Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa
File:                     975b438c-433c-35cf-b0c2-2a245df4002d.roa (raw, json)
Hash identifier:          pnDC6VF72i5WQ+FYj6lNi3i1JEwitCiLnr2FI8rQYDs=
Subject key identifier:   CC:09:1D:35:A2:BC:BB:DA:9B:07:D4:80:45:26:D6:75:11:59:C3:81
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F549D4A78076BD6A158A16980
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        50.3.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4a:78:07:6b:d6:a1:58:a1:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=2c878408-4eff-4802-b969-d6069d4a04c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:98:67:34:c8:48:09:46:47:a3:5f:c6:10:
                    35:a7:2d:dc:63:b5:00:93:25:64:3b:2c:f2:41:0d:
                    9c:11:e6:0e:81:19:e7:a8:93:97:11:9c:01:a8:b9:
                    f5:dd:98:10:86:f5:88:24:1a:b1:4d:e3:46:ba:cf:
                    29:6a:ba:96:3f:62:21:48:9e:99:2e:97:a9:de:e0:
                    d0:e7:ba:d3:1f:0c:e8:25:4d:31:08:f5:0e:79:40:
                    75:11:c6:8b:35:6b:b1:74:d7:9c:a9:e2:2c:c8:b6:
                    8d:c2:d6:c2:fd:30:fe:3c:37:fd:3a:7f:f7:cd:5a:
                    18:e5:62:46:61:56:8f:ed:47:97:76:8c:91:30:86:
                    5d:67:a1:89:88:88:1d:32:e0:14:b4:db:6f:84:a4:
                    d3:2a:d8:11:83:0b:10:08:d0:b5:99:95:7c:f3:68:
                    47:99:a2:a0:f2:65:f1:3c:54:0c:70:92:ad:8a:92:
                    56:26:89:c4:49:32:5a:60:65:0b:90:89:33:59:ce:
                    2e:b8:e5:e2:de:f4:20:be:ca:e1:d6:0f:b5:03:55:
                    8a:94:e9:47:29:0b:3d:ec:2d:b6:25:b6:9d:34:dd:
                    29:02:4d:65:ec:68:5a:74:b9:99:07:0f:04:12:ff:
                    54:db:e1:f4:c0:bf:f8:64:60:e1:db:45:6d:f8:be:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:09:1D:35:A2:BC:BB:DA:9B:07:D4:80:45:26:D6:75:11:59:C3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/975b438c-433c-35cf-b0c2-2a245df4002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:fb:0b:ac:3a:11:a6:a1:98:b0:7a:97:28:40:1a:7f:25:
         1b:66:b4:b6:aa:cd:b2:f9:7c:81:cf:fc:9a:66:83:11:64:d4:
         7b:81:ee:8d:20:d0:44:c0:0e:85:33:ab:35:ac:8f:6b:37:00:
         03:46:fc:c6:30:09:39:06:b7:18:e0:1a:ac:e8:42:f0:b0:fe:
         93:49:fa:b7:7b:8d:9f:47:9c:4b:d9:97:66:92:f5:72:76:92:
         6f:a2:f9:31:4d:c6:c0:6c:51:10:12:68:61:87:78:3c:95:3b:
         16:7e:b6:bc:a7:b4:ea:9a:01:31:cc:73:e8:1a:fe:63:e1:81:
         88:75:35:1e:43:d5:67:f9:31:35:0a:e5:8b:95:d4:0b:76:32:
         53:9e:7a:1d:27:f4:60:b1:75:fc:3e:65:84:50:31:56:3b:43:
         e1:f0:da:b0:a1:5c:48:2b:9a:6e:3b:17:08:a5:36:54:a3:fa:
         ec:97:85:b3:d5:dd:28:7e:bb:7c:03:bb:33:a8:aa:6b:dd:37:
         70:01:8e:60:d8:15:02:bb:15:51:ab:91:b9:29:bb:97:d3:df:
         da:30:1d:8f:f8:32:f3:df:45:74:e3:f1:f9:0e:ac:3c:29:67:
         27:e2:09:3d:8f:25:49:6a:60:3a:0f:23:bb:95:1d:c4:60:e7:
         30:88:c7:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUp4B2vWoVihaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MmM4Nzg0MDgtNGVmZi00ODAyLWI5NjktZDYwNjlkNGEwNGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqGYZzTISAlGR6NfxhA1py3cY7UAkyVkOyzy
QQ2cEeYOgRnnqJOXEZwBqLn13ZgQhvWIJBqxTeNGus8parqWP2IhSJ6ZLpep3uDQ
57rTHwzoJU0xCPUOeUB1EcaLNWuxdNecqeIsyLaNwtbC/TD+PDf9On/3zVoY5WJG
YVaP7UeXdoyRMIZdZ6GJiIgdMuAUtNtvhKTTKtgRgwsQCNC1mZV882hHmaKg8mXx
PFQMcJKtipJWJonESTJaYGULkIkzWc4uuOXi3vQgvsrh1g+1A1WKlOlHKQs97C22
JbadNN0pAk1l7GhadLmZBw8EEv9U2+H0wL/4ZGDh20Vt+L6VyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwJHTWivLvamwfUgEUm1nURWcOBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTc1YjQzOGMtNDMzYy0z
NWNmLWIwYzItMmEyNDVkZjQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbv+wusOhGmoZiwepcoQBp/JRtmtLaqzbL5fIHP/JpmgxFk1HuB7o0g
0ETADoUzqzWsj2s3AANG/MYwCTkGtxjgGqzoQvCw/pNJ+rd7jZ9HnEvZl2aS9XJ2
km+i+TFNxsBsURASaGGHeDyVOxZ+tryntOqaATHMc+ga/mPhgYh1NR5D1Wf5MTUK
5YuV1At2MlOeeh0n9GCxdfw+ZYRQMVY7Q+Hw2rChXEgrmm47FwilNlSj+uyXhbPV
3Sh+u3wDuzOoqmvdN3ABjmDYFQK7FVGrkbkpu5fT39owHY/4MvPfRXTj8fkOrDwp
ZyfiCT2PJUlqYDoPI7uVHcRg5zCIxxc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:15:56 2026 by rpki-client