Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/310e6392-52ab-3289-8938-a3c9c01bbdd4.roa
File:                     310e6392-52ab-3289-8938-a3c9c01bbdd4.roa (raw, json)
Hash identifier:          4XTIcvPV/pVtsUmBhRqN3T5g8i36zvxpscsUSX5b5h0=
Subject key identifier:   E8:2B:2F:3C:94:80:D0:08:CC:F4:2C:C3:C1:E0:53:21:D6:4D:02:11
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981BB4799F7961E7F0C8A40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/310e6392-52ab-3289-8938-a3c9c01bbdd4.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        50.2.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:bb:47:99:f7:96:1e:7f:0c:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=a39e97a7-177a-4b7d-acbb-1d9875d8bb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:92:31:6c:06:1f:26:bb:29:86:fc:cf:c9:
                    32:93:d2:52:14:c4:54:92:56:d9:02:ec:da:f8:1d:
                    6c:da:ab:d9:b5:53:88:cc:64:b5:e7:c2:04:64:25:
                    2f:d4:26:5b:83:95:f5:43:ea:1d:c1:2b:57:89:df:
                    d8:e5:c1:7c:b5:cb:89:98:d7:90:15:2b:ac:45:14:
                    bf:fd:46:8f:ca:a7:52:43:62:1d:4b:84:5d:d1:be:
                    d1:a1:ee:10:d4:e3:13:c1:49:b2:2d:53:3f:91:2e:
                    74:21:21:8f:c8:f2:f2:bd:75:88:d0:46:7d:1c:41:
                    42:62:bb:96:f2:4e:89:34:2e:89:72:ab:22:56:33:
                    0b:42:45:a6:b7:10:25:e2:9a:f2:94:1f:1b:8e:ec:
                    5b:41:3a:84:52:f1:49:1b:fb:8a:e9:d3:55:79:ad:
                    67:2c:a4:ee:16:7b:1e:38:e9:72:56:f7:19:d5:48:
                    8c:2e:40:c3:88:af:fe:cd:72:01:ed:5e:62:42:f5:
                    84:72:1d:b6:1d:7c:72:31:b9:3b:0c:15:e2:30:20:
                    ec:15:19:63:99:e7:0f:96:34:f9:a9:2c:86:af:ce:
                    1e:0b:21:6f:d3:2e:77:b2:23:2a:02:66:a9:a7:e8:
                    01:41:3f:75:00:ca:aa:4d:d9:7a:82:0b:b2:71:b7:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2B:2F:3C:94:80:D0:08:CC:F4:2C:C3:C1:E0:53:21:D6:4D:02:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/310e6392-52ab-3289-8938-a3c9c01bbdd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:3a:a8:dc:49:90:fd:52:0e:44:3e:f6:97:e1:c4:b2:d5:
         ad:ec:e2:41:5d:a9:8c:d8:8a:9a:78:18:4f:94:10:b3:0a:75:
         1c:5a:ca:9f:3b:61:dc:c6:ba:60:3e:bd:a5:b7:ee:98:0c:14:
         ff:7d:9a:cb:af:99:b5:9a:89:d1:55:24:56:c7:80:3f:bf:78:
         27:64:6c:9a:0a:bf:ad:92:42:3d:f2:16:16:cf:86:e1:cb:d8:
         c8:f3:87:33:71:83:37:24:5d:8c:bd:03:15:6c:0b:e8:07:a2:
         54:d5:1d:81:a3:29:f6:91:4d:64:a1:6d:c6:2e:70:91:1a:e2:
         59:3d:04:32:15:5d:13:e2:31:90:a4:1f:ac:fd:ef:02:94:aa:
         76:da:36:50:30:6d:69:5f:57:32:1a:1a:6d:71:60:29:60:8f:
         3b:80:be:18:4a:6f:cc:d5:31:fa:65:65:23:56:9c:9a:78:0d:
         15:50:58:8d:eb:d9:d3:52:a4:d0:0f:ad:a6:87:5b:ac:14:90:
         94:a4:2a:00:33:26:21:3e:ef:b0:57:36:6a:2e:fa:a1:f4:07:
         79:7a:82:d5:da:40:ea:97:e1:da:7a:b8:8b:c1:b6:6e:a6:b5:
         6d:04:cb:df:59:ac:51:8f:32:84:a7:da:91:49:e7:ea:d6:63:
         6b:87:d2:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gbtHmfeWHn8MikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
YTM5ZTk3YTctMTc3YS00YjdkLWFjYmItMWQ5ODc1ZDhiYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHmSMWwGHya7KYb8z8kyk9JSFMRUklbZAuza
+B1s2qvZtVOIzGS158IEZCUv1CZbg5X1Q+odwStXid/Y5cF8tcuJmNeQFSusRRS/
/UaPyqdSQ2IdS4Rd0b7Roe4Q1OMTwUmyLVM/kS50ISGPyPLyvXWI0EZ9HEFCYruW
8k6JNC6JcqsiVjMLQkWmtxAl4prylB8bjuxbQTqEUvFJG/uK6dNVea1nLKTuFnse
OOlyVvcZ1UiMLkDDiK/+zXIB7V5iQvWEch22HXxyMbk7DBXiMCDsFRljmecPljT5
qSyGr84eCyFv0y53siMqAmapp+gBQT91AMqqTdl6gguycbcQiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgrLzyUgNAIzPQsw8HgUyHWTQIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzEwZTYzOTItNTJhYi0z
Mjg5LTg5MzgtYTNjOWMwMWJiZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMgIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl8OqjcSZD9Ug5EPvaX4cSy1a3s4kFdqYzYipp4GE+UELMKdRxayp87
YdzGumA+vaW37pgMFP99msuvmbWaidFVJFbHgD+/eCdkbJoKv62SQj3yFhbPhuHL
2MjzhzNxgzckXYy9AxVsC+gHolTVHYGjKfaRTWShbcYucJEa4lk9BDIVXRPiMZCk
H6z97wKUqnbaNlAwbWlfVzIaGm1xYClgjzuAvhhKb8zVMfplZSNWnJp4DRVQWI3r
2dNSpNAPraaHW6wUkJSkKgAzJiE+77BXNmou+qH0B3l6gtXaQOqX4dp6uIvBtm6m
tW0Ey99ZrFGPMoSn2pFJ5+rWY2uH0iI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:23 2026 by rpki-client