Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46276e80-7641-359c-9e31-d3ce520a53da.roa
File:                     46276e80-7641-359c-9e31-d3ce520a53da.roa (raw, json)
Hash identifier:          mf0c2ZnhvLiC6OfIh8CmHNq24Hq00xJbBXhqesyIn8M=
Subject key identifier:   03:CE:ED:73:22:DF:3A:4E:68:C4:84:FC:3D:08:D3:15:27:74:F5:1B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F52B3D7DD4C7BC6C87DC80540
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46276e80-7641-359c-9e31-d3ce520a53da.roa
Signing time:             Mon 28 Sep 2026 08:34:06 +0000
ROA not before:           Mon 28 Sep 2026 08:34:06 +0000
ROA not after:            Sun 27 Dec 2026 09:34:06 +0000
asID:                     62904
IP address blocks:        50.2.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:b3:d7:dd:4c:7b:c6:c8:7d:c8:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 08:34:06 2026 GMT
            Not After : Dec 27 09:34:06 2026 GMT
        Subject: CN=4474a441-5c65-4a2a-89c0-a1e136e9da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:9a:22:67:76:64:03:7b:4b:ac:08:34:ce:
                    b3:b0:f1:5f:94:17:79:c6:db:0f:77:23:ca:76:8b:
                    69:b3:9a:0b:c3:17:e2:86:3f:07:85:ef:ce:00:f0:
                    e1:12:03:b2:a2:48:5d:df:db:f0:61:fe:90:aa:18:
                    06:f6:16:e6:47:dc:c4:02:5f:46:75:95:be:46:91:
                    ee:1e:f1:49:c3:59:3e:c6:ce:b4:db:c0:ec:02:c4:
                    8d:ce:b8:0e:a1:1c:68:b1:83:52:7f:42:d7:99:ab:
                    64:73:b2:38:34:83:3f:69:1a:57:9e:54:3e:f0:7b:
                    76:25:96:0e:24:51:4e:45:d1:19:9c:3f:e2:90:e0:
                    59:f1:72:be:3b:a0:6d:26:d6:b4:35:3c:61:8b:c0:
                    e3:50:f6:7e:70:13:cb:81:ab:5a:03:28:c1:dc:63:
                    de:01:d3:29:7f:75:01:2c:67:81:c3:1d:6d:3e:2c:
                    e1:70:fa:f4:bc:b3:0e:b2:70:49:7d:9d:47:dc:20:
                    ac:a8:78:23:88:d0:94:2a:40:53:52:59:35:65:89:
                    a9:e5:91:aa:11:f5:dd:5c:93:81:5a:aa:d5:2b:c3:
                    76:e5:9c:4d:9c:b8:ec:9f:55:a2:ad:75:ca:8c:58:
                    fc:90:5f:b8:92:cd:54:1f:b2:0e:79:9b:b3:f0:31:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CE:ED:73:22:DF:3A:4E:68:C4:84:FC:3D:08:D3:15:27:74:F5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46276e80-7641-359c-9e31-d3ce520a53da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:83:ac:34:dc:74:a1:70:35:21:a9:42:26:1a:40:27:65:
         eb:2a:b4:7c:17:aa:b3:df:be:f8:3d:72:45:92:c2:89:9b:89:
         d1:70:dd:7e:06:64:12:37:a8:45:be:7d:ef:ee:23:67:3b:ec:
         28:54:cd:64:ea:56:64:9c:49:6d:c5:1a:47:ce:f0:00:41:06:
         03:97:5e:be:b4:a2:b5:ff:17:19:aa:aa:e3:93:1f:52:3e:57:
         14:21:9c:e7:d0:f1:eb:13:a5:7a:36:bc:ce:f1:d5:11:fb:a1:
         1d:f2:70:18:4e:d0:06:e6:ff:f7:88:c5:49:96:f4:77:f2:43:
         0a:68:7b:5c:1c:e3:e2:6b:33:82:92:b7:7c:38:5d:33:5f:dc:
         53:40:93:64:24:02:f2:1e:76:b6:a2:e2:cf:d9:6f:33:ce:c2:
         00:9e:93:eb:bd:93:c5:8a:02:f8:ff:bd:52:a2:16:e7:04:6d:
         6d:d0:39:40:72:ea:88:63:89:47:a6:6d:20:3a:78:1b:34:39:
         b6:ba:69:db:13:60:06:cf:31:f3:2c:05:e6:6c:fb:21:09:0d:
         a6:6d:b9:9f:c8:72:39:77:4a:88:7d:86:0c:f8:40:02:41:9b:
         1b:81:d3:16:6d:34:f1:ff:e6:4a:88:a8:cb:95:5d:d6:b6:87:
         68:ac:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:26:37 2026 by rpki-client