Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/196cc044-0546-3666-9062-862c8954ba2f.roa
File:                     196cc044-0546-3666-9062-862c8954ba2f.roa (raw, json)
Hash identifier:          GLdRsBwZtkmM7hS5JuHHpWs/kVhTRKnO3D5U0Kt+Cfg=
Subject key identifier:   69:81:A3:9B:DD:8D:CD:12:88:29:44:21:2D:28:CE:1B:CA:D3:82:FF
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6A40EAA5ED2757CEC1D4BF80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/196cc044-0546-3666-9062-862c8954ba2f.roa
Signing time:             Tue 06 Oct 2026 19:01:56 +0000
ROA not before:           Tue 06 Oct 2026 19:01:56 +0000
ROA not after:            Mon 04 Jan 2027 20:01:56 +0000
asID:                     62904
IP address blocks:        50.3.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:40:ea:a5:ed:27:57:ce:c1:d4:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  6 19:01:56 2026 GMT
            Not After : Jan  4 20:01:56 2027 GMT
        Subject: CN=13f2743a-f213-4950-87f5-8680e22f1ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:cd:40:3f:1b:5c:e5:a9:3b:1b:5f:21:08:
                    d9:d8:ca:12:f8:1b:53:20:2f:6e:d8:8c:53:75:38:
                    64:df:87:23:f0:aa:76:b5:1e:e0:8e:28:73:69:d3:
                    75:46:26:bc:05:d1:b2:dc:c1:d1:9b:99:d9:e8:80:
                    71:7d:9d:7b:0f:f6:65:2c:5c:ea:1a:20:48:9a:ed:
                    44:89:ba:a6:8f:56:73:7a:0b:00:d1:35:34:ef:b4:
                    01:72:58:10:86:38:fa:24:0d:53:da:9e:ec:66:0a:
                    61:df:5c:c9:c6:a6:0f:2c:60:35:b0:89:74:dc:ba:
                    81:13:4c:75:28:43:e3:cc:eb:d5:3a:55:9e:85:23:
                    6f:c9:8a:3a:1a:a0:19:f6:91:a5:ae:d8:7a:5a:51:
                    c7:38:14:de:d4:16:56:8c:68:c5:77:41:dc:45:ba:
                    d9:dc:9b:73:96:4e:20:83:5a:b2:59:ad:00:ca:15:
                    7b:14:93:a6:9c:13:38:fe:eb:1b:69:cc:4a:37:82:
                    e7:3a:8c:55:e9:5e:5c:3c:f6:64:db:90:4b:57:82:
                    b9:99:c2:8f:d8:37:46:7c:8a:41:f3:3a:e1:9f:ec:
                    d3:6c:9d:2f:10:24:e6:c5:d3:7e:00:25:0f:e4:7f:
                    fb:bb:f5:8e:19:5d:f6:d2:83:93:b2:9e:43:f0:81:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:A3:9B:DD:8D:CD:12:88:29:44:21:2D:28:CE:1B:CA:D3:82:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/196cc044-0546-3666-9062-862c8954ba2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:47:9c:a0:c4:c3:78:aa:19:b5:1e:c2:80:1f:0a:68:0f:70:
         60:ba:e9:b6:2e:05:dd:70:d1:44:1a:ab:13:29:81:ef:1e:36:
         39:77:85:87:9a:54:67:7d:fd:b3:fa:66:37:d1:b4:04:47:68:
         61:fd:91:c5:8e:fb:4d:81:a1:4b:4a:86:d8:eb:d4:95:26:13:
         a3:68:45:25:d9:20:e3:90:58:a0:4a:9e:7b:ab:04:c6:fa:99:
         2c:20:b9:c9:9b:75:89:7a:f5:d7:bf:03:00:b3:b5:2c:a2:09:
         5e:bc:0a:07:5f:e6:a4:21:ce:77:be:ed:39:71:86:af:23:94:
         5b:d9:ae:5b:8a:df:73:ce:3f:99:21:c2:81:c2:d9:59:e2:a4:
         ae:0e:c1:60:38:3f:97:6c:8f:15:a9:95:b0:22:62:00:0c:80:
         9a:f4:c8:7f:97:dd:21:00:d4:36:d4:c9:fc:d0:71:86:a9:4b:
         2a:5b:7a:ff:f1:b1:b9:bc:32:ba:ed:a3:84:fd:36:bd:69:ff:
         83:57:97:b3:cd:a6:bc:21:13:79:aa:95:30:a8:82:93:0b:75:
         77:dd:f2:48:b4:fb:b2:0f:00:bd:a1:9b:f6:30:a8:27:dc:b5:
         6f:c6:69:94:3a:6d:3d:29:c8:b9:ed:c5:cc:b4:c4:58:a9:a9:
         9c:37:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:39 2026 by rpki-client