Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa
File:                     fbf68507-e65e-33c1-912b-ad378e9a812a.roa (raw, json)
Hash identifier:          EX0Ug2+HC3n1XPQay2Jb3BtN4Z6NfTCiWAb0kqQ+v7Y=
Subject key identifier:   02:76:6B:86:32:0A:91:0B:B5:5E:45:FF:F1:EE:8A:2B:46:73:4B:18
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F549DADDE49A0425E7552F600
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        50.2.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ad:de:49:a0:42:5e:75:52:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=2f8c2932-9973-430c-a8cb-ebbd9515e5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:ca:7e:e3:c4:6d:47:06:66:8a:d0:86:df:
                    f1:2d:af:56:e7:15:0a:76:ca:2d:c6:7e:f6:0d:5b:
                    b5:67:1c:91:0a:4c:2a:c0:6b:b3:98:71:01:c7:da:
                    0d:18:56:b4:65:56:98:4c:79:30:0c:9b:37:a6:e3:
                    91:4e:ec:ba:c1:ad:59:44:37:f1:63:0d:a9:b8:a8:
                    cb:e1:30:d1:7d:bf:59:ee:06:78:fd:2b:fa:cb:6b:
                    b2:8b:cd:f8:11:2a:9c:09:a9:10:85:1e:48:6f:79:
                    90:fe:8d:9d:7d:2b:30:46:5d:43:6b:9a:77:29:32:
                    20:7b:07:d6:56:68:64:36:ee:66:25:f9:66:36:96:
                    81:96:75:72:46:c1:c0:74:60:41:30:83:d2:41:cf:
                    e1:9b:a3:bc:6c:56:ef:12:2b:0f:1c:c4:7b:6a:b9:
                    c1:dc:90:7c:71:5b:68:d6:3f:80:d2:bc:1a:aa:4f:
                    1a:28:66:11:9a:3e:9e:5a:d7:bd:d3:6d:76:21:e5:
                    fd:f3:ad:f9:9b:60:4c:dc:06:3f:06:07:b3:1f:59:
                    1b:45:8f:0c:ee:5e:15:85:45:42:dc:a2:55:8f:d2:
                    5c:59:b4:20:a4:34:02:d8:71:59:5d:32:e2:b9:18:
                    d6:4d:8e:b6:55:23:87:cf:61:dc:7f:a3:ed:0e:a8:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:6B:86:32:0A:91:0B:B5:5E:45:FF:F1:EE:8A:2B:46:73:4B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fbf68507-e65e-33c1-912b-ad378e9a812a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:40:b2:3b:e5:b7:0c:a5:31:39:05:f0:8e:22:88:95:0f:
         aa:eb:a5:a8:fa:32:bc:08:96:c3:3d:4f:b1:a3:e3:07:09:48:
         60:2a:04:2a:b2:67:a1:10:90:dd:7e:a1:f8:12:80:63:82:15:
         7d:f9:03:d7:f4:06:0b:d5:b1:aa:b1:01:d2:72:0e:43:e3:4c:
         94:0c:93:22:08:9b:30:0d:93:a2:f6:87:e5:5e:46:ce:f1:5a:
         cf:65:e9:74:a7:39:bc:12:d1:88:f6:85:26:25:81:c3:b0:07:
         ee:c1:e7:d7:1a:45:47:e8:a6:80:92:e8:40:01:62:4a:50:a5:
         80:06:be:09:bd:26:a8:f0:a7:c0:03:fe:97:ec:0b:51:ba:46:
         fd:21:c0:5a:a9:39:43:3d:09:b2:94:cd:50:55:3d:89:a6:1a:
         f2:20:d4:53:a3:97:f3:96:2e:44:bb:9a:5b:85:49:46:6c:52:
         7f:15:40:a4:e2:3d:0c:8d:5c:32:ff:7f:15:3e:18:c2:0c:d4:
         4c:7e:6f:81:a7:9c:bf:a1:53:b2:02:b6:67:e8:ce:f0:e3:7b:
         60:eb:6e:a8:15:2c:93:47:02:fa:ed:7f:03:81:26:a7:1d:22:
         81:06:49:7f:83:2a:37:ea:52:b1:fe:b9:79:16:7d:c0:0c:58:
         45:03:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:10:26 2026 by rpki-client