Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f8704ec5-1595-3942-8e18-994f38caa8b2.roa
File:                     f8704ec5-1595-3942-8e18-994f38caa8b2.roa (raw, json)
Hash identifier:          bByHosNha8jdNPlL8OW75iMim++g2sJHhYw/Nv+N1PY=
Subject key identifier:   E5:0E:B9:0D:22:40:19:4F:0A:14:8C:63:46:F3:3A:A8:99:0B:B1:30
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7C6F78A50668E851EF520
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f8704ec5-1595-3942-8e18-994f38caa8b2.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        50.3.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c6:f7:8a:50:66:8e:85:1e:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=71d66b3b-c356-484c-8397-587f3ea45db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:d2:97:80:ce:6a:f7:bc:7b:e6:51:aa:7a:
                    1e:89:5e:70:1f:a3:5a:23:5e:aa:b5:dc:83:29:df:
                    92:37:81:0f:98:c6:7f:a8:fd:66:a8:59:ed:16:8d:
                    75:15:89:ee:3d:91:49:92:28:41:a1:bd:3f:c1:68:
                    a3:ff:94:bc:90:f0:fa:8f:d4:d6:70:aa:b4:11:f9:
                    32:79:67:ad:25:15:0b:50:fd:64:29:a2:c9:23:09:
                    77:34:96:0a:da:34:ee:34:d1:8a:90:54:27:bf:ee:
                    35:e1:cb:fd:44:a2:c0:0c:cc:c8:ec:cb:9c:63:57:
                    5b:57:cc:ac:ec:16:4e:93:39:93:1f:62:22:86:e6:
                    47:a3:3f:b4:ed:1a:ea:c3:07:56:26:05:95:82:6b:
                    3e:95:9b:5c:58:38:43:14:19:8f:52:3e:99:4e:ff:
                    fd:de:83:e1:95:d3:37:6a:cc:e8:08:20:76:08:cb:
                    a8:cf:71:d5:40:0e:ad:d2:c2:66:3b:95:33:0a:7c:
                    01:54:ae:95:a7:0f:bc:f6:37:d0:72:95:9d:ba:55:
                    8d:84:79:1f:5c:fc:26:f8:2b:4d:4a:79:93:27:0b:
                    8e:8d:85:5e:d5:4c:8a:9c:6a:70:8a:f5:18:bb:a7:
                    a7:b3:04:30:69:15:64:e4:2c:5e:fe:34:e6:d2:37:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:B9:0D:22:40:19:4F:0A:14:8C:63:46:F3:3A:A8:99:0B:B1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f8704ec5-1595-3942-8e18-994f38caa8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:9c:c9:57:82:b1:66:e0:63:2e:34:bb:8e:f9:c3:5e:36:
         d7:44:d9:5a:f0:6f:39:71:f1:0c:eb:d6:5c:6a:09:29:97:dd:
         fe:7b:e1:1e:26:9d:d4:05:37:ec:b7:2b:7d:b4:0c:3b:d0:44:
         56:06:3d:e7:f0:d8:2f:58:2b:9e:cc:f6:c6:03:b8:1c:5c:5b:
         2c:8b:81:99:87:7d:4c:9b:ef:50:a4:10:ad:f3:de:c7:5d:96:
         5f:e9:e9:e9:c2:6e:14:eb:42:1f:f9:f4:6c:3a:30:cf:e9:0b:
         bd:be:e2:64:50:bc:fd:0b:e2:fa:51:09:32:21:c2:79:f0:e9:
         f2:64:70:e8:26:6a:29:ee:58:64:00:52:fa:e4:21:ca:eb:ad:
         a8:6a:87:6a:39:50:8f:f1:82:42:16:45:80:17:c7:62:b8:57:
         89:40:99:15:27:94:8d:99:20:17:f3:3a:aa:2e:bc:0c:e2:f6:
         90:81:c2:92:4f:98:35:c9:3a:06:6c:58:1c:c1:62:72:75:a0:
         ef:bd:36:f6:8b:3c:27:99:b4:97:e6:15:e5:3f:0b:1d:43:24:
         45:66:b7:ce:2b:5f:94:35:f0:d1:70:c6:5d:47:cb:fb:da:d3:
         93:1a:aa:36:b8:af:77:9d:d0:02:b3:61:95:53:4e:8f:b1:1d:
         bd:39:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:59:28 2026 by rpki-client