Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa
File:                     8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json)
Hash identifier:          PkP25/HmBsSgPFAbRZQoiQ3NiZK1tqD+U1NSmzw9zFQ=
Subject key identifier:   92:87:55:BF:6F:88:67:19:B7:6C:3A:23:91:6A:97:E2:22:97:EC:A4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F497376E2BDCFBF94BD223A00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        50.2.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:76:e2:bd:cf:bf:94:bd:22:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6a20f9f-18f4-4fa6-8a64-6bf9f0caf53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:a8:aa:98:9c:0f:8d:8a:28:a3:71:99:2a:
                    73:92:65:55:88:b5:32:34:46:4b:09:dc:bf:09:b7:
                    3c:f9:b3:0f:88:e0:3f:eb:45:02:0b:84:7a:92:b0:
                    64:7a:e7:ae:cd:ba:b2:41:0c:63:35:5a:57:73:a7:
                    13:ff:f6:f3:0d:c3:3c:8a:1b:dc:4a:93:ac:57:ad:
                    48:7b:e7:5e:2b:74:56:7d:8e:29:ed:e6:14:46:68:
                    a7:9f:16:9d:a7:2c:a3:7e:ee:c0:01:c8:1d:db:c6:
                    9e:1b:cd:15:44:e3:85:3d:90:f6:50:88:e6:12:50:
                    87:b8:c7:6e:f0:1d:2f:c6:b7:ca:3c:d1:9c:62:19:
                    e6:eb:d2:6d:72:52:0c:83:87:d0:9c:0d:ca:8d:34:
                    ed:65:df:fb:d2:09:da:e1:4f:16:74:f1:b7:56:a4:
                    ca:18:f3:3b:23:f0:6d:8f:f4:71:d8:76:91:cd:2f:
                    aa:35:65:1b:93:c5:38:24:73:5e:65:ba:be:11:ca:
                    c3:22:16:96:b9:ef:e4:12:ab:f2:1b:06:a0:c9:93:
                    79:f7:36:65:fc:10:93:c5:49:0f:5e:46:28:93:94:
                    c4:05:a5:1f:96:c2:3d:22:af:ab:e2:71:8f:39:aa:
                    c8:74:01:48:80:27:36:23:ad:8d:f6:f4:11:ed:45:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:87:55:BF:6F:88:67:19:B7:6C:3A:23:91:6A:97:E2:22:97:EC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:18:ed:ca:d2:ba:97:ef:bb:44:2a:74:5d:86:42:c5:31:c0:
         13:18:b7:8e:28:91:24:c8:ed:53:74:d6:ca:88:9d:9e:17:a4:
         07:0e:a4:9f:04:cc:5d:4e:ef:99:0a:1f:6d:2d:ad:e9:72:68:
         77:0a:bc:b3:06:40:ab:9c:cd:85:19:67:8c:e7:0a:95:d9:ff:
         da:83:ce:5c:34:d4:0d:9c:f1:93:d6:c7:6c:69:bf:04:2a:f5:
         72:3e:55:5b:f9:6c:d7:ad:76:3f:59:9b:9d:fe:95:cc:7e:21:
         a0:b5:02:57:70:df:8d:f0:e3:67:10:74:3e:36:b7:4b:04:71:
         e7:25:84:c6:dd:b2:be:99:79:f8:71:2f:ec:b3:b4:82:a1:f0:
         e1:74:35:3d:06:b5:59:e1:79:9b:91:66:0c:6a:b8:90:4d:9f:
         5f:e2:33:c3:bc:90:b0:25:4c:a9:de:64:93:09:95:7e:b8:25:
         a7:fc:28:90:44:b9:63:e3:d7:75:a3:0d:c0:4e:74:93:8b:08:
         d0:93:73:60:32:b5:19:77:1a:5d:4c:ed:b1:c8:87:d8:5d:d2:
         b3:48:fc:fd:09:9d:bc:f2:38:8e:87:b5:61:4b:fc:55:93:4d:
         50:8f:13:ae:ac:2b:eb:d1:16:4d:af:f5:86:b4:1e:b6:84:33:
         c8:a0:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:00:13 2026 by rpki-client