Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/920a6a32-fa32-35c1-ba3f-5dc6286b2fdb.roa
File:                     920a6a32-fa32-35c1-ba3f-5dc6286b2fdb.roa (raw, json)
Hash identifier:          NuQVnffAGI/j4ugXUgukbyjqZ4iaTr0bw2M3wjeag/c=
Subject key identifier:   D8:69:B4:9A:67:43:3E:43:9B:1A:63:EB:BC:11:A9:26:35:55:50:57
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F52AF994F4BAF8226E1BF1F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/920a6a32-fa32-35c1-ba3f-5dc6286b2fdb.roa
Signing time:             Mon 28 Sep 2026 08:25:33 +0000
ROA not before:           Mon 28 Sep 2026 08:25:33 +0000
ROA not after:            Sun 27 Dec 2026 09:25:33 +0000
asID:                     62904
IP address blocks:        50.2.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:af:99:4f:4b:af:82:26:e1:bf:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 08:25:33 2026 GMT
            Not After : Dec 27 09:25:33 2026 GMT
        Subject: CN=a9f4f117-fa56-43ac-b24d-82ab2cf84170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:ce:64:51:12:21:24:ba:3c:52:27:cb:9e:
                    c3:3e:84:bc:0b:ab:59:ab:67:ba:38:af:ab:94:6e:
                    12:6e:d8:08:44:d5:a7:59:98:8d:26:de:9a:58:58:
                    d9:26:99:38:ea:86:90:34:2a:3f:bc:37:bc:84:2b:
                    74:96:a0:42:bf:28:bf:6a:27:33:9a:38:44:f7:bb:
                    3a:14:7f:9c:ac:6a:12:9b:97:1a:61:ce:17:72:bb:
                    b8:9d:b6:fc:37:ce:f3:41:42:17:d8:61:ab:19:b5:
                    65:0e:7e:a5:2c:c7:c5:53:be:ba:8a:b5:b7:c3:89:
                    b1:07:08:67:f0:18:34:f2:fd:27:61:15:ed:2d:f5:
                    6d:ed:bf:a3:c3:99:31:ef:ce:e3:4b:6d:54:83:cc:
                    73:dd:02:7d:e1:6a:c4:d0:a2:f8:b7:db:01:b6:23:
                    90:49:8f:0d:e9:4f:47:00:5d:35:2f:c1:2f:e6:fb:
                    78:af:b9:50:bb:fa:fc:99:9f:49:b8:10:78:30:fe:
                    c0:15:9b:5f:02:f4:36:84:c5:45:f5:32:b2:fb:83:
                    1f:39:2c:2d:9d:78:6a:e4:49:8b:1a:cd:ff:b4:e4:
                    2a:e7:00:8c:f9:7f:b3:c1:6d:44:3b:00:11:47:20:
                    70:8d:62:16:12:1e:e9:fd:8e:56:1d:ac:14:9d:d6:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:B4:9A:67:43:3E:43:9B:1A:63:EB:BC:11:A9:26:35:55:50:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/920a6a32-fa32-35c1-ba3f-5dc6286b2fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:c7:56:10:14:b6:12:a3:a6:1d:d5:61:ab:d0:38:13:af:
         ed:6d:07:f2:f6:f0:fb:a4:62:27:30:ff:92:64:76:f4:80:7d:
         e6:c3:57:9e:ba:c2:08:1a:d9:6f:0b:e2:a6:ab:f8:5d:72:35:
         e0:6c:a8:09:3f:0b:16:d0:ad:28:2f:6a:09:31:74:01:7a:4f:
         a3:47:94:1f:50:10:9f:ee:a7:e8:c8:da:77:78:57:1a:f9:e5:
         5e:72:55:01:27:0a:16:8d:d8:57:0e:0d:f7:10:61:19:3b:91:
         cd:6b:a3:a3:6b:a9:d2:fb:4e:74:25:7a:46:7a:9a:b2:74:ed:
         f0:25:84:65:6b:3f:18:80:58:e3:bc:c3:ae:f5:73:9a:ad:17:
         3c:4c:ff:f7:01:53:0f:69:fe:ef:5f:4c:74:90:eb:25:92:31:
         44:94:37:8a:c6:a3:8a:a4:48:cc:a2:5d:c9:16:ba:26:d1:bd:
         eb:c4:37:93:9b:bb:2c:5b:a9:f6:b4:3d:74:e5:85:99:fe:f5:
         bb:71:34:69:2b:97:a6:c9:c8:81:91:21:d5:5b:6f:25:a6:b8:
         a3:34:2a:19:25:c9:f9:ec:49:f4:a8:b3:d5:35:98:27:19:9b:
         7e:3e:68:95:07:92:d9:f3:c8:14:0b:b6:04:99:d4:65:78:1e:
         12:1c:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:19 2026 by rpki-client