Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa
File:                     8b649a33-d8c0-30be-b903-a213a24ec051.roa (raw, json)
Hash identifier:          QDBvIxcpn5tvx2+aok1J3VZCAkTEFeuBxjjZr6JW1ZI=
Subject key identifier:   30:38:79:B8:A8:A2:27:D5:22:9B:5E:EA:2B:AE:6A:6E:69:F4:F1:1C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B196C10461E466FB028342880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     35280
IP address blocks:        50.2.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:10:46:1e:46:6f:b0:28:34:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=0e9ef45e-9e24-4442-988d-41b0cf45bdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:87:d0:72:c6:e7:2a:09:c9:de:a9:7f:c3:
                    f6:41:d5:6f:5e:43:28:01:99:5e:db:0c:17:93:6e:
                    1a:b2:e7:69:0b:6c:f2:70:fc:32:b8:57:7f:37:2c:
                    93:dc:25:a5:94:a6:3a:99:0c:82:d6:1b:88:46:2f:
                    53:49:6b:51:3a:c0:20:ad:73:4d:3e:04:f8:fe:51:
                    d7:5e:11:62:02:0d:2d:2b:82:52:7d:be:cb:10:14:
                    b1:28:e7:9f:33:e3:30:6c:f4:cc:6d:47:f4:a3:f3:
                    59:66:01:38:50:9d:01:5f:de:9f:49:c9:a9:1f:5f:
                    f1:0b:9f:f6:7b:23:d7:bf:3d:df:da:f6:9f:33:77:
                    6f:ac:52:4e:e7:73:63:14:e3:7a:42:b7:e7:57:09:
                    35:22:ea:f0:c2:9b:54:6f:04:12:21:5c:5f:68:81:
                    3e:bb:05:7e:07:f3:a7:df:d4:48:b4:f9:a8:3e:e7:
                    dd:00:82:a5:a8:a5:52:2e:85:ac:a9:90:8c:5f:72:
                    a0:6a:3c:ff:6e:9d:c8:2a:78:03:56:cc:c4:2c:c8:
                    d5:92:17:28:f8:16:50:de:68:4b:40:42:f5:af:73:
                    ed:3e:6f:c0:6b:fd:78:8c:7c:4b:08:d3:2d:c6:86:
                    19:c8:df:3b:02:ed:8a:fe:e7:05:82:44:02:77:50:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:79:B8:A8:A2:27:D5:22:9B:5E:EA:2B:AE:6A:6E:69:F4:F1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b649a33-d8c0-30be-b903-a213a24ec051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:70:ef:4d:2c:d8:6f:71:6b:2a:85:33:e3:b1:3a:06:de:
         e5:e7:ab:46:3b:76:59:98:8a:15:bb:4b:bc:39:c9:ac:01:6c:
         ee:8c:e4:c7:ca:28:a4:08:6d:0a:12:35:07:76:8e:30:ed:b1:
         1c:85:ff:11:a0:9e:30:81:a7:ff:1d:54:54:6a:3e:3a:6b:9f:
         58:e1:65:48:ac:fa:6c:b9:de:03:94:17:d8:d0:99:4e:2f:0a:
         3f:73:b9:36:bf:1a:45:01:28:83:ae:18:90:1f:9a:5a:e8:fc:
         f5:17:f7:42:05:c0:c3:0f:fe:98:e9:a3:41:3e:2e:dd:7d:34:
         ee:d1:1c:38:07:4c:42:12:53:d0:58:56:ef:29:79:c4:0e:81:
         66:e2:bc:42:53:f8:27:5f:f4:c3:df:16:18:05:ff:cb:78:43:
         96:a1:8e:2d:a3:35:12:2f:69:c6:d2:e7:cd:26:51:3c:8c:99:
         9e:62:e5:a0:38:df:fd:53:45:10:50:75:49:59:3a:d8:3c:23:
         a7:e8:af:de:26:8c:1f:5a:08:54:de:35:40:5d:7e:3a:72:83:
         5c:95:2e:60:2e:19:19:5e:39:0c:c9:b5:5d:89:53:57:30:1f:
         2a:75:15:fd:b7:f4:3f:64:5f:29:c4:b4:01:5f:fd:e5:40:9d:
         43:74:15:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBBGHkZvsCg0KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MGU5ZWY0NWUtOWUyNC00NDQyLTk4OGQtNDFiMGNmNDViZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbaH0HLG5yoJyd6pf8P2QdVvXkMoAZle2wwX
k24asudpC2zycPwyuFd/NyyT3CWllKY6mQyC1huIRi9TSWtROsAgrXNNPgT4/lHX
XhFiAg0tK4JSfb7LEBSxKOefM+MwbPTMbUf0o/NZZgE4UJ0BX96fScmpH1/xC5/2
eyPXvz3f2vafM3dvrFJO53NjFON6QrfnVwk1IurwwptUbwQSIVxfaIE+uwV+B/On
39RItPmoPufdAIKlqKVSLoWsqZCMX3Kgajz/bp3IKngDVszELMjVkhco+BZQ3mhL
QEL1r3PtPm/Aa/14jHxLCNMtxoYZyN87Au2K/ucFgkQCd1DQMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDA4ebiooifVIpte6iuuam5p9PEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGI2NDlhMzMtZDhjMC0z
MGJlLWI5MDMtYTIxM2EyNGVjMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgIuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADW4cO9NLNhvcWsqhTPjsToG3uXnq0Y7dlmYihW7S7w5yawBbO6M5MfK
KKQIbQoSNQd2jjDtsRyF/xGgnjCBp/8dVFRqPjprn1jhZUis+my53gOUF9jQmU4v
Cj9zuTa/GkUBKIOuGJAfmlro/PUX90IFwMMP/pjpo0E+Lt19NO7RHDgHTEISU9BY
Vu8pecQOgWbivEJT+Cdf9MPfFhgF/8t4Q5ahji2jNRIvacbS580mUTyMmZ5i5aA4
3/1TRRBQdUlZOtg8I6for94mjB9aCFTeNUBdfjpyg1yVLmAuGRleOQzJtV2JU1cw
Hyp1Ff239D9kXynEtAFf/eVAnUN0FZ0=
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:39:41 2025 by rpki-client