Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa
File:                     f643914a-37cf-3512-b7c7-357c3984daab.roa (raw, json)
Hash identifier:          P+4/7rDxAqg3yN5psOSleY+jDgpa2CwDZiy28Egxg5I=
Subject key identifier:   66:A0:A9:06:B1:F3:FF:35:12:79:D5:65:89:93:95:D9:53:36:E9:3A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F498B8A9C6B65300A584D73E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32043
IP address blocks:        50.2.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:8a:9c:6b:65:30:0a:58:4d:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cbe70536-bfb1-4960-814d-406f7c9807cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:3a:0f:b5:5a:b3:e7:8e:fc:01:b7:31:31:
                    05:db:ac:92:aa:1e:b3:11:59:ce:d3:1a:4b:ae:38:
                    9e:a6:e2:b5:e5:4f:c4:84:65:33:5e:a9:2e:12:7e:
                    97:e7:d5:bf:3c:86:83:b7:56:11:b5:88:1c:77:8f:
                    b0:b9:03:50:c0:7f:1d:81:43:a8:af:85:4a:36:6f:
                    f0:56:64:8a:86:cf:5d:a2:ff:ad:35:b0:9e:22:46:
                    1b:7c:bf:d3:43:07:84:5a:fc:62:d0:57:3d:eb:dd:
                    a5:06:3b:d6:bb:1e:48:0f:0b:c9:77:fc:37:da:eb:
                    e6:b1:71:ed:4e:36:b1:7d:33:e2:10:b5:de:bf:a4:
                    76:08:b0:93:36:3b:42:6b:26:e2:09:d4:6c:d3:db:
                    90:f7:6e:2c:5e:8c:d4:a6:32:a8:85:f1:ad:74:6e:
                    c2:b3:96:f8:15:a6:d7:25:29:ba:b9:83:a3:2d:12:
                    f8:11:0e:71:10:98:45:f3:af:59:55:7c:64:8b:28:
                    3e:dd:1e:aa:50:0b:39:36:f8:d5:ae:27:4b:16:92:
                    1e:c0:63:33:af:e3:4e:59:70:ff:8b:c0:d3:78:17:
                    5d:63:db:6c:76:5d:7b:7d:09:ce:10:34:5b:fa:b0:
                    ca:a4:13:2d:7b:27:f6:5a:de:48:6d:11:66:14:28:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:A9:06:B1:F3:FF:35:12:79:D5:65:89:93:95:D9:53:36:E9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:26:fd:67:8c:b5:36:0b:cb:d6:dc:df:75:21:f6:e1:e2:
         6a:75:79:4a:7c:bd:42:b1:66:19:6f:f4:6b:ab:93:4a:e5:0e:
         06:71:85:f6:fa:f7:71:ee:d5:f9:36:62:11:4c:60:56:0c:5c:
         92:cf:7c:2e:13:80:a9:d3:d9:1a:e4:20:c8:af:bc:9a:30:9a:
         e0:7e:c4:a2:f6:9a:b4:2a:be:1d:0c:4a:54:73:e0:4e:6a:51:
         b7:7c:67:4f:29:3e:a0:ea:8c:69:2a:27:ac:7a:13:f9:d0:8f:
         8d:a9:e3:b4:ff:b0:fb:33:d2:51:39:8a:16:0b:43:6b:fd:45:
         6f:63:27:64:fe:89:a4:07:34:f0:8f:c5:cf:79:59:c0:9e:e5:
         1c:8a:0c:89:09:7c:80:1a:81:b0:95:21:45:cd:7f:94:f6:b7:
         68:33:9d:be:00:26:b6:c6:9f:8b:45:c2:d6:85:0d:73:e6:25:
         a7:7b:2d:b8:ba:fa:d2:c0:1d:37:2d:c4:00:d0:0e:7b:22:f3:
         e8:36:0c:41:77:c2:0e:04:ba:af:a6:96:92:63:24:89:4c:87:
         72:9d:db:f6:65:21:1b:6d:08:28:d0:01:5a:a1:01:cf:2d:8c:
         4a:34:3f:4b:0a:1c:67:41:4f:76:ca:47:e6:54:1f:11:2e:fc:
         a1:cb:cb:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji4qca2UwClhNc+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2JlNzA1MzYtYmZiMS00OTYwLTgxNGQtNDA2ZjdjOTgwN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgE6D7Vas+eO/AG3MTEF26ySqh6zEVnO0xpL
rjiepuK15U/EhGUzXqkuEn6X59W/PIaDt1YRtYgcd4+wuQNQwH8dgUOor4VKNm/w
VmSKhs9dov+tNbCeIkYbfL/TQweEWvxi0Fc9692lBjvWux5IDwvJd/w32uvmsXHt
TjaxfTPiELXev6R2CLCTNjtCaybiCdRs09uQ924sXozUpjKohfGtdG7Cs5b4FabX
JSm6uYOjLRL4EQ5xEJhF869ZVXxkiyg+3R6qUAs5NvjVridLFpIewGMzr+NOWXD/
i8DTeBddY9tsdl17fQnOEDRb+rDKpBMteyf2Wt5IbRFmFCgNawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGagqQax8/81EnnVZYmTldlTNuk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjY0MzkxNGEtMzdjZi0z
NTEyLWI3YzctMzU3YzM5ODRkYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgL9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2iJv1njLU2C8vW3N91Ifbh4mp1eUp8vUKxZhlv9Gurk0rlDgZxhfb6
93Hu1fk2YhFMYFYMXJLPfC4TgKnT2RrkIMivvJowmuB+xKL2mrQqvh0MSlRz4E5q
Ubd8Z08pPqDqjGkqJ6x6E/nQj42p47T/sPsz0lE5ihYLQ2v9RW9jJ2T+iaQHNPCP
xc95WcCe5RyKDIkJfIAagbCVIUXNf5T2t2gznb4AJrbGn4tFwtaFDXPmJad7Lbi6
+tLAHTctxADQDnsi8+g2DEF3wg4Euq+mlpJjJIlMh3Kd2/ZlIRttCCjQAVqhAc8t
jEo0P0sKHGdBT3bKR+ZUHxEu/KHLyxc=
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:03:17 2026 by rpki-client