Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a1127fef-a48e-37e9-8232-2bc3a476a27d.roa
File:                     a1127fef-a48e-37e9-8232-2bc3a476a27d.roa (raw, json)
Hash identifier:          h+XshRC4RGRqbBoGBu2A/qJBI66X7AA5Ns+zda1Lrz0=
Subject key identifier:   AD:04:C7:1E:7A:10:D0:06:3A:0C:DD:EC:68:57:4E:A5:1B:70:01:B9
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F52B53FAC68EC88FF7B996A40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a1127fef-a48e-37e9-8232-2bc3a476a27d.roa
Signing time:             Mon 28 Sep 2026 08:36:56 +0000
ROA not before:           Mon 28 Sep 2026 08:36:56 +0000
ROA not after:            Sun 27 Dec 2026 09:36:56 +0000
asID:                     62904
IP address blocks:        50.2.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:b5:3f:ac:68:ec:88:ff:7b:99:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 08:36:56 2026 GMT
            Not After : Dec 27 09:36:56 2026 GMT
        Subject: CN=c5f541e3-cafb-4428-a286-92d0cbbd203d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:c2:ef:fc:1a:8f:49:da:59:65:72:ec:17:
                    c5:23:3f:07:0d:b6:76:e3:df:ef:64:bd:b2:49:44:
                    32:3f:00:e1:25:78:c8:7d:79:20:88:c9:90:93:ac:
                    79:53:dd:15:7b:0a:bb:c2:09:a9:92:ff:8c:45:ee:
                    15:a1:ef:7f:97:39:90:4d:6c:36:f5:6b:0e:a9:3f:
                    e3:d0:8e:51:e2:eb:ac:cb:a3:35:11:8e:9c:ac:3c:
                    0f:6c:08:25:98:49:70:26:b9:e0:e9:22:4b:eb:2e:
                    bc:5e:30:4e:8b:f0:ee:5e:9c:b3:f5:40:50:00:1b:
                    45:fb:7a:12:c1:21:f7:ff:a6:bd:62:fa:0e:a2:fb:
                    58:10:21:2c:90:cd:1b:78:d3:b2:63:fa:fe:4a:e1:
                    36:76:3f:c0:8c:81:52:be:b8:db:95:88:e3:0a:3e:
                    48:95:f8:17:f3:70:69:9a:84:83:ed:d8:0d:e9:69:
                    0f:98:92:6d:ab:8b:ea:89:55:fd:18:33:d9:29:87:
                    b7:48:1f:7a:e1:b4:20:74:4b:9b:2a:d2:94:8c:24:
                    eb:43:af:7d:87:69:8f:8c:03:ca:6d:b6:33:4c:72:
                    84:3c:49:6d:e1:fa:ac:18:f4:59:f0:8f:25:31:84:
                    56:ff:98:0c:ab:5e:00:33:d2:d2:8a:ad:64:2d:94:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:04:C7:1E:7A:10:D0:06:3A:0C:DD:EC:68:57:4E:A5:1B:70:01:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a1127fef-a48e-37e9-8232-2bc3a476a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:8f:95:f2:11:41:d5:ad:a8:d6:44:fa:b7:78:7e:bf:60:
         42:43:98:9a:36:1f:7e:d5:71:7e:c6:a6:b4:07:cc:5c:cf:2a:
         cb:e4:93:e0:7b:8e:c0:76:40:4a:90:72:c0:3f:66:5f:bc:64:
         24:34:41:7c:be:93:9f:81:08:51:a2:81:df:69:f6:d4:3b:1c:
         25:8c:a8:c0:11:c8:b4:26:7a:9c:45:99:e0:11:72:00:24:11:
         6f:a8:3c:a9:3f:d5:9a:4b:76:98:1e:30:79:aa:54:87:23:4c:
         1c:68:fb:2d:2f:06:67:a2:67:6d:4c:67:df:29:46:ad:d3:4b:
         c2:18:71:75:c0:a8:86:cc:79:42:bf:31:6d:8f:71:64:1f:41:
         86:5b:c6:ad:c6:78:47:9c:ed:c2:25:7d:92:c2:48:25:f4:c4:
         e1:c2:b1:fa:4f:a9:df:05:a5:ca:61:33:3d:d3:f2:42:37:af:
         fc:42:76:c8:df:74:c4:61:b2:85:af:1b:cc:af:71:bd:40:91:
         c8:0a:e0:13:b3:f8:c3:58:75:86:65:6f:7d:6f:be:a1:d3:8d:
         c3:e6:a0:8a:8b:12:39:fb:30:86:2e:42:bb:b2:c5:43:8f:e0:
         7f:08:07:3d:c3:f5:93:f8:14:17:41:1e:01:b5:d3:3b:59:31:
         d7:83:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:02 2026 by rpki-client