Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/79956ae2-59d6-377a-94db-c2dde6488c5e.roa
File:                     79956ae2-59d6-377a-94db-c2dde6488c5e.roa (raw, json)
Hash identifier:          zi4Cu9pLJPFxzzn1heLKwAiUBhRMz7pIr00Cff64bxY=
Subject key identifier:   1B:E3:D4:62:F7:B7:58:BD:08:C3:CC:16:8E:97:BF:B8:3F:42:E7:57
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F52986C9DECBB9D0DA8571680
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/79956ae2-59d6-377a-94db-c2dde6488c5e.roa
Signing time:             Mon 28 Sep 2026 07:38:51 +0000
ROA not before:           Mon 28 Sep 2026 07:38:51 +0000
ROA not after:            Sun 27 Dec 2026 08:38:51 +0000
asID:                     62904
IP address blocks:        50.2.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:98:6c:9d:ec:bb:9d:0d:a8:57:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 07:38:51 2026 GMT
            Not After : Dec 27 08:38:51 2026 GMT
        Subject: CN=dcf1cb3b-c4fc-41d3-9f8f-11f8d6762a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:84:ee:09:2e:23:0c:4f:be:0c:61:6e:78:
                    8c:d7:97:d0:24:35:b7:d8:c1:d2:9e:c6:b1:6c:27:
                    33:51:2a:ac:bb:82:e3:f6:23:f9:ff:bf:4c:28:eb:
                    35:02:27:7e:28:d5:7b:30:8b:ee:1f:0a:2f:ce:7a:
                    a2:50:79:1c:5e:b3:08:8a:be:9c:1e:10:11:48:0a:
                    16:0f:da:45:83:dc:ca:04:7a:a9:a6:99:8d:d7:17:
                    49:6d:80:26:95:a4:1a:b6:e9:98:d8:5e:c8:41:3a:
                    4e:8d:4a:8e:b1:88:99:61:2f:f7:4d:31:c1:67:5e:
                    bd:3a:d4:ec:d3:b7:8c:91:3d:84:9f:b3:db:e7:5f:
                    18:0f:4a:c6:d8:95:18:28:0e:02:c4:8b:ac:f6:21:
                    dc:6e:63:b7:2d:54:58:96:ab:3f:1f:70:b3:53:9c:
                    bc:14:f7:f2:24:9e:d1:d3:c2:22:37:9b:73:93:32:
                    69:83:0e:6e:f9:68:15:8f:69:35:72:e8:89:ce:97:
                    66:2e:b5:36:60:9b:a8:45:0f:86:36:02:4c:70:52:
                    a9:58:08:12:3b:e9:80:73:e4:50:37:0b:8f:85:50:
                    bd:8e:65:af:fe:71:4a:81:81:b3:f3:5e:69:82:af:
                    77:4f:2c:73:55:6f:f7:98:30:a6:7f:e4:4f:cc:6c:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:D4:62:F7:B7:58:BD:08:C3:CC:16:8E:97:BF:B8:3F:42:E7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/79956ae2-59d6-377a-94db-c2dde6488c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:3d:e7:96:c8:1b:96:5e:33:72:fa:fb:6c:5c:23:6c:7e:
         48:bb:aa:a0:6b:6e:3d:d4:4f:78:e9:c0:7f:0b:ee:ae:f1:5b:
         2d:c1:a0:aa:4c:79:01:80:4e:07:a4:eb:d2:84:6c:95:d5:fc:
         be:8e:20:1b:28:b6:94:97:25:a7:e6:c9:88:db:2d:2a:ee:37:
         29:ed:48:07:c9:2b:d9:32:a7:6e:e5:e8:97:6a:6a:b4:37:ea:
         4b:00:3b:8e:50:e8:08:c6:8e:9a:4e:23:14:a3:26:b3:7b:e1:
         b3:f9:59:d1:f2:5d:e2:7e:08:dc:0c:cd:f3:b4:f2:2c:9d:70:
         27:ac:c9:18:e2:65:2c:b6:83:75:b9:82:ff:4e:b3:27:08:f9:
         b4:99:04:bf:54:2a:9f:44:f6:c9:88:2e:3e:57:bf:bd:64:67:
         a4:36:cd:7a:02:a6:79:21:c0:30:81:83:c4:e4:8e:79:5b:84:
         95:a5:59:da:49:29:c1:50:83:fc:ac:22:9c:f0:e5:98:7c:a2:
         12:97:b9:86:4f:0a:99:60:9c:47:52:2e:5d:8a:d0:23:bf:3b:
         7b:d0:9a:91:0c:d7:59:00:67:35:9a:44:de:f0:59:fc:de:7d:
         53:fa:69:36:da:a2:ad:fa:20:b7:96:2a:44:60:e4:5a:45:46:
         03:47:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:22 2026 by rpki-client