Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e211b99-1153-37f1-a8b9-f3ab014836a1.roa
File:                     8e211b99-1153-37f1-a8b9-f3ab014836a1.roa (raw, json)
Hash identifier:          lpno+JrVTRSCh0ItenyhtpUrEdLAFQO2VuXDleN9f5A=
Subject key identifier:   D7:06:E8:C6:92:EC:9F:9C:60:72:24:48:8E:17:0E:F3:04:C0:13:8F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6A2C0A03A3301A9945A58DC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e211b99-1153-37f1-a8b9-f3ab014836a1.roa
Signing time:             Tue 06 Oct 2026 18:19:52 +0000
ROA not before:           Tue 06 Oct 2026 18:19:52 +0000
ROA not after:            Mon 04 Jan 2027 19:19:52 +0000
asID:                     62904
IP address blocks:        50.3.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:2c:0a:03:a3:30:1a:99:45:a5:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  6 18:19:52 2026 GMT
            Not After : Jan  4 19:19:52 2027 GMT
        Subject: CN=cdb5ea0b-fb9d-4e12-99e5-9ca6f6e01fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:24:9b:82:a2:ac:a0:98:42:e0:cb:96:a0:c7:
                    73:a6:d4:47:8e:6a:4c:cb:43:05:6c:e6:95:04:72:
                    6f:c6:47:97:4e:cb:78:bc:17:eb:8e:1e:3b:48:b1:
                    c9:d7:ea:fc:a6:4b:b8:d8:64:82:17:dd:54:ab:6b:
                    0a:91:7f:ea:02:06:df:69:f1:69:86:4f:14:45:75:
                    78:a0:0d:1a:70:4f:cc:92:3a:35:98:c6:f2:49:64:
                    eb:40:03:9b:80:d1:d5:13:aa:41:d9:fe:a0:14:1b:
                    be:c9:f6:ee:9a:36:39:ed:20:89:34:0e:66:f5:8d:
                    f7:0a:d9:4c:24:59:93:51:d7:21:dc:be:c4:a0:8e:
                    f1:c9:95:bb:e4:55:f6:1d:77:88:62:9d:0e:a4:a8:
                    6b:6b:60:0b:79:f5:b0:c4:0a:f9:fb:20:d9:84:7c:
                    6b:31:03:75:b9:59:37:af:3f:26:8c:32:73:19:64:
                    f8:38:a7:60:dd:e9:b2:5c:11:3e:09:a4:26:05:62:
                    8d:73:b1:ef:b1:f6:0c:7f:44:73:45:93:f7:5b:f2:
                    76:32:66:58:ea:09:ec:5c:94:d9:bd:d9:bc:f4:c0:
                    3f:bf:79:f6:93:bf:a0:b8:d2:ef:d4:6e:37:7c:4e:
                    aa:8d:91:52:61:46:33:3d:6e:06:48:76:36:d3:bd:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:E8:C6:92:EC:9F:9C:60:72:24:48:8E:17:0E:F3:04:C0:13:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8e211b99-1153-37f1-a8b9-f3ab014836a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:57:a1:da:5c:26:c9:2c:5d:7e:54:5e:89:54:68:90:6d:8a:
         c9:59:a2:bd:30:f7:e1:f1:4f:4e:2b:97:ba:41:78:31:5e:57:
         f4:6a:58:b5:02:6d:d8:d2:af:f1:a2:94:ae:66:fc:28:de:f5:
         66:f7:e9:82:4c:5b:9b:1a:be:2f:05:55:2a:1a:9c:c5:a7:ae:
         8e:65:51:aa:bd:6d:16:26:25:f2:b4:a0:1e:f2:d3:aa:34:8b:
         77:2b:0c:32:5a:8b:44:2a:b8:b4:55:6f:fe:86:6e:24:8e:52:
         15:b9:26:df:b6:23:f5:18:47:53:39:65:ec:80:3d:e0:e4:ce:
         50:2f:90:97:5c:ab:c8:ef:9e:c5:be:c8:39:af:af:b4:81:21:
         78:74:22:2f:05:10:cb:5e:6c:51:00:20:28:71:52:e5:9b:65:
         f5:e2:2a:42:be:51:05:94:4f:c8:cf:1c:fa:da:72:5d:f3:40:
         b5:0a:12:85:cd:b9:f1:29:b3:a1:aa:f8:67:f0:ef:3c:58:0f:
         c3:9e:98:49:cb:ce:3d:2e:12:b3:ca:77:0b:7c:66:2c:c0:de:
         f9:88:8d:77:c0:ea:1f:f2:b8:db:7d:c2:ef:c7:72:b6:d9:4c:
         a0:c9:03:0c:50:3d:43:38:b7:88:19:27:d6:d2:6b:90:fd:6e:
         ac:52:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:19 2026 by rpki-client