Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f97dbcf-1180-3e35-8722-2c8055034bb3.roa
File:                     0f97dbcf-1180-3e35-8722-2c8055034bb3.roa (raw, json)
Hash identifier:          K+8g8H2ueZcirc5DT3XOnAObmQLKlOx/MvN9stFy5nE=
Subject key identifier:   2B:D3:70:AF:F6:8E:22:BE:8A:A1:65:34:54:A9:5B:34:D6:D6:04:77
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6A3FC90CBE0C63AF983C7900
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f97dbcf-1180-3e35-8722-2c8055034bb3.roa
Signing time:             Tue 06 Oct 2026 18:59:39 +0000
ROA not before:           Tue 06 Oct 2026 18:59:39 +0000
ROA not after:            Mon 04 Jan 2027 19:59:39 +0000
asID:                     62904
IP address blocks:        50.3.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:3f:c9:0c:be:0c:63:af:98:3c:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  6 18:59:39 2026 GMT
            Not After : Jan  4 19:59:39 2027 GMT
        Subject: CN=317cdf02-3f9c-44cd-afb1-d1759901ee76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:7d:62:31:85:95:f5:da:d6:91:29:0f:99:
                    c4:e8:27:db:81:7d:d1:af:c0:f6:d3:50:90:e5:c2:
                    2d:a3:9f:5d:7d:cc:a3:37:a9:dc:84:22:1a:1a:c8:
                    96:06:4f:3b:c1:fc:91:02:ec:17:22:d3:f4:63:30:
                    d8:15:af:c4:a1:9e:b0:fc:bd:72:ab:e7:f6:38:28:
                    c9:4d:2b:72:20:5f:57:b8:80:ae:7f:4e:21:4e:25:
                    e7:39:90:13:61:d7:1e:cd:3b:bf:f2:fb:46:5b:68:
                    8f:98:19:01:84:bb:a9:96:eb:a1:c0:77:9f:d8:bb:
                    c9:fe:48:1f:9a:ad:52:40:da:cc:9b:91:22:92:79:
                    4f:eb:2e:d1:c6:62:3c:fc:4e:43:c0:e3:89:21:17:
                    96:74:e6:82:a4:3e:f0:44:eb:6e:1d:03:f7:4b:a7:
                    3e:95:cf:af:2d:c1:56:61:dd:d5:7c:39:52:0b:d9:
                    3a:5e:91:d9:72:7f:6f:1f:f0:3b:fe:6b:12:87:86:
                    b0:56:16:e1:f6:64:f4:5a:29:1a:0d:63:e1:a1:00:
                    bc:03:e1:56:58:ec:fe:65:e3:2a:d1:cd:22:0d:bc:
                    0a:ec:75:c9:aa:97:d6:1e:6f:51:98:d5:e7:f6:94:
                    31:ca:cb:87:fe:42:d5:94:e0:cf:d6:a4:82:d5:17:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:70:AF:F6:8E:22:BE:8A:A1:65:34:54:A9:5B:34:D6:D6:04:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f97dbcf-1180-3e35-8722-2c8055034bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:a1:6f:fa:43:8e:2e:2c:33:55:53:a3:bd:f3:0e:53:16:
         f0:8a:78:ae:3f:20:0d:c1:c6:b2:e5:12:07:c3:3a:1b:b7:60:
         d8:3c:e4:bb:9b:25:1d:26:44:73:a1:b5:b3:ca:54:14:9e:6a:
         bd:58:d4:d9:ea:94:79:99:1d:37:ee:e4:8c:26:b8:df:99:98:
         44:f5:42:11:48:58:7d:73:0b:ba:d8:e3:d9:c1:db:be:f2:cf:
         ea:e9:de:ee:d4:16:4d:b0:93:ff:31:91:3e:a5:2f:e4:07:28:
         66:de:36:92:21:b8:16:16:24:4c:21:05:06:6d:43:dc:78:ac:
         ea:9e:2d:7b:1a:ab:82:db:43:0e:5c:30:91:8c:f5:ca:67:2c:
         27:4f:c0:95:c1:d5:ba:1c:33:96:24:ed:a0:64:66:70:e1:cf:
         9c:19:aa:4d:57:e7:b4:31:a0:09:76:0b:5c:13:cf:7e:50:60:
         f4:11:83:81:ce:1e:8a:3a:b4:79:c1:14:fb:b9:3a:5a:6a:f7:
         e4:08:f4:32:2c:f0:ed:e5:9d:b2:be:78:89:50:ef:2e:1b:cc:
         1b:c4:12:65:65:94:79:1f:a3:3d:42:70:c1:cf:50:12:5f:b0:
         98:29:96:50:6c:b8:1d:e6:ab:c4:bb:f8:71:d1:5b:2f:f0:c0:
         15:04:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:43:39 2026 by rpki-client