Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0935b9c9-c464-31e0-a9a6-a0c876b2e881.roa
File:                     0935b9c9-c464-31e0-a9a6-a0c876b2e881.roa (raw, json)
Hash identifier:          EyTxSRocQSEJAICuZM/euQJW7R3u/qlVqwq27gFbSeA=
Subject key identifier:   E4:83:90:A1:DB:EE:3D:B3:F5:33:96:3F:49:6D:73:54:FF:A9:EC:C4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B540C99AA2725DDD2327CC700
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0935b9c9-c464-31e0-a9a6-a0c876b2e881.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     35280
IP address blocks:        50.2.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:99:aa:27:25:dd:d2:32:7c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=26c23a1f-7be0-4882-a1ce-b8710b7fdc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:79:a1:67:24:28:20:d1:1b:e2:7f:10:04:
                    98:fd:81:9d:c8:fb:31:8f:45:7c:72:5e:2e:85:9c:
                    da:9a:c6:04:43:77:50:b3:be:af:0d:30:d4:e6:78:
                    3f:ce:ec:b1:9b:7e:ae:23:ef:72:d7:61:dc:82:48:
                    29:96:69:f2:01:99:31:33:44:55:49:25:a8:b0:78:
                    f2:57:e3:6b:d7:30:c1:0f:b7:fa:c7:14:e2:81:54:
                    9f:9b:09:18:af:eb:80:33:e6:c7:0a:43:62:46:ce:
                    7d:53:01:42:34:bf:93:f5:97:71:d8:68:ad:15:eb:
                    84:c3:1f:03:6d:6d:16:a5:3f:f1:a2:17:d4:02:bb:
                    8c:64:d9:94:fa:15:92:70:2a:c2:00:83:d5:0d:30:
                    07:51:5b:b6:7f:d7:85:7c:98:3a:39:b6:9f:5b:11:
                    a0:ca:a7:9a:3d:8b:3c:f1:c9:9a:7d:65:83:00:62:
                    67:d8:3d:6d:bd:9f:8d:76:ff:57:fc:d6:5f:52:17:
                    1a:01:c1:b5:a5:6f:10:17:e5:b2:b3:06:e3:15:d5:
                    29:64:2a:d5:54:0a:3f:f7:df:b0:43:0e:61:27:92:
                    92:a7:f1:96:5b:29:28:16:01:7c:96:f2:7b:fa:62:
                    81:68:75:dc:bf:36:cc:04:e2:3d:4f:cd:ba:26:db:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:90:A1:DB:EE:3D:B3:F5:33:96:3F:49:6D:73:54:FF:A9:EC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0935b9c9-c464-31e0-a9a6-a0c876b2e881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:0c:b5:19:ea:d6:44:75:f9:11:42:9c:c3:e7:e4:e6:b0:
         02:92:fd:1f:e7:27:fd:a6:e5:c1:80:0a:08:c2:7b:79:c7:2c:
         51:53:d7:8d:ad:c7:6e:a7:42:1b:cc:50:60:c5:e6:ed:08:6a:
         3a:af:2a:45:ca:e6:b7:62:f7:93:86:67:e7:e6:94:a8:d9:38:
         9f:f8:e2:14:75:d8:16:e5:68:4a:12:08:5f:e1:b9:12:e7:56:
         f1:f4:0b:20:7e:16:f9:51:d6:31:b8:cc:67:4c:b7:3f:c1:b1:
         0e:a8:69:5c:9d:46:95:3d:fd:67:77:98:53:79:b5:ec:94:8c:
         84:40:43:b0:90:c4:2f:6a:9d:f6:2c:d9:c8:73:4e:c0:c1:d5:
         d6:33:c8:c3:8c:05:26:a9:d8:fe:16:69:bc:3c:a7:97:a2:d9:
         5f:90:73:af:de:57:e4:03:79:47:1b:bf:e4:cf:fe:8b:76:66:
         49:4f:0b:3c:9e:0d:3b:20:d8:73:de:98:aa:82:c0:9d:09:9d:
         a6:82:95:d6:57:b7:3d:11:be:f9:a7:62:d1:60:52:ec:31:c1:
         2b:2e:9a:b3:68:e4:d3:b0:18:a3:20:15:eb:b0:31:5a:32:9e:
         79:d0:78:fe:91:2a:a0:be:55:e8:15:59:d5:a6:21:6c:f9:5a:
         5e:5f:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:12:32 2025 by rpki-client