Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c1cf83d-f24c-3bc4-b582-b717bc6f4c85.roa
File:                     6c1cf83d-f24c-3bc4-b582-b717bc6f4c85.roa (raw, json)
Hash identifier:          1qisTaJXm+Dv1ePnWZldW1h5gCmQDBCB77R3vQ/Tg0c=
Subject key identifier:   49:E0:04:12:46:E3:A0:16:B5:36:12:59:E7:FB:5D:DD:D9:42:C4:7C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC795B5C0C2FF185879A700
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c1cf83d-f24c-3bc4-b582-b717bc6f4c85.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.3.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:95:b5:c0:c2:ff:18:58:79:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=fe9208bf-b19a-471f-862f-d5388f16a45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:81:40:43:ef:07:53:43:de:e7:4b:b7:e2:
                    d7:13:95:e5:d0:44:c6:da:d4:4d:b6:98:c2:92:ee:
                    fd:c2:af:2d:85:a9:b0:9b:21:c6:e1:13:7f:1e:49:
                    23:6f:f6:89:1f:fa:2b:c4:f5:40:78:73:7c:38:31:
                    47:f4:c3:12:9e:96:57:f0:0a:e2:d9:a9:d1:5a:5d:
                    33:01:c9:ef:81:ed:71:17:0c:81:7d:36:ff:83:5d:
                    34:9d:a9:61:89:df:57:ea:b6:d9:08:bf:f6:47:3b:
                    a6:44:69:d5:dd:c9:12:00:fe:43:fc:01:46:e1:e9:
                    d0:a0:28:fa:20:23:b5:8b:0f:6e:21:1f:27:56:2a:
                    13:6f:55:84:7b:fc:ac:a1:16:0a:b6:d2:6e:71:74:
                    e2:c7:87:e9:75:60:5e:0c:0d:79:68:95:3b:43:5e:
                    e1:d3:8f:3b:f2:da:3b:9c:a3:eb:51:a4:67:ac:fe:
                    7e:07:4b:3c:1e:c3:1f:9f:bc:41:82:f6:fd:a5:d7:
                    dc:f6:89:bc:2a:26:6d:f1:43:93:76:66:b8:36:3a:
                    0a:b0:e8:2d:eb:d0:83:9f:00:78:fe:59:fe:ff:b0:
                    f2:7b:06:e0:c9:e0:9e:29:70:88:7d:8a:fe:93:16:
                    a5:2a:f0:19:37:72:6a:97:33:6a:4f:ce:e3:d8:72:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E0:04:12:46:E3:A0:16:B5:36:12:59:E7:FB:5D:DD:D9:42:C4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c1cf83d-f24c-3bc4-b582-b717bc6f4c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:6b:21:07:9c:d8:67:0a:b1:f4:e9:43:c5:7d:ea:6f:63:
         8b:a3:a3:13:e5:89:fb:d6:d5:fb:ce:9c:df:24:ad:5c:8c:26:
         27:31:ae:17:9c:77:28:a6:2d:9e:d9:15:a7:bf:0b:b9:43:8c:
         23:6f:49:bc:8b:21:cf:af:3b:0c:4c:53:79:1d:00:a6:79:6b:
         f2:08:d6:c0:1b:6d:4a:c2:b5:80:fc:e6:ad:16:93:75:d6:cd:
         4b:02:e8:90:70:e0:7e:62:0b:f8:2b:2d:0a:6a:9a:bb:ae:9c:
         67:3b:1a:f3:08:f5:ab:eb:69:76:b2:c8:b9:7a:8e:68:e5:8a:
         84:ce:0c:d4:a1:7d:71:c0:d5:12:b8:ea:95:d0:ac:2c:77:0b:
         e0:40:4e:12:7a:10:83:d6:2a:f8:b9:48:20:64:42:a4:b0:43:
         96:f8:e6:ed:bf:23:e3:ed:52:f5:73:8c:60:71:fb:54:9a:11:
         72:cf:54:c8:bd:01:80:f2:84:d8:e2:4b:d1:e8:24:79:79:e9:
         ab:fa:00:49:da:a9:81:16:81:ec:63:96:3f:f8:d7:4c:73:ed:
         78:09:68:aa:87:86:f9:88:90:c5:01:c6:88:eb:9d:c4:f9:de:
         51:8c:c1:84:35:35:d3:df:87:52:d6:7a:c6:78:9b:67:58:37:
         77:ab:55:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5W1wML/GFh5pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
ZmU5MjA4YmYtYjE5YS00NzFmLTg2MmYtZDUzODhmMTZhNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkyBQEPvB1ND3udLt+LXE5Xl0ETG2tRNtpjC
ku79wq8thamwmyHG4RN/Hkkjb/aJH/orxPVAeHN8ODFH9MMSnpZX8Ari2anRWl0z
Acnvge1xFwyBfTb/g100nalhid9X6rbZCL/2RzumRGnV3ckSAP5D/AFG4enQoCj6
ICO1iw9uIR8nVioTb1WEe/ysoRYKttJucXTix4fpdWBeDA15aJU7Q17h04878to7
nKPrUaRnrP5+B0s8HsMfn7xBgvb9pdfc9om8KiZt8UOTdma4NjoKsOgt69CDnwB4
/ln+/7DyewbgyeCeKXCIfYr+kxalKvAZN3JqlzNqT87j2HLHYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEngBBJG46AWtTYSWef7Xd3ZQsR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNmMxY2Y4M2QtZjI0Yy0z
YmM0LWI1ODItYjcxN2JjNmY0Yzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5kayEHnNhnCrH06UPFfepvY4ujoxPlifvW1fvOnN8krVyMJicxrhec
dyimLZ7ZFae/C7lDjCNvSbyLIc+vOwxMU3kdAKZ5a/II1sAbbUrCtYD85q0Wk3XW
zUsC6JBw4H5iC/grLQpqmruunGc7GvMI9avraXayyLl6jmjlioTODNShfXHA1RK4
6pXQrCx3C+BAThJ6EIPWKvi5SCBkQqSwQ5b45u2/I+PtUvVzjGBx+1SaEXLPVMi9
AYDyhNjiS9HoJHl56av6AEnaqYEWgexjlj/410xz7XgJaKqHhvmIkMUBxojrncT5
3lGMwYQ1NdPfh1LWesZ4m2dYN3erVR4=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:59:50 2026 by rpki-client