Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dc616720-521b-3b61-b335-98233fdfe467.roa
File:                     dc616720-521b-3b61-b335-98233fdfe467.roa (raw, json)
Hash identifier:          b1CKjZIYR3fMHoy21kKvr3P4H+YqprbwA7hHRvZgvzE=
Subject key identifier:   E2:5D:CB:75:3B:A0:AB:C4:1E:40:58:CA:F5:7E:BD:F9:C5:8A:3B:B0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B5C6CB40B3CCE8A034B68D440
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dc616720-521b-3b61-b335-98233fdfe467.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     32043
IP address blocks:        50.3.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b4:0b:3c:ce:8a:03:4b:68:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=6dcaa819-2a0c-4e02-a866-47a407dd9071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:1b:0d:a6:9f:ea:1a:1e:a5:45:67:ab:de:
                    d4:82:a1:71:59:50:d8:4a:28:63:e7:07:33:26:c0:
                    65:79:38:73:31:c2:99:f3:fa:6a:f2:e4:16:99:3c:
                    85:29:52:1b:0d:12:97:97:8a:aa:93:43:6e:a0:76:
                    e8:57:27:ab:18:4f:fc:bb:d1:d7:ed:2a:da:cb:90:
                    b5:81:d3:b5:07:61:b8:8a:f7:f8:12:0e:b1:75:d9:
                    fd:9e:4a:ce:e7:10:58:d7:7d:b3:60:08:b5:55:ef:
                    ce:28:57:81:ed:6a:b3:fa:44:04:2e:7b:b6:b2:29:
                    45:53:46:ee:69:f8:4b:63:77:2b:4a:fb:b2:50:c9:
                    39:67:67:27:5a:c4:78:08:89:d1:28:49:69:14:3f:
                    ec:c5:2c:c9:47:92:76:7d:e8:ff:8b:e9:83:63:b2:
                    a7:db:35:b7:f9:05:5d:8f:8f:db:d3:ff:0c:b1:e0:
                    3d:c1:41:a0:b2:5b:41:26:65:43:aa:ea:02:24:7d:
                    60:ca:c8:a6:0c:55:cb:b3:4b:5a:c2:83:e3:1c:5d:
                    12:a8:af:cc:39:a7:3b:67:74:24:3f:07:ae:57:33:
                    0f:6e:0f:91:b4:e9:8e:64:29:39:29:4f:2f:8a:eb:
                    08:3d:98:50:bb:db:52:f4:0b:8a:fd:4c:5b:46:c8:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:CB:75:3B:A0:AB:C4:1E:40:58:CA:F5:7E:BD:F9:C5:8A:3B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dc616720-521b-3b61-b335-98233fdfe467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:99:c7:c0:54:93:21:90:67:f7:85:77:43:4a:94:63:97:15:
         10:29:dc:bb:90:fb:af:7d:53:48:8f:e3:bf:92:ef:76:2e:a5:
         11:91:38:01:60:78:72:66:86:9d:6f:01:4a:7c:76:82:2c:10:
         81:6f:96:4f:ff:aa:b9:8a:d2:62:78:2c:cb:b9:f4:f9:77:dd:
         45:68:06:ee:0c:74:cb:6a:a7:2b:1c:9d:e2:3d:c5:44:16:8f:
         5b:96:42:72:8e:de:f1:b6:d5:06:88:79:ba:8b:af:73:4d:1a:
         2e:28:d2:8b:9c:de:ee:37:1a:9b:2b:b2:3d:7e:40:0f:a3:97:
         43:0e:48:1d:eb:e2:37:c1:2d:49:e1:1a:c4:04:1d:41:73:d4:
         62:b1:5b:50:0a:a8:5e:cb:ae:dd:44:fc:a4:68:5c:16:fe:8a:
         88:c7:ab:2a:fa:46:6a:1b:6e:81:63:c6:50:40:09:4d:21:19:
         00:72:07:53:5a:da:be:c7:07:a8:17:b0:91:3d:c0:7d:13:c1:
         2d:d9:2e:57:59:a2:98:9d:5a:53:f6:ee:f3:7d:e4:de:06:16:
         63:6a:9f:b7:22:39:15:ad:e0:c2:aa:63:ce:87:5a:0c:06:61:
         64:60:3a:d4:4a:11:20:c9:94:62:78:64:56:e8:da:09:f6:37:
         16:65:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:42:52 2025 by rpki-client