Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1082932-e8b6-3ef8-af5b-4b25b1bbfe2e.roa
File:                     d1082932-e8b6-3ef8-af5b-4b25b1bbfe2e.roa (raw, json)
Hash identifier:          nOoIXPHvEt/Gr73+XvyyxoD1T6hGiA9z6ZJsTECVvJE=
Subject key identifier:   5C:3A:E2:00:90:44:6C:14:1D:FC:7F:40:89:E4:8A:78:99:7A:20:DB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F529167873E3BF3CD5135A4E2
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1082932-e8b6-3ef8-af5b-4b25b1bbfe2e.roa
Signing time:             Mon 28 Sep 2026 07:24:42 +0000
ROA not before:           Mon 28 Sep 2026 07:24:42 +0000
ROA not after:            Sun 27 Dec 2026 08:24:42 +0000
asID:                     62904
IP address blocks:        50.2.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:91:67:87:3e:3b:f3:cd:51:35:a4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 07:24:42 2026 GMT
            Not After : Dec 27 08:24:42 2026 GMT
        Subject: CN=756727b1-7330-4e76-8f27-55afb395ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:0d:dc:34:3e:b8:06:5a:ff:c7:5b:cd:36:
                    f4:2e:80:d9:a6:2c:1d:3b:a6:9e:2f:7a:2c:b2:de:
                    a2:1f:d3:38:6e:51:f3:6b:f0:c6:19:85:b6:1e:4d:
                    17:6c:f3:fe:8a:5e:be:bb:44:fa:44:40:fe:60:a2:
                    22:ba:21:b4:6f:b6:b3:3d:01:fe:64:10:5d:f9:12:
                    82:b3:9c:2b:0b:ad:97:3b:dc:a7:f7:93:4a:0a:85:
                    4d:f9:30:a4:e3:de:cc:eb:fd:a9:35:79:23:ba:d1:
                    5a:88:a9:d4:f7:14:0d:70:19:81:6f:fc:83:fa:ff:
                    96:64:f7:4b:1e:ba:ec:e0:c2:98:54:55:ee:54:3b:
                    e2:98:90:38:ba:5c:7e:58:c4:d5:96:d7:94:48:52:
                    86:41:4d:e3:75:36:6d:12:3f:b9:45:0e:8c:2f:2b:
                    d1:56:9b:ce:5c:40:0b:47:10:d8:2d:cc:71:01:c7:
                    da:18:8f:2c:d1:83:82:17:f2:a0:45:c7:ea:a3:1b:
                    8f:f4:35:62:53:58:8d:bd:b4:45:9d:c7:63:0b:b9:
                    4e:5a:52:3d:c2:a7:b0:95:9b:f3:11:db:fe:9f:d0:
                    e1:20:e4:14:15:f6:0d:c0:d9:d1:df:bd:cf:b8:ec:
                    84:b1:2a:a6:9f:a1:ea:8f:32:98:e6:73:be:92:99:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:E2:00:90:44:6C:14:1D:FC:7F:40:89:E4:8A:78:99:7A:20:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1082932-e8b6-3ef8-af5b-4b25b1bbfe2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1b:39:04:6b:45:60:d3:ae:d3:db:81:27:cb:7c:ff:60:f5:
         68:7a:87:3c:d8:75:a5:e6:e1:8f:ad:fe:c9:55:61:99:96:dd:
         ed:e8:21:e3:ec:f1:34:f8:35:56:4b:af:12:85:73:2f:66:6f:
         29:ff:e7:a4:1b:e8:53:b2:ab:37:46:e3:33:52:33:41:3f:a3:
         0c:a1:48:eb:06:48:ab:27:01:4f:03:7d:91:93:77:4c:42:2b:
         d9:11:95:b0:72:8f:fc:dc:20:52:03:d3:80:56:93:5a:ed:a1:
         d0:1e:f6:24:10:06:7c:84:0c:ae:22:72:80:17:0a:c6:47:ce:
         57:30:74:7f:e1:53:06:42:93:09:35:0c:ce:aa:5f:e0:41:b1:
         bd:99:da:04:d3:e0:ab:27:21:79:94:f8:dd:a7:c8:d3:3b:37:
         50:aa:14:23:49:a9:8d:b6:71:3f:56:3b:15:43:be:17:44:9b:
         c6:a1:e4:05:60:07:65:d6:ab:01:ae:b4:4c:63:b6:09:d0:3f:
         96:2b:50:aa:c7:a5:6f:c6:97:4c:e6:cc:ce:ca:f2:8b:1d:16:
         f4:90:4a:b4:cb:f3:18:f3:0f:d9:0b:0e:05:00:51:d8:3c:8c:
         05:82:b4:92:a0:a1:fe:31:27:4f:cc:7a:d7:02:27:1f:61:9d:
         ae:0b:6f:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9SkWeHPjvzzVE1pOIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyODA3MjQ0MloXDTI2MTIyNzA4MjQ0MlowLzEtMCsGA1UEAxMk
NzU2NzI3YjEtNzMzMC00ZTc2LThmMjctNTVhZmIzOTVlZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9kN3DQ+uAZa/8dbzTb0LoDZpiwdO6aeL3os
st6iH9M4blHza/DGGYW2Hk0XbPP+il6+u0T6RED+YKIiuiG0b7azPQH+ZBBd+RKC
s5wrC62XO9yn95NKCoVN+TCk497M6/2pNXkjutFaiKnU9xQNcBmBb/yD+v+WZPdL
Hrrs4MKYVFXuVDvimJA4ulx+WMTVlteUSFKGQU3jdTZtEj+5RQ6MLyvRVpvOXEAL
RxDYLcxxAcfaGI8s0YOCF/KgRcfqoxuP9DViU1iNvbRFncdjC7lOWlI9wqewlZvz
Edv+n9DhIOQUFfYNwNnR373PuOyEsSqmn6HqjzKY5nO+kpkNCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFw64gCQRGwUHfx/QInkiniZeiDbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDEwODI5MzItZThiNi0z
ZWY4LWFmNWItNGIyNWIxYmJmZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8bOQRrRWDTrtPbgSfLfP9g9Wh6hzzYdaXm4Y+t/slVYZmW3e3oIePs
8TT4NVZLrxKFcy9mbyn/56Qb6FOyqzdG4zNSM0E/owyhSOsGSKsnAU8DfZGTd0xC
K9kRlbByj/zcIFID04BWk1rtodAe9iQQBnyEDK4icoAXCsZHzlcwdH/hUwZCkwk1
DM6qX+BBsb2Z2gTT4KsnIXmU+N2nyNM7N1CqFCNJqY22cT9WOxVDvhdEm8ah5AVg
B2XWqwGutExjtgnQP5YrUKrHpW/Gl0zmzM7K8osdFvSQSrTL8xjzD9kLDgUAUdg8
jAWCtJKgof4xJ0/MetcCJx9hna4Lb/Y=
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:28:59 2026 by rpki-client