Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69cb7f83-1b16-3408-af04-357fe04f565c.roa
File:                     69cb7f83-1b16-3408-af04-357fe04f565c.roa (raw, json)
Hash identifier:          9PeQPNLUrzmfeR1hIWKdryR2vPinNN2iQ6rJVIDYPxM=
Subject key identifier:   C8:09:55:40:96:86:58:54:D5:B0:EA:0E:C2:C7:D6:3E:FC:1E:75:93
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981BB7CBAFC01825EC8ABC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69cb7f83-1b16-3408-af04-357fe04f565c.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        50.2.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:bb:7c:ba:fc:01:82:5e:c8:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=d9c93b55-28a1-45a8-840f-cd0fddb722ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d3:70:a8:6c:98:4e:fa:62:20:87:fd:d7:f3:
                    06:ff:c5:51:aa:67:fb:24:fc:dd:70:e4:9e:c0:a4:
                    4b:37:b5:13:9c:0c:56:f9:a7:9f:2b:56:ce:fe:b2:
                    39:0b:4c:c1:5d:a6:b4:eb:57:e7:a4:17:e5:fb:8d:
                    02:e3:a1:a8:e6:93:d1:21:6b:10:2c:41:ff:74:7d:
                    c1:ec:bb:54:6c:17:7a:d6:3c:16:1d:b9:a4:c1:af:
                    f4:d5:dc:58:e1:a6:c1:22:fd:9d:b5:1b:60:5d:3a:
                    40:77:52:a5:47:9f:ee:b3:96:64:b6:db:98:12:2b:
                    fa:96:4d:1a:c1:d5:55:3b:a4:36:6e:0b:d5:30:46:
                    f1:19:6e:31:cd:aa:18:1e:87:5e:56:cc:79:44:b9:
                    2b:10:d2:ec:1c:45:94:63:61:b7:3e:3d:63:fa:be:
                    2c:61:94:51:aa:84:b2:ba:a0:17:67:4f:a5:ba:7f:
                    a4:fc:21:82:09:c0:1f:54:a1:28:7f:d7:38:c3:46:
                    96:63:dc:64:26:10:1d:74:91:7b:d3:0f:69:70:e0:
                    51:68:5c:8b:84:8a:1b:5f:c8:23:c5:69:85:a4:7e:
                    b4:f3:b2:1d:17:7b:72:d9:b2:10:8d:b9:b9:24:db:
                    20:37:72:0b:4b:0f:47:96:09:ed:a3:9c:48:21:de:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:55:40:96:86:58:54:D5:B0:EA:0E:C2:C7:D6:3E:FC:1E:75:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69cb7f83-1b16-3408-af04-357fe04f565c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:b5:a2:f0:dc:37:ec:a7:a8:86:80:15:b5:d4:e7:ec:cf:
         fe:1c:73:a5:9e:a2:16:64:46:28:da:66:70:cb:50:a7:ec:11:
         27:c0:fb:bc:e7:84:9f:c5:4a:df:0b:87:18:5e:99:e8:f5:c9:
         51:1a:a8:8d:c5:0f:b1:06:e1:f6:7b:c2:dc:fa:24:09:88:6f:
         15:18:fd:ad:03:a1:46:e8:28:97:62:39:f6:cd:14:f2:fe:da:
         0d:6d:0f:01:71:89:11:7d:eb:21:ec:b0:d3:38:fe:d4:26:27:
         d0:5e:7a:bd:f5:49:fd:20:19:74:af:ee:39:38:53:d0:47:dd:
         95:bc:0a:ab:16:6e:21:2f:c7:0c:93:a7:70:f5:95:6a:d8:3a:
         d4:01:ff:37:2a:47:f1:48:92:05:07:a6:e5:93:b5:f1:e8:34:
         93:61:58:dd:8e:32:34:31:4b:ab:48:cd:9c:e5:f5:bf:0f:3f:
         7a:ca:1c:90:7f:54:03:e0:42:e1:c7:55:82:55:81:3d:e7:06:
         5c:14:53:27:e0:7e:53:50:bc:39:16:79:a6:5f:91:6c:6d:81:
         51:60:a1:8a:21:be:2b:79:50:b6:8d:6f:59:87:cc:63:64:83:
         38:b1:9d:fb:f2:d7:9a:ed:33:3b:87:2e:12:cb:4f:1d:e4:bd:
         34:33:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:23 2026 by rpki-client