Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/674d5d7c-e5a4-30e2-9c5c-d14b8c83eaa9.roa
File:                     674d5d7c-e5a4-30e2-9c5c-d14b8c83eaa9.roa (raw, json)
Hash identifier:          7yr7P+w28Bl40EY/lUNH6Ltl4smrZcYUlZK5/kRhIJ4=
Subject key identifier:   73:CD:F2:1B:3D:D4:2E:B2:13:13:7A:38:93:31:31:EF:66:5D:1E:B4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F400564F28D25F1C226D50A80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/674d5d7c-e5a4-30e2-9c5c-d14b8c83eaa9.roa
Signing time:             Mon 21 Sep 2026 15:58:03 +0000
ROA not before:           Mon 21 Sep 2026 15:58:03 +0000
ROA not after:            Sun 20 Dec 2026 16:58:03 +0000
asID:                     3257
IP address blocks:        50.2.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:05:64:f2:8d:25:f1:c2:26:d5:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 21 15:58:03 2026 GMT
            Not After : Dec 20 16:58:03 2026 GMT
        Subject: CN=95a9ad68-ee61-4015-8877-16633008b448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:6f:77:e9:68:8a:8a:a3:77:0b:ec:2b:ff:
                    9a:68:db:94:91:8d:3c:2a:a2:c2:ee:00:1f:2c:40:
                    6c:aa:4c:02:a3:c5:2f:5a:4f:9a:37:7b:05:58:a5:
                    5c:6a:d0:78:3e:9b:2d:9f:6f:98:7a:ad:5e:2c:dd:
                    d8:fb:b7:af:88:ca:a1:9f:92:ee:11:5f:7d:24:ed:
                    67:51:4f:df:b3:3c:65:e5:66:64:8c:36:ce:19:c1:
                    20:2a:d5:ba:e1:da:a8:6d:67:ea:21:78:dc:7a:0a:
                    52:4f:d4:0e:29:ae:36:f5:ed:70:46:11:e7:48:71:
                    d6:40:6b:5e:4a:69:c1:60:90:7b:cf:50:f6:7e:b4:
                    e1:61:ac:d6:fc:86:34:1f:f0:c1:84:6c:9e:5f:aa:
                    b5:1c:61:6c:ab:db:9e:da:81:ea:e6:d2:96:66:1d:
                    1c:0c:38:e6:f7:62:5e:c5:ee:48:8f:4e:db:aa:cf:
                    4c:78:25:42:ac:90:83:2a:69:22:db:29:00:59:de:
                    77:3c:18:da:77:1c:22:4a:c8:7a:24:32:1f:cd:27:
                    99:94:3a:47:26:11:ec:e0:82:21:8d:0e:98:86:fa:
                    b2:1d:10:d5:8c:8b:2a:90:16:e8:a2:88:3f:f1:23:
                    b6:b5:f0:92:28:57:9a:56:8a:11:d5:bf:f2:4d:48:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:F2:1B:3D:D4:2E:B2:13:13:7A:38:93:31:31:EF:66:5D:1E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/674d5d7c-e5a4-30e2-9c5c-d14b8c83eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:f5:25:a9:66:47:ae:ac:55:71:dc:0a:79:4f:5d:d2:36:
         56:ba:af:8f:aa:97:12:55:24:04:ba:94:da:98:8e:40:de:9b:
         f2:bc:16:07:13:0b:7b:eb:f5:38:f5:a0:be:13:8a:0c:f4:e0:
         29:36:84:62:da:bd:c0:ce:72:36:a7:55:be:c7:74:33:24:f9:
         af:75:a0:99:48:f6:08:18:35:ed:6f:94:63:6d:ed:e0:3f:ed:
         9e:ba:7b:5d:c1:cf:49:05:2c:40:d0:5d:0a:e3:e8:32:fe:d9:
         b0:ae:60:23:60:ed:9a:ca:b4:08:4d:fd:70:ea:50:46:1d:e6:
         b6:d2:7c:6d:6c:66:46:d5:7b:a4:74:d8:7a:0e:38:c0:7d:5e:
         fb:a3:24:18:18:ad:03:b6:2a:86:4f:c5:e9:6a:f4:f2:32:f5:
         75:18:dd:31:99:4c:51:7f:68:72:99:60:45:20:ef:57:f2:65:
         8e:58:21:5c:e0:86:c1:c9:39:c5:93:93:3c:eb:ab:22:ce:d6:
         93:e7:92:f0:07:ad:01:b5:ca:63:8a:2d:a4:38:bc:a4:77:3a:
         02:66:35:80:ee:87:8b:7e:b7:9a:1e:f6:c7:e0:47:05:83:51:
         84:05:8d:f0:1e:5b:43:35:d7:a4:fb:07:14:c9:04:83:2f:41:
         fe:e8:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:36 2026 by rpki-client