Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa
File:                     d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa (raw, json)
Hash identifier:          ZYx2aH7Ib+kgrvvaEFsTzh0IJg5iC/c+J1f9t7XQDI0=
Subject key identifier:   7F:3A:E4:91:D9:29:B1:F7:80:ED:96:9C:46:20:9C:01:28:96:60:49
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D7A05264FA4FFD9D1DC434240
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        50.2.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:26:4f:a4:ff:d9:d1:dc:43:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=3fd33aa9-8ff5-4b69-9e5f-8fb01bf8f96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:f2:01:35:0e:45:f6:da:25:31:68:8a:f5:
                    dc:33:30:31:eb:58:89:f5:4f:46:6c:49:be:26:ba:
                    3f:88:b9:06:b0:c5:e2:4e:0e:dc:61:df:ee:1a:e4:
                    0e:6c:6f:b9:e3:ae:3b:4f:84:2b:b1:5e:3d:bd:64:
                    6c:41:f3:ee:04:82:27:db:a1:a8:8b:be:ae:a3:ca:
                    e9:53:a5:e9:cb:61:f1:09:16:9c:48:aa:7f:04:96:
                    60:fd:79:bd:ba:c6:41:e7:4a:68:bd:c0:0a:36:93:
                    0b:d6:e1:d1:fe:4e:3d:b3:43:23:91:27:59:99:47:
                    6b:4a:b3:50:bc:71:ec:19:7d:57:d1:73:0d:f9:2b:
                    6e:7d:16:d2:25:92:50:75:4d:37:35:cc:17:cc:69:
                    6d:d4:0e:3c:ca:95:32:98:fc:23:41:f5:00:93:e0:
                    97:c8:61:18:a4:e0:67:27:ec:c2:5e:31:4e:84:4a:
                    b6:cb:5c:cb:48:c7:c1:4f:7e:a9:d0:51:73:e4:b7:
                    0b:4d:36:67:af:e5:8c:d1:dc:f1:9a:0f:66:5d:b5:
                    cf:d6:67:51:9d:35:3b:e8:08:9e:2d:eb:bd:dc:19:
                    9a:67:1c:5a:30:a4:69:ee:7b:fe:eb:1c:70:fb:be:
                    a0:72:17:5c:ac:3f:f2:10:f6:b9:ba:83:03:f5:cb:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:E4:91:D9:29:B1:F7:80:ED:96:9C:46:20:9C:01:28:96:60:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9c2660e-e94f-3e3c-bab7-8cfdeddf5121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:45:73:30:2b:7c:04:9b:73:24:7e:b0:81:8b:ab:91:79:
         18:ef:f4:45:19:04:1a:69:a2:17:21:f4:12:e8:a4:77:29:4d:
         6f:6b:a8:94:01:ef:b9:76:a9:14:91:16:c3:37:fe:49:4d:89:
         97:ac:1d:b5:6e:a2:29:2b:1c:d9:08:5e:31:c9:4f:8d:7f:f2:
         1a:93:9c:09:75:8a:9a:d4:a4:ee:44:ff:70:c9:0e:0a:f0:ce:
         42:bf:79:e6:88:6b:87:7f:23:41:92:1d:db:38:04:1c:8f:b0:
         75:84:17:84:81:47:35:78:73:45:06:13:b5:58:28:62:5d:ec:
         06:fb:ef:f0:82:bd:57:c6:3b:32:42:0f:96:3a:f4:3b:51:37:
         fc:a6:f2:ba:43:60:72:32:2c:6a:b8:5b:d7:f8:52:7e:67:9e:
         b7:60:ce:9f:d8:71:aa:00:73:85:8b:e5:fa:2d:29:dc:71:08:
         d9:44:84:4a:f9:e8:5b:e3:c4:e1:e3:84:f1:2f:14:89:d9:d5:
         92:e5:b9:b1:d3:16:8a:9c:c3:ad:67:37:e1:d8:e1:84:fa:2b:
         fd:e4:4a:9d:70:fd:46:7d:63:80:d0:9f:a2:f1:ef:96:a8:13:
         15:7b:46:fa:92:f4:7e:0c:04:d1:04:22:b6:73:a6:67:28:e0:
         fb:4d:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:16 2026 by rpki-client