Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f47c3bb2-9120-33d7-8f86-c2d81420a4e5.roa
File:                     f47c3bb2-9120-33d7-8f86-c2d81420a4e5.roa (raw, json)
Hash identifier:          dTZLXw45HuSOd5o9TYHMIdtLqKF12P4V4+ErAVeopvc=
Subject key identifier:   AC:14:F6:12:0E:D8:91:38:B5:0D:6D:CA:B1:6A:99:E8:21:EE:75:02
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7BFF27C4760B6F0B0F040
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f47c3bb2-9120-33d7-8f86-c2d81420a4e5.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.2.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:bf:f2:7c:47:60:b6:f0:b0:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=d909c208-d0e1-4a2c-bdc6-6f8913a93ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:07:9d:22:0d:eb:6a:ad:73:72:11:eb:3b:
                    89:0c:0b:bb:ef:29:c1:3f:69:78:8d:2b:c9:74:4b:
                    fb:87:cb:7b:4d:a7:13:59:e8:a9:8f:89:8d:c8:0b:
                    66:9d:8d:af:ed:ec:ea:63:b6:dc:9d:57:e9:2c:b1:
                    f6:a8:e9:f6:18:68:20:30:ca:d8:71:45:2d:92:95:
                    d9:69:97:d9:c8:c6:43:40:bc:80:84:7a:d6:e2:ee:
                    cc:28:e1:f1:52:09:64:47:a8:9f:af:a0:31:d6:72:
                    aa:e2:42:b6:af:4a:05:f6:3a:ff:ee:a0:11:75:23:
                    c9:e1:f1:2d:a2:fb:a7:c6:45:b6:cc:3d:ca:5d:05:
                    ae:60:33:19:96:87:e8:13:a5:e1:d0:96:c9:04:29:
                    84:c9:fd:3a:00:5b:06:81:78:f7:ed:67:10:55:38:
                    e5:1c:ec:f0:c7:66:f6:f1:dc:d4:9d:95:25:6f:33:
                    e2:66:20:85:e8:2d:eb:cf:ce:dc:43:e0:a0:01:28:
                    cb:78:eb:b3:11:22:63:91:63:89:cf:51:00:ae:9c:
                    a9:17:e5:ef:98:96:21:bf:2f:c7:9f:e6:44:f1:03:
                    7a:77:c7:91:7b:df:8b:31:30:c4:c1:74:d7:a2:0b:
                    49:28:b6:e3:97:6a:35:a5:e4:21:ed:08:1e:87:67:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:14:F6:12:0E:D8:91:38:B5:0D:6D:CA:B1:6A:99:E8:21:EE:75:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f47c3bb2-9120-33d7-8f86-c2d81420a4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:27:11:a7:0d:f5:fb:d4:c6:1c:b1:eb:b6:0d:98:21:e8:
         c4:a2:ad:a1:47:e1:e7:09:72:ae:f1:2f:e3:de:b3:a9:97:27:
         2e:0d:98:52:c5:64:8d:4d:72:90:ef:19:0a:66:1b:d5:31:c2:
         aa:70:54:1f:d3:47:78:ec:23:5a:41:49:ba:0e:d2:5e:07:8a:
         61:35:40:70:a3:b0:63:d2:c4:ba:a9:75:35:af:ed:b8:d3:c1:
         57:7f:b3:9b:81:fc:bb:13:6d:55:06:6b:3a:01:63:2b:24:e4:
         2c:15:be:78:46:ea:f2:b3:b3:f3:57:ef:13:7d:86:cb:8d:3c:
         e5:1e:f0:96:b9:b8:ca:cf:4b:20:14:7e:b1:cb:a2:53:63:17:
         2b:75:f8:cd:d2:6a:70:70:35:6b:05:f1:b9:76:f7:2e:8d:73:
         c8:15:d2:90:35:2d:6b:81:af:bb:31:d2:0e:c7:f1:1b:62:f1:
         c2:53:c1:bb:ff:a5:71:93:b1:45:9f:2a:9f:ce:f5:78:6c:a8:
         ee:23:6f:68:8c:d8:87:3e:66:1a:a7:07:cf:d2:49:dd:ba:6b:
         e1:d5:5e:e3:83:a5:a7:66:9d:ed:50:42:4a:28:fc:ce:82:69:
         e3:fe:76:42:90:66:ea:f9:19:e0:9d:fa:82:1d:2a:1f:db:9f:
         e3:62:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:54:53 2026 by rpki-client