Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c099a656-4fbf-3c02-b3a6-31f41026efb7.roa
File:                     c099a656-4fbf-3c02-b3a6-31f41026efb7.roa (raw, json)
Hash identifier:          5uz0OGynnr/6Gweyp8TC0MjTn4W/CAVSuD90K5UYOFw=
Subject key identifier:   56:0F:16:61:97:04:00:2B:C7:B6:B5:D9:C1:CB:18:3E:3F:C8:1A:FD
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F34291D9A85D2A0B6FC60DC80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c099a656-4fbf-3c02-b3a6-31f41026efb7.roa
Signing time:             Thu 17 Sep 2026 10:00:20 +0000
ROA not before:           Thu 17 Sep 2026 10:00:20 +0000
ROA not after:            Wed 16 Dec 2026 11:00:20 +0000
asID:                     2914
IP address blocks:        50.2.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:29:1d:9a:85:d2:a0:b6:fc:60:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 17 10:00:20 2026 GMT
            Not After : Dec 16 11:00:20 2026 GMT
        Subject: CN=a5be1413-1227-422f-a768-a7c45ccf7ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:51:34:16:f8:7c:61:d4:36:43:dc:12:e3:
                    74:2f:03:39:85:fc:ac:93:02:ee:e7:13:3d:14:38:
                    7c:b3:a9:e3:63:a8:70:f7:74:f6:e4:f9:49:8e:cb:
                    ca:c7:31:9c:b2:06:7d:a4:74:c9:2f:e8:d0:b9:00:
                    19:8e:1b:e9:01:37:8a:45:e2:b1:3e:20:0f:70:47:
                    37:59:f7:5a:2c:29:9b:cf:62:17:a5:c6:26:ba:8f:
                    27:71:27:38:e0:e1:81:9a:74:de:87:fe:45:65:a5:
                    29:89:f1:fd:6b:d8:90:2e:86:16:c7:f5:45:e8:99:
                    dd:09:48:2d:ec:f7:8d:e0:05:8d:f5:ee:30:6f:23:
                    16:b6:30:b5:2e:a9:7c:69:da:7e:50:20:b8:66:29:
                    bb:e8:e4:0e:b6:64:05:2a:8f:8d:50:b0:25:51:9d:
                    0f:39:48:14:db:21:6b:2d:2a:a8:a1:0b:e4:ce:86:
                    7c:4c:aa:70:3d:86:52:bb:af:b1:7c:f9:53:6d:54:
                    b6:66:13:44:47:a7:4d:49:06:43:04:8b:13:b1:37:
                    5d:29:8b:66:eb:d9:7a:3a:f1:38:b6:c7:62:f8:aa:
                    2f:1e:b9:a8:9f:45:05:46:53:f5:50:94:da:eb:4d:
                    7d:21:85:73:7c:3c:0a:1a:84:22:5d:e3:9d:df:76:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:16:61:97:04:00:2B:C7:B6:B5:D9:C1:CB:18:3E:3F:C8:1A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c099a656-4fbf-3c02-b3a6-31f41026efb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:78:4b:32:f6:d7:d9:22:39:66:1c:f2:72:73:94:78:71:
         ab:33:f0:a6:28:86:74:f6:22:be:8b:0d:01:74:e2:59:e0:6a:
         eb:55:f1:60:61:25:83:db:f0:19:1d:fd:8b:fc:13:c4:24:b6:
         e0:7f:4b:a1:17:77:43:96:e0:20:18:b5:94:73:a8:10:84:76:
         9c:f3:99:76:d5:ee:46:84:99:7d:0f:a7:5e:81:11:1c:88:3d:
         7f:9c:99:b8:16:0b:3c:a8:24:90:67:bb:80:51:7b:1e:1f:3a:
         18:0f:41:20:66:21:2b:39:a5:2d:fb:92:bd:1b:14:ac:b4:4b:
         7c:10:8d:f8:54:e0:de:83:35:f0:81:1b:c3:1b:c8:28:2f:d3:
         f7:c9:17:6b:15:c1:6e:42:33:94:4a:49:c5:4c:51:18:fb:93:
         1b:21:72:f3:7c:bb:e3:a6:59:b7:3a:14:a9:fe:16:00:91:6e:
         21:c3:2d:ba:08:17:03:43:c7:4a:97:cf:eb:ed:fa:b7:6f:86:
         74:d1:da:e0:d5:87:5d:63:c6:c0:6b:03:66:2b:96:21:68:ad:
         ca:99:33:c3:29:42:45:65:34:8e:a5:79:77:ff:d6:1e:9e:ff:
         34:d4:a9:a3:aa:84:d8:d9:25:e6:ae:d3:da:f9:c4:a0:e6:89:
         b9:65:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:18 2026 by rpki-client