Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa
File:                     fbf68507-e65e-33c1-912b-ad378e9a812a.roa (raw, json)
Hash identifier:          LpsOYuwiTSlbh28BNMxPKT0Q3Vv+FEfyUhlENzOPxPI=
Subject key identifier:   8D:CD:FA:6D:C3:CB:07:B6:13:C0:4C:69:62:CC:60:E2:1B:DB:3F:E3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D300A43C6E0D5AD7BDB58D500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     174
IP address blocks:        50.2.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:43:c6:e0:d5:ad:7b:db:58:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=7ec9cb3e-1c40-440f-b497-b1c8d377c999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:a6:f6:ca:6e:31:79:a2:80:e7:ba:77:13:
                    cd:e9:e2:e3:ff:2f:4d:a8:e7:08:22:8f:0b:fe:ae:
                    6c:be:74:4b:de:08:0a:5a:9a:c8:4c:ef:01:ad:7c:
                    d7:0e:2c:72:22:e7:7a:02:f7:63:00:b7:98:32:99:
                    f2:61:a1:64:86:13:d5:c4:be:8f:c9:1b:77:fb:ff:
                    35:f9:59:bf:16:56:06:36:1a:eb:42:78:ba:e3:53:
                    02:10:5e:81:f3:7d:3d:ce:72:1d:f7:78:9d:ea:09:
                    43:61:d0:86:50:e4:66:a0:62:ff:67:2c:60:84:d0:
                    2c:e3:3b:ae:ee:f3:8a:cf:f5:10:b2:bb:f6:da:bf:
                    dc:1b:b6:07:b3:c5:c0:ec:10:cf:e8:db:64:0a:c3:
                    75:74:5e:a0:34:b4:55:49:89:b0:aa:a3:1a:dc:86:
                    16:be:8e:c2:77:b4:11:63:fb:4a:e9:7c:ec:6b:20:
                    11:db:92:fe:2f:8c:1e:91:37:e0:89:15:69:e5:27:
                    c0:e2:1d:1f:bb:dc:7e:97:8c:45:b0:78:c1:89:ea:
                    1a:00:07:c8:de:28:4c:8e:cd:3e:7d:bd:8e:a5:4f:
                    b3:ba:4e:a4:dd:6f:88:23:18:b0:ad:3b:ed:1b:6f:
                    90:02:7c:ae:a7:7f:9e:d0:8b:d7:0d:9f:67:5e:c1:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:FA:6D:C3:CB:07:B6:13:C0:4C:69:62:CC:60:E2:1B:DB:3F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:70:f8:50:de:91:6c:d0:4c:b4:7d:49:7c:60:1c:9a:f8:a7:
         dd:0e:c0:a2:c5:6d:87:f1:a8:f8:0d:1d:1e:75:65:b2:d0:84:
         ba:6d:51:0b:c9:e7:08:cf:0a:f7:6a:f1:83:05:75:5a:df:dc:
         d5:f6:8e:34:f7:9a:cd:ac:25:a0:67:39:f4:ad:78:dd:c3:05:
         c1:0c:c8:28:59:a5:a3:71:db:31:ea:bd:e2:b2:98:54:7c:97:
         2f:29:69:2b:1c:91:24:8b:a8:a6:f0:ce:eb:e7:ba:7e:4c:96:
         f9:71:de:de:34:24:0e:92:41:d6:95:b6:0f:9f:99:03:9d:c7:
         c2:e9:b8:cf:cb:8b:e3:c2:6f:69:ad:bd:3f:ea:7c:a1:13:de:
         9b:d6:f8:bf:a6:1c:f3:1b:29:e4:b8:1d:b6:79:2c:0c:22:90:
         ba:22:66:e6:95:9a:29:3b:3c:8c:68:9f:75:f9:54:8d:96:3f:
         c8:92:0e:2e:77:ae:5e:77:a5:ca:51:27:c8:e5:ef:d6:4c:05:
         11:bb:53:08:ba:c9:41:d9:64:f2:bd:70:c3:c4:c2:9b:dd:57:
         70:8e:ed:46:fd:30:f1:5c:9c:15:5d:4d:0c:87:4b:97:c2:fa:
         cf:40:55:be:bc:b7:09:ab:c0:f1:de:3a:32:a9:43:46:ce:9d:
         fd:f5:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:16 2026 by rpki-client