Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f76aaecc-b97e-34c7-a05b-e98003ec43aa.roa
File:                     f76aaecc-b97e-34c7-a05b-e98003ec43aa.roa (raw, json)
Hash identifier:          DF7BYH9nF+h+/I5k7OhaGLFo4MR0syTRg/OsnGGT0rw=
Subject key identifier:   91:B9:DA:5E:90:D3:16:6C:BC:86:61:0E:02:3E:AF:73:62:C6:CD:D6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7C71D8179810B4ADF3F00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f76aaecc-b97e-34c7-a05b-e98003ec43aa.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.3.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c7:1d:81:79:81:0b:4a:df:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=ecca4536-c066-4876-829e-e0a898d638bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:7c:4e:fa:1d:79:f4:1c:cd:61:be:3e:c0:
                    e0:1c:8a:86:4b:80:59:f4:6d:95:b9:49:a0:cd:6e:
                    70:84:2c:6f:d2:15:49:5e:2e:2a:7c:21:ea:e2:ef:
                    9f:93:7f:8e:68:17:7f:de:8e:ef:14:56:fe:30:2f:
                    44:72:ce:f8:17:09:d4:18:85:5c:52:04:da:ed:15:
                    c9:7a:9f:97:1b:22:d1:10:f6:7a:0e:bc:a4:6e:f1:
                    35:c0:bb:be:85:d0:d6:80:85:7f:e8:af:b9:5a:26:
                    49:77:df:b3:e0:71:6e:ff:cd:11:37:a0:16:51:ab:
                    2d:bf:f3:6d:05:e2:d2:18:dd:a9:1b:3d:03:9c:51:
                    f6:89:25:03:5d:85:79:8d:99:5f:b6:8c:74:e8:e2:
                    46:3a:3f:3f:c0:58:28:d0:79:a7:5c:15:fe:de:d6:
                    31:6d:94:5e:bd:19:5a:9a:b5:b4:c9:51:36:11:7a:
                    42:69:f2:53:76:bc:20:b0:6f:71:ac:32:bb:f3:79:
                    11:72:21:82:0f:82:32:a7:82:14:a7:66:ed:ce:a0:
                    c5:98:48:bf:0e:54:92:b4:22:ca:d4:7d:b3:5d:16:
                    c4:16:c3:fc:92:de:27:ad:59:09:18:54:a5:46:08:
                    3c:e7:b7:7e:e1:6a:3d:d0:0c:28:87:7f:de:4f:80:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:DA:5E:90:D3:16:6C:BC:86:61:0E:02:3E:AF:73:62:C6:CD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f76aaecc-b97e-34c7-a05b-e98003ec43aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:13:99:28:64:88:aa:a4:a0:95:5f:ce:39:17:8c:4c:71:
         fd:b9:2c:0a:ac:31:e8:a7:65:c4:f7:33:18:b7:cb:b4:bb:89:
         eb:50:47:a9:e2:73:a2:1c:78:78:e7:43:43:a2:fe:78:91:25:
         65:dd:43:03:73:b1:3a:bc:51:7f:cf:98:95:c8:96:59:53:a3:
         1c:da:7c:a9:22:46:89:89:e9:59:96:50:08:01:e3:3f:5c:77:
         02:43:65:d5:86:f9:11:68:2e:f4:1f:b0:e9:de:25:ec:14:cd:
         1e:5f:3d:99:e0:f0:9a:60:59:16:61:6d:c6:71:ce:60:d5:5e:
         a1:af:01:2a:1f:8a:4a:fd:8c:75:5d:ee:52:dc:fd:e8:b1:94:
         3d:f3:24:e2:05:41:66:84:7a:9c:b3:8b:41:65:8f:16:d5:f8:
         c5:08:7c:1b:e7:27:e5:3e:f9:51:f8:65:d5:25:6d:18:f1:9b:
         b3:10:55:f4:1c:a9:1c:be:a1:f1:45:2f:f4:5a:a7:a4:d4:f9:
         56:cd:40:53:8e:eb:5d:3c:d9:39:a7:93:4a:62:24:18:67:02:
         74:b4:29:f8:3f:59:d1:54:32:ce:61:33:83:34:15:77:b3:9a:
         a7:9c:69:8e:7a:b9:76:f4:13:e8:0f:ba:ab:77:d4:de:e1:6d:
         9d:b5:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:22:25 2026 by rpki-client