Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/314f4a60-1a9e-3889-a2c3-29c85ab97c06.roa
File:                     314f4a60-1a9e-3889-a2c3-29c85ab97c06.roa (raw, json)
Hash identifier:          mrRHGrCcD/evdQiwQwAB0ylQarB3nDDQaDagodxUJII=
Subject key identifier:   60:91:C8:F8:88:B6:AB:3B:46:82:22:83:D2:21:93:3E:0C:FE:97:AA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4D5AA1B57085D49E22355E00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/314f4a60-1a9e-3889-a2c3-29c85ab97c06.roa
Signing time:             Sat 26 Sep 2026 10:35:18 +0000
ROA not before:           Sat 26 Sep 2026 10:35:18 +0000
ROA not after:            Fri 25 Dec 2026 11:35:18 +0000
asID:                     3257
IP address blocks:        50.2.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:5a:a1:b5:70:85:d4:9e:22:35:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 26 10:35:18 2026 GMT
            Not After : Dec 25 11:35:18 2026 GMT
        Subject: CN=86528d21-3af8-42a1-8b4d-e2027a186ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:68:c6:a7:86:cd:ff:46:9b:4e:73:3b:c3:
                    89:3a:7f:7a:fa:f5:67:e3:e5:0e:64:db:9b:31:df:
                    2f:6a:08:50:0e:01:93:ec:76:52:76:5c:f1:8d:57:
                    2c:cc:4c:3d:6e:c1:9f:fb:8c:50:65:8e:e8:47:b0:
                    be:e3:76:ce:b2:5c:a6:14:5c:35:ac:5d:62:66:67:
                    53:d7:20:a4:7a:70:63:3a:9e:94:d9:4c:22:26:36:
                    ff:41:84:c4:54:2d:50:ab:3a:e6:cc:44:99:50:b5:
                    89:c0:aa:c4:57:69:a6:c6:dd:11:31:b4:91:60:e3:
                    26:79:c6:ab:5b:d1:d3:43:06:82:08:73:3a:99:63:
                    bc:87:60:a7:42:99:e5:6b:5f:42:16:55:6f:b3:52:
                    3f:cd:38:44:88:51:cf:84:f5:02:1a:33:a6:3c:f1:
                    c4:28:f3:5f:0c:94:51:9d:8b:ea:4f:39:c1:b0:08:
                    78:bf:87:55:b7:4d:e9:74:27:de:62:40:1b:b5:1d:
                    10:3e:8b:52:1b:13:99:68:aa:90:a4:db:5e:fe:9f:
                    8f:84:40:b0:80:58:33:1c:9b:6d:41:af:c9:e0:b5:
                    c1:cb:9b:fa:02:04:a1:05:78:2a:17:76:5b:6f:69:
                    cb:d8:79:05:34:99:b6:86:a0:83:a6:5a:60:f1:8d:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:C8:F8:88:B6:AB:3B:46:82:22:83:D2:21:93:3E:0C:FE:97:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/314f4a60-1a9e-3889-a2c3-29c85ab97c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:47:ed:95:24:c4:e7:0c:c5:99:23:d9:32:e8:b4:ba:c2:
         74:1c:a8:d6:fa:e4:e9:58:26:ae:02:88:6f:43:c1:6f:aa:62:
         a0:fe:40:55:b8:c5:74:c1:05:15:6f:88:bc:9e:f0:69:4a:f3:
         60:be:f9:ce:d7:06:6b:92:18:c5:68:b2:79:8a:2e:6f:bb:f9:
         24:d2:73:fd:be:63:3b:e8:8b:8e:0b:70:a7:bf:18:cd:11:5d:
         bd:8a:3e:c9:e1:80:37:41:e9:1d:4f:91:14:90:dd:02:ef:c7:
         3c:58:a8:36:14:19:3f:f5:64:20:d5:e3:b0:c0:1f:a0:1e:2e:
         04:bb:11:98:de:1a:0c:71:0b:17:a0:ba:34:34:28:0b:8f:ac:
         88:55:75:fa:64:52:7f:54:57:72:20:87:89:5c:0a:5a:98:b5:
         dd:64:e9:76:9e:51:9f:96:c6:55:d6:51:b1:72:d6:c6:62:c2:
         07:ad:a0:3c:2b:32:a3:2a:68:6a:f9:8b:c2:e0:62:83:16:c2:
         43:62:88:57:1d:0d:ae:06:59:2a:d7:9f:e5:83:8c:09:42:70:
         21:4a:2b:63:a9:d0:d7:ae:84:7a:8a:3b:53:55:8d:4a:6e:ba:
         fb:d5:cf:a9:39:e2:6d:dd:a0:00:bd:46:87:1a:49:3f:ff:13:
         43:b4:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:40:54 2026 by rpki-client