Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c7721e18-d293-3f85-9671-b6140e049636.roa
File:                     c7721e18-d293-3f85-9671-b6140e049636.roa (raw, json)
Hash identifier:          XHVuy9PIodBa+0ljc1mrd5p1JTYPU+RnVP92GkHfSXM=
Subject key identifier:   E2:43:2B:44:47:F3:BE:76:2F:1F:31:9C:E2:6E:69:09:57:DE:3C:E6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DCA40AACA1D8A38686AEC7D00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c7721e18-d293-3f85-9671-b6140e049636.roa
Signing time:             Sun 10 May 2026 18:45:09 +0000
ROA not before:           Sun 10 May 2026 18:45:09 +0000
ROA not after:            Sat 08 Aug 2026 18:45:09 +0000
asID:                     834
IP address blocks:        50.3.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:40:aa:ca:1d:8a:38:68:6a:ec:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 10 18:45:09 2026 GMT
            Not After : Aug  8 18:45:09 2026 GMT
        Subject: CN=5fecc9fb-5ccf-42d7-9f84-b1af36a23f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:c9:ba:fb:50:4b:3c:cd:95:2c:3e:a7:ec:
                    c5:74:92:a1:81:36:59:38:ce:46:77:6c:d4:6c:d4:
                    20:e8:fd:27:b8:d8:2b:36:5d:fa:fa:0d:c7:ac:e4:
                    2d:72:2a:fd:f2:a2:e4:ef:a1:38:50:97:e1:23:2c:
                    ed:b1:1a:7a:6c:2d:9d:e6:3a:f1:a3:23:0c:a2:ba:
                    fa:0a:da:69:36:76:42:ef:92:0e:cb:97:e1:05:54:
                    c5:25:1a:b9:59:be:f4:15:dd:52:64:58:00:3e:b0:
                    78:08:97:d3:ff:bc:ac:f8:f4:e0:22:08:d2:b5:2c:
                    fa:86:4d:c2:79:06:d5:57:5c:7d:b6:5a:ef:89:1c:
                    9c:34:a1:d2:55:41:35:c8:77:4f:c6:2e:bb:3d:9e:
                    ad:19:a3:67:9a:b6:56:cc:e3:6e:9f:a2:19:a4:70:
                    b8:87:89:3d:3c:b5:70:1f:56:de:b4:90:1d:81:bf:
                    d0:a7:04:15:50:22:a7:d0:74:0d:15:0c:30:0a:ea:
                    fb:a9:e5:c3:89:16:5f:ab:89:84:c4:d3:8c:b4:11:
                    56:08:b5:fd:c6:ac:26:b8:9c:b7:39:fd:95:39:fc:
                    11:84:92:d0:f6:10:2f:40:f8:64:47:b7:ad:ff:83:
                    b8:4d:bc:39:01:78:e8:1b:61:8f:2b:f0:09:4b:ab:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:2B:44:47:F3:BE:76:2F:1F:31:9C:E2:6E:69:09:57:DE:3C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c7721e18-d293-3f85-9671-b6140e049636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:25:dc:14:b4:16:f7:6c:63:ee:df:58:38:08:1a:ef:2f:
         c8:35:19:bf:14:31:a1:35:e8:47:a9:29:a5:05:69:13:f5:60:
         2e:e7:52:00:ce:61:34:ac:e3:2a:cb:30:1f:13:a1:ae:7c:67:
         08:99:3f:3c:ba:dd:42:8b:f8:54:bb:30:cd:4c:8c:c8:64:d4:
         77:c5:10:e0:b7:9f:ae:26:4a:59:e7:dd:6a:5b:f4:a4:1a:ad:
         99:ed:88:20:1d:45:aa:af:f4:4e:45:5b:91:fc:8b:48:1d:e1:
         43:f1:43:b1:2f:7c:18:b3:84:ed:cd:06:f8:68:7a:0a:0c:28:
         7f:86:f1:73:cc:c0:3a:2a:6a:64:be:1e:4e:8c:eb:be:be:af:
         3c:bd:fb:12:74:ab:11:b9:f1:ca:00:9f:66:8e:4e:55:36:55:
         83:76:e8:23:1a:6c:bb:95:6c:53:51:62:fe:00:a9:47:25:6e:
         52:2b:de:f1:2d:e5:0f:01:cd:98:d6:2c:c4:8f:7e:40:a8:2f:
         b5:94:eb:de:5f:f9:8d:d1:13:9d:50:12:11:18:9d:3e:ad:ed:
         6c:f1:4c:28:79:21:76:d7:3d:5d:4c:c5:89:02:f7:98:61:28:
         3d:04:1b:37:01:c4:01:5a:90:de:1b:29:cc:80:cb:05:41:c9:
         41:ee:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:38 2026 by rpki-client