Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a87686ce-c570-3bef-9dd8-5d55d2aa39af.roa
File:                     a87686ce-c570-3bef-9dd8-5d55d2aa39af.roa (raw, json)
Hash identifier:          +PceLS0qZRwznShKt2b9uef2iurjErmhXEiU8tTBi58=
Subject key identifier:   9F:DA:19:E9:D3:F8:3E:6C:32:98:D2:13:C3:0B:10:07:E3:6B:6C:A9
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC79A104ED543A3AAC69300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a87686ce-c570-3bef-9dd8-5d55d2aa39af.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.2.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9a:10:4e:d5:43:a3:aa:c6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=33e545ce-1dd5-465c-9626-0d2680727c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:a5:58:ed:ca:00:ae:8f:a4:29:0c:9e:de:
                    42:96:ad:c3:ba:4d:3b:6a:05:cc:02:74:cc:0e:f4:
                    28:ca:ce:07:2e:a5:e8:03:54:ec:58:a0:bf:cc:0b:
                    5c:bc:8a:ca:ce:34:37:e5:61:ef:97:4a:0c:2d:62:
                    75:59:bf:4b:d6:4c:9e:70:90:31:c2:98:9d:22:e5:
                    ea:65:4c:bc:0b:ac:ba:eb:dd:56:ec:09:d5:8c:7f:
                    15:d2:1c:b4:a3:99:79:03:8e:de:5b:3d:c9:79:4c:
                    89:f4:b9:85:d1:60:59:f6:71:3e:1d:03:4c:bf:c7:
                    0c:bd:3f:2d:d0:04:5b:96:df:c4:0a:42:5d:ce:c7:
                    b3:0f:18:97:96:04:4d:50:3f:d7:41:52:14:93:14:
                    6a:55:94:cb:1e:85:3e:e6:c4:f6:f1:76:ee:95:2c:
                    e2:2a:e4:a2:1d:aa:72:67:51:d1:f5:d8:2b:66:c6:
                    be:4c:95:07:82:15:4d:4c:a7:1f:91:1a:17:38:f4:
                    c0:5f:7d:b0:87:32:24:28:24:2d:7c:f5:7a:af:2e:
                    a1:c0:13:bb:69:0a:00:dc:08:91:98:66:35:06:9d:
                    0d:58:45:70:40:cc:d0:44:e6:2d:30:69:e1:45:25:
                    f9:ae:08:d3:9f:2b:e1:11:b5:4e:0b:4a:a4:a7:a9:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:19:E9:D3:F8:3E:6C:32:98:D2:13:C3:0B:10:07:E3:6B:6C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a87686ce-c570-3bef-9dd8-5d55d2aa39af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:fc:56:f1:a1:56:31:3e:15:34:7b:de:33:5e:05:b1:7b:
         63:21:25:69:66:1d:72:b1:b4:66:5a:1a:ef:5c:71:72:36:45:
         06:61:5e:ed:45:e4:1b:ef:dc:d7:71:8d:75:48:4a:04:94:78:
         d9:ea:ff:b7:9f:5b:fa:d8:df:7e:73:9a:94:a9:b1:f3:b3:2c:
         58:4a:40:57:63:05:91:d0:6c:b6:47:35:f8:95:60:90:df:cc:
         c0:81:75:11:24:d8:19:9e:aa:60:c3:de:89:12:0c:d6:c3:8c:
         27:0c:43:88:57:81:e2:c8:50:ac:1c:6b:55:3e:82:79:ec:f8:
         f7:fc:8a:66:4d:61:dd:c5:f1:82:17:0b:a3:3b:65:cd:f0:df:
         b9:39:1c:7e:f3:ba:60:8b:bb:18:70:b4:dc:c1:30:0a:89:0d:
         08:b1:29:27:f3:0a:92:25:97:df:4c:92:33:ef:bc:d3:cb:a9:
         4c:8c:4f:5f:de:cd:5e:d2:3f:ff:e7:44:7a:78:2e:b5:57:82:
         ba:03:56:e5:2f:06:7c:f0:03:98:75:9a:48:b3:a8:0f:ac:11:
         19:e5:53:b5:37:94:dd:f6:55:f1:8a:5b:17:12:7d:44:e6:50:
         42:0c:6b:86:1d:ad:0a:a1:40:c3:67:18:bc:25:94:50:2a:d4:
         ce:ec:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:50:37 2026 by rpki-client