Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b2a7dfbc-5271-32b7-81e0-b2147cc8905d.roa
File:                     b2a7dfbc-5271-32b7-81e0-b2147cc8905d.roa (raw, json)
Hash identifier:          dAEZ8/c2bmBC2u3mv+kKn8EUK8NInNWbTDAfC1GwtE0=
Subject key identifier:   3D:41:82:05:2E:00:85:92:CB:04:13:5C:E6:F7:67:38:55:27:77:07
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7C824F93875FC2C1DEE80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b2a7dfbc-5271-32b7-81e0-b2147cc8905d.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.2.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c8:24:f9:38:75:fc:2c:1d:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=d2b5e35b-d279-4150-9c44-b28935e24b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:e0:a8:50:ce:ab:b0:d7:ef:e2:0a:0a:70:
                    49:1b:6c:e4:6e:ad:a1:67:09:b1:73:d3:d5:1a:d9:
                    c5:af:46:d9:ba:d7:41:21:d7:9b:9a:43:39:89:cb:
                    15:0f:5d:a1:08:e2:3d:71:56:77:f8:09:50:05:23:
                    e3:8c:8d:01:7e:ef:61:01:11:0c:63:40:9f:b2:87:
                    2b:86:b6:f4:97:8a:93:3d:21:eb:fd:9d:ff:fd:7f:
                    17:d6:da:73:0e:32:d6:9a:90:6c:9c:6c:74:70:0b:
                    77:b1:96:28:67:8c:1e:30:05:55:27:4b:87:23:4a:
                    4a:9f:3c:6d:f5:11:bf:43:4c:12:28:a6:ce:e1:32:
                    97:6b:11:8c:e0:b4:33:4b:05:0f:1a:20:53:40:c5:
                    f6:59:6f:fc:dc:cc:b8:76:8a:b6:82:7d:15:4e:a2:
                    c6:e8:fd:f4:14:0e:86:46:4e:88:a5:83:fe:c9:58:
                    49:0e:78:48:55:2b:65:f9:e5:c1:40:3e:78:d4:2a:
                    b4:d1:0d:98:8c:ca:a8:10:67:71:ac:39:6d:00:11:
                    9f:38:3f:8f:d5:eb:6b:77:21:f2:50:30:0b:23:12:
                    c6:e2:89:64:ac:0a:27:bb:a6:80:32:c4:af:31:4c:
                    60:66:be:e2:72:d3:37:3d:19:15:d8:f1:2a:ba:d4:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:82:05:2E:00:85:92:CB:04:13:5C:E6:F7:67:38:55:27:77:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b2a7dfbc-5271-32b7-81e0-b2147cc8905d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:fb:96:20:15:b6:42:ec:38:8b:8b:12:e7:0e:52:d4:c1:
         86:d1:a0:b2:d1:e7:42:0f:02:25:58:16:81:4a:9f:92:cb:62:
         52:7f:60:f8:15:9f:a3:5b:6f:93:52:5e:a9:2b:2c:60:4c:09:
         26:62:57:cd:bd:84:73:a7:1e:44:56:79:f4:81:4d:c9:bc:2e:
         8b:30:67:bd:e0:05:65:4c:ec:11:bd:bb:97:29:c3:76:8d:d0:
         11:57:7a:4c:4f:61:9a:ca:74:19:f1:61:d1:12:ba:f4:80:b5:
         92:c2:1b:64:3e:20:ae:62:19:67:fd:88:fc:9f:fa:53:9f:83:
         53:85:78:fa:4d:5b:36:4e:dd:9a:13:24:f9:1e:8a:10:e3:fa:
         d7:64:a7:b5:6c:1e:4c:82:da:e7:23:9e:1a:6c:6c:47:42:90:
         e3:34:5d:db:92:c4:29:32:2b:cd:44:8b:97:e1:3f:55:b0:07:
         9a:12:47:6b:0a:96:04:58:19:7b:de:f2:3a:25:6e:43:75:0f:
         1d:56:d1:31:1b:52:e1:39:0a:6b:2c:a5:3e:0d:67:a9:f2:57:
         7d:38:5c:66:f2:32:bb:28:98:68:fc:e6:03:56:3c:55:b2:2e:
         54:d7:09:d0:bf:f2:93:7e:18:d9:07:d7:5d:5d:47:7a:73:15:
         21:aa:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:48:21 2026 by rpki-client