Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa
File:                     42999c51-9e95-38ef-8054-3c585a745afb.roa (raw, json)
Hash identifier:          Oo5Ne3TlDQJLrFGwI6az+KcQAuE6tUcyqXGpqBAHtok=
Subject key identifier:   F9:B6:23:10:B9:C1:BE:40:83:E1:3D:47:B1:02:49:6B:5D:13:44:A5
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F549D4702CBF0043F712C0500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        50.2.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:47:02:cb:f0:04:3f:71:2c:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=86e5c227-72f8-4d5a-b091-e5bb09507832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:be:f3:24:d2:c3:87:9c:15:e1:46:3b:c2:
                    e1:8b:3d:5c:9e:c8:23:a2:24:06:39:6b:5b:bf:ce:
                    d4:8c:72:7e:37:f7:a2:a3:87:38:c6:08:2a:16:3d:
                    84:d5:d2:f0:31:b3:0a:28:9e:1e:a8:d9:f7:f8:44:
                    d2:25:70:f3:86:28:7c:63:42:b1:2d:1a:e1:f7:a9:
                    9e:45:34:b2:14:84:0d:dc:d6:38:d0:70:0c:92:1e:
                    14:17:d5:34:55:27:1c:98:4f:02:8b:85:f3:b2:86:
                    24:0e:7d:c6:08:76:55:b8:8c:4a:29:4f:40:03:3d:
                    ec:df:6b:c7:4a:f3:b1:9c:a9:cf:7b:f4:ea:7f:5a:
                    ab:0c:83:e5:92:a9:85:45:55:6e:ec:cb:97:47:bb:
                    8e:19:37:3d:09:99:6b:ae:2c:8a:dc:53:02:f1:bb:
                    47:61:70:0c:c8:23:51:f2:be:30:b9:d8:27:a8:4a:
                    f6:bb:74:3b:ca:82:f8:10:54:69:0f:ee:3d:2e:bb:
                    c7:76:ae:db:c7:e6:6b:15:27:1f:c8:27:70:b2:b8:
                    8e:50:68:77:dd:4f:1e:3e:76:dc:6a:e2:84:8c:9e:
                    a7:6d:a5:a7:e7:1c:91:c8:b8:e8:41:5d:f2:4b:16:
                    f9:8c:34:3b:d1:bb:e1:9b:88:c1:39:d9:60:58:96:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:23:10:B9:C1:BE:40:83:E1:3D:47:B1:02:49:6B:5D:13:44:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42999c51-9e95-38ef-8054-3c585a745afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7f:d4:e7:a2:38:16:85:0f:97:49:cf:09:ce:b9:95:ac:0e:
         4a:c6:2a:d7:56:9e:a2:52:91:f0:a5:c7:00:4b:85:fa:ca:44:
         81:f2:5e:cc:cb:4c:5d:7d:66:e0:b2:59:2f:54:b3:fb:5c:b3:
         9a:0a:08:9f:cf:74:0a:9c:45:05:d4:e0:ed:cc:47:c0:3e:77:
         af:a1:8b:23:72:38:a8:a3:4b:3b:9f:29:89:f9:8b:fd:71:c2:
         ad:4b:10:50:65:fd:bb:40:6e:7e:3b:e2:e7:2a:54:13:54:06:
         d3:5c:65:a6:dc:27:19:b7:51:ba:36:90:9f:fc:f2:be:1b:f9:
         6a:57:01:e1:10:3e:8c:70:ae:3b:03:4d:62:8e:c0:cc:7e:90:
         7a:9b:df:69:b3:43:ec:e0:87:4b:ea:f3:da:48:84:fa:4b:4a:
         7a:11:e6:b2:0b:fe:0f:ba:46:08:e3:ff:be:d0:35:9d:73:9d:
         48:87:1f:ea:6f:4a:5a:5d:84:da:86:9f:ba:1f:b4:cb:41:15:
         fc:fe:6c:d4:bc:49:9d:4c:8e:b6:38:f4:16:9b:f3:b6:2a:90:
         5d:ab:ea:a1:4f:49:c9:eb:51:23:dc:e6:c5:79:46:90:0f:0b:
         b5:95:39:f9:69:00:c7:fb:2d:89:25:8f:4c:c3:66:bc:7c:bf:
         ab:93:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:01:52 2026 by rpki-client