Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa
File:                     7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa (raw, json)
Hash identifier:          TKSaVgxWsDlvGznowo25JDw0Mp/X2tujtxTZ+78wnqA=
Subject key identifier:   6E:15:16:7F:4D:6A:B3:3B:1F:C4:EF:7A:7A:8C:61:5A:C2:6E:C2:40
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4972D9D801D707E89B1ED100
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32043
IP address blocks:        50.3.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d9:d8:01:d7:07:e8:9b:1e:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3c644a9-6323-40b2-8ea2-a73fbc1340cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:1b:a6:3b:e2:9b:1c:dc:7c:9c:9c:30:60:
                    b7:8d:80:18:8a:28:ba:e6:12:0b:c4:5b:64:6f:e5:
                    0d:e4:d8:a1:31:46:6c:e8:cb:3c:95:e6:e0:59:1a:
                    6a:6b:d9:70:72:17:eb:2d:4a:49:fa:28:07:d1:c3:
                    59:a6:02:a5:99:08:74:6f:47:c0:99:34:4c:92:5d:
                    64:90:3e:06:a3:9e:cb:d2:a7:36:ad:f2:d9:46:c1:
                    a9:1d:4f:9a:42:fc:07:6a:32:48:2a:62:a5:54:df:
                    0c:81:51:e4:5d:1a:59:08:dd:97:fc:fb:55:d5:3b:
                    ca:ed:e1:ec:1b:cc:4f:b6:df:c9:f2:6f:30:a1:9a:
                    09:9d:1c:0a:4b:96:f6:f0:64:7b:f0:3d:50:a5:c3:
                    ae:c8:06:fa:50:7b:db:26:fb:70:e1:8c:a0:84:e9:
                    fe:c0:3e:81:8f:91:61:0e:28:bb:18:e0:a1:8f:2a:
                    c0:be:22:12:6d:8a:4b:f1:cc:2b:0a:bc:51:c4:0c:
                    0a:5a:b9:46:cf:b8:b9:a2:c5:e8:68:b0:58:86:21:
                    54:d9:7a:ad:1b:59:ca:3f:97:5c:6b:fb:39:c4:ac:
                    10:a4:93:c2:28:04:a1:ef:36:de:22:c7:6b:c0:38:
                    61:64:b4:cf:df:a9:22:e3:3b:74:ed:92:0e:52:2b:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:15:16:7F:4D:6A:B3:3B:1F:C4:EF:7A:7A:8C:61:5A:C2:6E:C2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b05ff1e-7d0b-3071-abe6-efa2f9c126e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:6f:e4:58:1b:6d:fd:62:d1:1d:2e:3f:e5:a1:41:12:8b:
         be:51:e0:39:60:b6:25:ee:91:f4:a8:ed:47:33:2e:90:42:d4:
         3a:19:12:93:eb:7f:b9:cd:ec:eb:3a:10:b9:dd:b8:f1:91:6d:
         3c:ab:b9:88:85:8d:36:c9:1a:4e:f3:db:8a:c6:a3:8a:44:81:
         4e:3d:f9:20:1b:12:ec:9f:2a:63:80:9b:e8:95:58:55:ce:da:
         36:8d:e6:d5:7c:f5:5e:93:fc:26:67:54:61:e7:4d:ac:9d:49:
         0d:31:c0:f4:7a:f5:07:4d:30:d1:4e:ef:cd:74:1a:cc:36:bf:
         8f:29:d6:68:6f:54:f1:c9:d4:5b:72:6b:8c:5f:a0:f7:96:e3:
         4a:ee:90:54:66:9a:bf:ed:64:2e:c0:ca:91:31:5c:85:d9:6a:
         55:00:53:e7:a5:1d:e5:fd:3e:72:6e:3d:2c:da:70:2d:f0:57:
         0d:49:1c:6e:d5:0d:b7:43:23:50:d4:ca:75:71:f7:92:7f:46:
         13:73:30:9d:cb:30:97:25:51:70:45:37:b7:af:a2:54:a8:9d:
         54:11:b2:54:58:ab:55:46:a1:9a:e7:dd:95:91:da:30:ad:8d:
         24:91:ac:a0:7b:52:8b:a2:be:a0:4e:a7:2f:6a:e9:c6:b4:55:
         4a:40:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:55:17 2026 by rpki-client