Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2bb5a9b9-9d16-31d9-a740-bab271936c71.roa
File:                     2bb5a9b9-9d16-31d9-a740-bab271936c71.roa (raw, json)
Hash identifier:          DV1F/zVPOx11gbX2XDgXgtIwiYJyO4ZOqIIkgiGvnKc=
Subject key identifier:   15:62:BC:FB:65:EA:B8:D2:CB:B7:5F:57:E7:1A:CD:39:16:F3:D1:7B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4989C4C554C45491FF4F7500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2bb5a9b9-9d16-31d9-a740-bab271936c71.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     137441
IP address blocks:        50.2.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:c4:c5:54:c4:54:91:ff:4f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6b13a88-402d-4585-80b7-f954f56f041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:df:af:be:63:44:3f:0c:d7:a1:51:bc:6f:
                    5b:9a:84:33:54:a5:66:4b:25:67:77:1b:8a:3e:ef:
                    c3:1c:79:1d:b7:b6:ab:17:66:d0:17:78:cc:c0:ff:
                    f3:fb:17:42:f7:f1:82:05:09:5f:2b:c9:51:7f:fc:
                    49:ac:86:56:18:a9:a0:bb:c5:40:d7:4a:45:e0:bb:
                    ef:f4:a7:6e:88:21:8e:53:c2:68:4c:1b:77:4b:05:
                    45:6f:33:e0:39:cb:02:36:ad:b6:19:87:b1:c0:24:
                    57:5d:aa:61:9f:11:8e:ba:68:5b:13:f5:d5:9a:3f:
                    74:18:3e:5f:0c:5a:aa:fa:0a:8e:e9:d2:eb:de:a5:
                    5b:a6:41:f0:e0:2d:11:1e:97:90:db:9a:18:7e:59:
                    e8:7b:6c:74:a8:9d:a0:22:d4:5f:32:6d:83:98:63:
                    95:61:46:e1:d8:ea:04:1e:c9:86:d3:20:bf:cb:ee:
                    5e:57:2f:30:25:4c:0b:fc:d8:2b:8b:5e:a9:2c:bb:
                    17:0c:ee:29:85:1f:87:3d:31:d5:33:f3:9a:65:84:
                    73:e8:8a:d2:f9:88:10:5c:7b:f1:1c:6f:9e:17:37:
                    58:af:56:ee:ff:4d:1e:b2:6b:20:09:ff:8c:8f:1e:
                    cb:d5:bb:31:ee:88:42:72:3d:cb:fd:a0:d4:e1:b5:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:BC:FB:65:EA:B8:D2:CB:B7:5F:57:E7:1A:CD:39:16:F3:D1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2bb5a9b9-9d16-31d9-a740-bab271936c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ec:1a:ec:2b:0f:63:1e:61:04:72:1f:69:0c:ca:ce:d1:53:
         ee:af:5e:df:db:a0:5d:08:74:63:d1:80:f7:73:0c:c9:f6:eb:
         2e:64:3f:91:5a:a4:28:39:73:45:18:6e:8b:68:d1:60:5b:96:
         7c:e1:71:60:e0:ab:9b:98:5d:b3:db:aa:ca:f6:e9:47:9b:7a:
         81:cf:04:c5:e1:72:de:50:b3:10:f4:5c:bc:af:96:de:3d:4a:
         fc:88:7b:88:c8:c1:e4:67:72:c9:4c:9c:75:72:e0:1d:9e:a5:
         85:7f:38:f5:c2:88:84:a7:36:4b:af:60:f7:c7:66:6a:cf:ed:
         f0:a8:f8:1d:cf:b0:b1:23:0e:8f:04:7a:75:72:53:4b:a6:07:
         22:71:bc:aa:81:81:98:8a:d9:b1:89:6f:4e:d3:cc:e9:9d:19:
         c6:33:64:70:a8:75:cc:04:b8:a2:18:f0:15:6c:9e:41:2e:2a:
         43:84:2e:57:22:63:76:81:7b:68:9c:32:ca:d6:93:3e:c7:d2:
         ab:38:96:72:fc:0b:5a:f3:9e:45:5c:70:18:f3:01:48:ba:be:
         d9:f1:e5:67:1f:68:bb:4d:4b:03:55:2f:14:83:3e:52:56:3c:
         71:1f:6c:36:bd:81:1e:21:5e:01:61:e2:45:0f:f3:43:de:c4:
         66:e5:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:41:19 2026 by rpki-client