Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/29de728f-d6a3-32c2-ba4e-7256cfceb0cf.roa
File:                     29de728f-d6a3-32c2-ba4e-7256cfceb0cf.roa (raw, json)
Hash identifier:          mAu+JPKZ6dFCSGISyIWLiWhpkLLQEQs3A+ONGkFDTHM=
Subject key identifier:   66:9A:A3:11:76:54:E0:DF:D0:AB:55:1F:E5:48:5B:35:FC:32:23:CC
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F23868612468B8F7ED78F8A80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/29de728f-d6a3-32c2-ba4e-7256cfceb0cf.roa
Signing time:             Fri 11 Sep 2026 10:59:47 +0000
ROA not before:           Fri 11 Sep 2026 10:59:47 +0000
ROA not after:            Thu 10 Dec 2026 11:59:47 +0000
asID:                     834
IP address blocks:        50.3.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:86:86:12:46:8b:8f:7e:d7:8f:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 11 10:59:47 2026 GMT
            Not After : Dec 10 11:59:47 2026 GMT
        Subject: CN=94adbe01-a228-413b-804f-6c9c1c66b2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:c5:3d:77:3e:44:e2:61:ed:ae:4c:94:67:
                    aa:66:9f:c8:99:37:1d:5d:b0:38:19:53:38:98:87:
                    d5:10:06:86:8f:c6:50:26:24:1e:49:23:a1:fa:10:
                    c2:49:79:f2:e5:1f:18:e6:54:72:e7:a3:ea:43:a1:
                    ce:b2:3e:e2:77:9d:79:95:2c:21:c3:bf:71:80:ed:
                    f3:cc:7d:c7:4e:42:22:69:6f:98:1f:3b:e2:7f:ef:
                    61:43:ca:81:77:c6:5c:a3:01:99:44:60:a6:bb:26:
                    0f:ab:2f:d4:9c:25:fe:54:3f:cb:ad:b8:3b:0f:75:
                    7d:95:cc:7f:19:1c:e9:38:47:dc:33:2f:f7:8f:f0:
                    69:15:a0:9f:0d:35:3b:96:d4:0c:58:e7:44:9e:78:
                    18:1f:1c:cc:d9:21:c6:f5:62:32:75:df:66:b2:9a:
                    a6:55:c0:91:c9:24:06:e2:7a:32:f9:f3:b5:30:e4:
                    9c:38:5e:24:79:8d:1a:ba:d3:d2:f6:9a:08:ae:50:
                    e6:b9:f2:5b:6d:d8:78:8e:ad:3b:39:d2:98:9a:91:
                    67:9f:45:95:b9:45:cd:a5:b1:4f:d4:92:5f:fc:30:
                    cd:48:53:6b:ef:31:a2:22:20:57:0e:0a:dc:ec:bc:
                    ca:11:0d:e7:24:6a:95:f0:3c:77:67:89:7e:10:ae:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:A3:11:76:54:E0:DF:D0:AB:55:1F:E5:48:5B:35:FC:32:23:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/29de728f-d6a3-32c2-ba4e-7256cfceb0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:52:2e:db:54:ba:b5:54:80:14:62:60:97:ed:aa:a2:98:
         16:3d:6d:16:f5:47:e5:e3:2b:fa:d2:3f:f2:03:0a:96:27:90:
         7c:40:ca:61:ad:6a:66:ee:4b:0f:17:a3:0c:11:b0:4b:0d:65:
         55:22:19:11:fa:dd:12:16:33:e8:c0:de:3c:4f:84:30:1a:85:
         91:66:8d:f7:20:3f:02:4c:65:e9:31:d6:0d:0c:af:a0:fc:f1:
         05:40:0a:f6:77:84:c7:84:64:03:f4:ad:0d:b6:38:86:27:60:
         fb:5c:db:d5:bb:2c:9a:c1:01:65:a6:40:13:04:f2:fa:b6:65:
         df:cc:45:68:37:35:17:39:fb:4f:f3:8d:44:21:f6:f0:bb:09:
         b7:13:99:d8:88:1e:c7:f3:51:b3:3b:d6:68:47:5f:f8:d7:28:
         b3:fa:74:a6:57:69:e4:e3:82:58:f2:61:77:da:a9:37:da:1d:
         65:bd:70:80:88:ee:e5:10:e6:ef:7d:2a:6f:b5:60:0a:75:a8:
         9b:99:bb:9e:f0:aa:83:58:f5:0e:3b:16:bb:6c:6f:b1:d6:0f:
         e7:f2:54:76:5c:b8:c3:8d:71:51:53:7b:fe:07:dd:39:2f:4b:
         3f:73:81:69:69:a2:a5:57:a4:fc:34:a8:1d:35:6f:df:e2:15:
         16:70:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:08 2026 by rpki-client