B913A9285F327980
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        50.7.2.0/23 maxlen: 24
                          50.7.26.0/24 maxlen: 24
                          2001:49f0:d0f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:49:09:b9:13:a9:28:5f:32:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4448d6f2-9454-4731-8fe8-6150de941fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:ad:4e:1e:3d:80:b0:e5:11:d5:be:cb:d7:
                    bd:14:57:43:c6:3e:3f:82:5a:78:28:cf:bf:eb:f3:
                    52:f3:ee:26:e8:01:3c:31:ac:c5:d6:70:f3:25:f0:
                    86:17:a7:a6:67:94:fa:03:ac:c1:0f:ba:98:33:31:
                    90:0e:15:9b:41:e3:c4:7d:65:a7:df:ac:b9:79:c7:
                    1a:7f:31:7b:b9:6d:08:08:eb:5d:58:ea:72:c3:41:
                    b7:7c:64:c0:1b:d9:f0:ab:c4:97:4a:99:75:10:40:
                    87:5f:d4:35:8c:17:7d:67:34:42:a0:fa:73:17:f9:
                    78:f9:f0:96:89:95:3f:03:30:3e:6f:b3:53:5a:fb:
                    db:fe:00:ad:4e:2d:c9:33:53:50:5e:b0:1c:08:6b:
                    af:9f:47:cf:79:49:4f:98:00:74:d0:18:53:13:fd:
                    ea:37:94:a7:7b:eb:67:95:e2:ec:53:0b:83:5a:29:
                    a7:ed:30:e5:95:52:e5:78:a0:fc:3a:00:ca:f1:fe:
                    17:11:b9:da:3f:70:9a:f9:b7:3c:aa:c1:0f:cb:d8:
                    8c:75:d1:25:5c:fd:ab:d7:96:61:43:79:73:37:e8:
                    dd:d3:29:3b:4e:47:6a:04:71:3d:df:46:7a:d7:09:
                    96:d2:b5:1c:31:e7:ef:7e:ce:9a:35:76:e3:c7:05:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:00:4B:90:2B:DE:ED:FF:27:97:1E:D2:4E:82:37:7C:0C:A1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/76da557d-4967-39b7-97a3-654cbf44bf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.2.0/23
                  50.7.26.0/24
                IPv6:
                  2001:49f0:d0f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:df:b0:e1:97:e9:46:41:c0:c5:1b:96:56:94:a2:2d:88:
         21:17:93:e9:8f:f5:c3:c7:f5:f2:23:98:19:eb:37:08:26:94:
         2f:60:4e:b6:83:5c:d2:ad:ec:10:8f:5a:ce:5b:4c:ef:8d:07:
         1d:24:8b:17:e7:3c:73:c4:a2:56:35:42:bd:fa:48:a4:ef:80:
         3f:33:d7:1f:9c:6b:40:8e:4f:c0:d5:55:41:cb:d5:8d:95:24:
         dc:e3:bb:f2:63:67:fa:fa:be:91:41:67:ff:7a:61:74:9d:34:
         a0:8c:d0:5e:d4:f8:0b:c9:7a:05:31:5d:e8:55:5a:ab:8a:62:
         f3:4c:1f:97:10:06:fa:34:51:c7:13:b7:a9:42:e2:aa:0e:bc:
         33:d7:4b:8f:13:66:a3:e1:3b:47:a6:e4:4b:9e:83:22:17:0a:
         2c:23:cf:62:42:1d:55:41:ca:69:c8:fe:8f:00:f5:5c:ab:df:
         4d:4f:9b:46:49:f7:b2:6d:d2:96:3a:f9:8b:b8:93:8c:6c:1f:
         75:4e:13:54:d6:80:a9:a9:e8:d1:dc:93:ab:db:a3:1e:d6:86:
         b4:45:4d:5f:ea:82:c2:c7:7a:e3:b8:b8:2b:96:14:07:b8:09:
         63:2d:1a:2f:9c:a5:ce:fa:a5:12:1d:51:fc:d8:bf:9a:34:52:
         b1:69:eb:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:13:09 2026 by rpki-client