Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e55f6a7-e8ed-335c-b9b8-b1c21243b4aa.roa
File:                     7e55f6a7-e8ed-335c-b9b8-b1c21243b4aa.roa (raw, json)
Hash identifier:          /CcL+cBCXaTI1bO7SI7+DTxqZEHdJRbGt5xZMp6hL3w=
Subject key identifier:   D4:55:BE:AA:DE:F5:AF:E9:8C:DF:18:BD:19:DD:A7:78:7E:F3:1F:A5
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D0217974DDA2BC6AA8B6E9300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e55f6a7-e8ed-335c-b9b8-b1c21243b4aa.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     1239
IP address blocks:        50.7.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:97:4d:da:2b:c6:aa:8b:6e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=c4ecab9a-bc30-4158-9bb7-01e1e4cdb857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9a:42:5b:17:7b:ba:bd:30:e0:8b:01:34:b9:
                    9b:78:3a:ce:e1:ff:c0:c4:6a:49:55:28:7a:5d:1c:
                    f4:23:20:cc:fa:bb:9a:46:03:e9:1f:d3:18:3e:ae:
                    64:bc:ea:84:9c:bd:9b:60:97:77:85:96:c9:c7:ec:
                    31:2f:c1:5a:bd:40:51:0f:12:51:a2:4e:4b:77:2b:
                    33:4a:f4:bb:e9:c6:fa:ac:31:6c:3d:d6:1c:66:1c:
                    80:9c:e1:90:0f:79:7c:c1:c7:40:fc:0d:ba:ad:1a:
                    ef:2a:13:42:e9:81:36:3b:88:8c:98:83:c8:bb:1f:
                    46:25:ab:e7:35:6b:a9:42:74:0d:a9:ba:9f:61:52:
                    b8:f7:2c:6a:7e:c0:b9:38:6c:a7:e2:58:56:8e:01:
                    7d:91:8b:3f:cd:99:42:d6:f1:96:1e:48:a3:c7:bd:
                    91:c1:12:8b:07:12:25:da:c8:f2:9e:1e:47:07:a0:
                    72:1c:45:6a:7d:8b:1a:48:5c:15:71:ac:3e:f4:9c:
                    14:5a:b0:8d:de:bd:a8:1d:b2:c3:55:ee:fc:34:39:
                    cc:c8:d5:54:f5:04:8b:a9:85:99:4b:1f:57:5d:bf:
                    6c:df:bd:3f:8c:40:84:22:01:e5:6d:17:c8:73:cf:
                    fa:5d:e8:e7:77:ea:35:fe:39:41:e2:87:b5:6f:da:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:BE:AA:DE:F5:AF:E9:8C:DF:18:BD:19:DD:A7:78:7E:F3:1F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e55f6a7-e8ed-335c-b9b8-b1c21243b4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:2a:c5:5b:bd:28:65:38:e8:ff:82:47:e6:c1:58:c0:ae:
         9a:97:11:d6:27:f1:e4:26:12:e4:a0:4a:ec:0e:e4:e1:09:ad:
         d9:7a:c9:cc:53:6d:8d:e1:fc:ca:b5:1b:e7:1e:dc:5b:82:5c:
         b2:19:7c:b5:80:eb:f5:d5:33:6f:56:61:30:04:fd:e2:ed:ea:
         3e:88:cd:68:22:46:01:72:53:38:3d:84:83:2d:80:c0:1a:ee:
         6d:96:ee:73:75:a4:f4:6b:0d:8b:53:74:86:8d:cb:b3:a7:94:
         e2:d1:42:f6:4a:24:80:7e:ae:6b:87:81:67:f2:cb:c6:e8:d3:
         60:50:23:59:8b:e7:55:01:b2:51:1d:5a:ef:eb:59:5f:d1:62:
         ba:58:c5:d9:9c:69:85:41:d1:35:0a:72:ba:37:80:3b:29:6a:
         f3:30:f9:cc:8a:8f:17:22:a0:83:0b:0a:2c:08:53:16:39:70:
         ee:b6:0d:e2:96:23:30:49:71:e4:2d:ae:a2:39:36:35:05:97:
         78:e9:ca:da:5f:a5:59:5e:bf:f3:96:61:b9:1d:ab:79:33:99:
         be:69:9b:38:76:78:29:86:c2:5a:fe:c0:07:d6:3c:9c:00:68:
         96:40:3c:d9:f2:ac:f8:45:65:af:1e:da:cf:7a:94:76:44:2e:
         ec:d6:83:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5dN2ivGqotukwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzRlY2FiOWEtYmMzMC00MTU4LTliYjctMDFlMWU0Y2RiODU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95pCWxd7ur0w4IsBNLmbeDrO4f/AxGpJVSh6
XRz0IyDM+ruaRgPpH9MYPq5kvOqEnL2bYJd3hZbJx+wxL8FavUBRDxJRok5Ldysz
SvS76cb6rDFsPdYcZhyAnOGQD3l8wcdA/A26rRrvKhNC6YE2O4iMmIPIux9GJavn
NWupQnQNqbqfYVK49yxqfsC5OGyn4lhWjgF9kYs/zZlC1vGWHkijx72RwRKLBxIl
2sjynh5HB6ByHEVqfYsaSFwVcaw+9JwUWrCN3r2oHbLDVe78NDnMyNVU9QSLqYWZ
Sx9XXb9s370/jECEIgHlbRfIc8/6Xejnd+o1/jlB4oe1b9oDOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRVvqre9a/pjN8YvRndp3h+8x+lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvN2U1NWY2YTctZThlZC0z
MzVjLWI5YjgtYjFjMjEyNDNiNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgc4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ9KsVbvShlOOj/gkfmwVjArpqXEdYn8eQmEuSgSuwO5OEJrdl6ycxT
bY3h/Mq1G+ce3FuCXLIZfLWA6/XVM29WYTAE/eLt6j6IzWgiRgFyUzg9hIMtgMAa
7m2W7nN1pPRrDYtTdIaNy7OnlOLRQvZKJIB+rmuHgWfyy8bo02BQI1mL51UBslEd
Wu/rWV/RYrpYxdmcaYVB0TUKcro3gDspavMw+cyKjxcioIMLCiwIUxY5cO62DeKW
IzBJceQtrqI5NjUFl3jpytpfpVlev/OWYbkdq3kzmb5pmzh2eCmGwlr+wAfWPJwA
aJZAPNnyrPhFZa8e2s96lHZELuzWg2g=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:29 2026 by rpki-client