Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d52d068d-dc12-323f-b411-1b43d8239a1f.roa
File:                     d52d068d-dc12-323f-b411-1b43d8239a1f.roa (raw, json)
Hash identifier:          ZD4wO4qgron5jugSx1NsP/Ba7pj5eEwm60gKMF4y2z4=
Subject key identifier:   88:16:45:FE:D7:DD:DE:B4:C1:21:06:2E:0A:01:71:D5:4F:A3:4C:45
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D143DA6E3497E7BAC2D443200
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d52d068d-dc12-323f-b411-1b43d8239a1f.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     137441
IP address blocks:        50.2.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a6:e3:49:7e:7b:ac:2d:44:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d353b720-95f5-49c9-95dc-ca0d421414be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:69:ce:b4:c8:f3:c4:35:47:84:58:13:d0:
                    b8:29:3e:fe:25:60:d8:8b:66:73:7d:dc:4d:26:44:
                    51:39:e7:72:f0:c1:fe:b1:0d:f5:4c:24:77:67:86:
                    bb:00:65:3d:77:81:99:ff:dc:9b:3a:b8:b4:49:40:
                    ed:27:a7:56:3f:d4:28:dc:d5:07:b8:dd:1a:b5:16:
                    93:bd:0e:af:ed:e1:43:14:49:d6:94:64:32:d3:84:
                    8c:26:2d:d9:99:74:2d:54:89:3d:68:8a:ac:f2:af:
                    8a:ee:52:56:ea:16:ad:01:15:cc:35:b0:51:4d:ac:
                    d5:75:b5:4f:22:10:b2:84:b1:24:cf:cd:d3:74:b2:
                    a1:7f:6f:1f:55:5f:1e:75:a3:34:f7:8a:88:7f:18:
                    47:f8:93:5b:48:d4:2a:d3:56:4a:1d:2f:c3:70:b4:
                    f8:47:d0:e6:97:79:ba:f7:42:cd:07:2a:6f:ae:b8:
                    97:c8:a9:a1:f6:2b:23:22:c2:25:00:c5:09:0a:4d:
                    bd:00:44:bd:8e:73:28:da:dc:33:cb:ed:47:7d:2e:
                    87:f8:ce:b5:75:e5:12:d1:51:20:35:cc:4d:04:5c:
                    ea:b6:f1:fd:c3:80:83:b5:5b:35:35:bd:4e:07:64:
                    b2:c3:91:e5:30:e4:8b:51:df:63:bd:95:4f:26:15:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:16:45:FE:D7:DD:DE:B4:C1:21:06:2E:0A:01:71:D5:4F:A3:4C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d52d068d-dc12-323f-b411-1b43d8239a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:59:81:6a:b0:fb:98:65:79:c9:e6:64:91:45:35:fe:19:
         5e:1f:4a:33:4d:6b:b7:bb:12:92:e1:7b:8d:ed:f1:93:d0:a8:
         88:18:b8:95:80:6f:43:22:35:53:bf:64:81:02:40:19:b1:b8:
         df:aa:3a:a7:df:5d:c8:8b:ef:4a:07:df:84:b9:aa:45:7d:b4:
         82:58:f8:e8:73:4c:69:b7:a9:7d:c7:d0:56:73:bf:57:2e:e6:
         64:6b:1e:0f:1f:72:90:bd:74:c6:b6:6f:5a:81:0f:ff:eb:0c:
         90:9d:61:a8:7d:84:26:fe:11:d4:4f:81:be:69:73:5a:f7:66:
         1f:2c:39:e5:96:63:43:d1:2f:fa:d5:0f:71:9b:4e:f8:7e:fb:
         b3:92:70:df:59:8b:2f:29:99:85:64:a4:88:af:e7:33:22:3f:
         e9:cc:05:c8:df:9d:40:d2:9f:66:ca:b5:24:99:f6:11:50:a7:
         dc:60:03:0f:ea:6a:d9:1f:3f:4e:b5:7e:41:45:18:f0:41:a9:
         15:2b:92:de:95:84:8c:26:a0:41:bc:e6:57:cc:f9:c4:dd:2e:
         be:f6:8a:de:31:5d:38:57:85:cc:f3:e4:13:4a:e4:29:75:64:
         14:ae:8e:14:56:9e:70:65:ac:65:7b:75:b9:59:b0:aa:8e:4e:
         bc:2b:46:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPabjSX57rC1EMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDM1M2I3MjAtOTVmNS00OWM5LTk1ZGMtY2EwZDQyMTQxNGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmRpzrTI88Q1R4RYE9C4KT7+JWDYi2ZzfdxN
JkRROedy8MH+sQ31TCR3Z4a7AGU9d4GZ/9ybOri0SUDtJ6dWP9Qo3NUHuN0atRaT
vQ6v7eFDFEnWlGQy04SMJi3ZmXQtVIk9aIqs8q+K7lJW6hatARXMNbBRTazVdbVP
IhCyhLEkz83TdLKhf28fVV8edaM094qIfxhH+JNbSNQq01ZKHS/DcLT4R9Dml3m6
90LNBypvrriXyKmh9isjIsIlAMUJCk29AES9jnMo2twzy+1HfS6H+M61deUS0VEg
NcxNBFzqtvH9w4CDtVs1Nb1OB2Syw5HlMOSLUd9jvZVPJhU6FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgWRf7X3d60wSEGLgoBcdVPo0xFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDUyZDA2OGQtZGMxMi0z
MjNmLWI0MTEtMWI0M2Q4MjM5YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8MWYFqsPuYZXnJ5mSRRTX+GV4fSjNNa7e7EpLhe43t8ZPQqIgYuJWA
b0MiNVO/ZIECQBmxuN+qOqffXciL70oH34S5qkV9tIJY+OhzTGm3qX3H0FZzv1cu
5mRrHg8fcpC9dMa2b1qBD//rDJCdYah9hCb+EdRPgb5pc1r3Zh8sOeWWY0PRL/rV
D3GbTvh++7OScN9Ziy8pmYVkpIiv5zMiP+nMBcjfnUDSn2bKtSSZ9hFQp9xgAw/q
atkfP061fkFFGPBBqRUrkt6VhIwmoEG85lfM+cTdLr72it4xXThXhczz5BNK5Cl1
ZBSujhRWnnBlrGV7dblZsKqOTrwrRh4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:05 2026 by rpki-client