Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/50bf481e-391c-3b37-ba7e-14df41379603.roa
File:                     50bf481e-391c-3b37-ba7e-14df41379603.roa (raw, json)
Hash identifier:          UpYJ9xLtvowcl5MLeB7seWBQ4ezn8AJbPcwchm0u52k=
Subject key identifier:   75:4C:8C:A4:54:AC:C7:86:9A:13:E2:17:0F:A5:4A:B5:45:6B:C1:91
Certificate issuer:       /CN=4fab6d93-73c4-48ff-add0-c3a94c2edb61
Certificate serial:       010D0C9F4328584F51D2A8BDE3F52BD85CE339C0
Authority key identifier: 2D:94:1B:23:AD:A5:F5:E1:D8:DA:B3:1B:72:75:3B:08:F2:58:5E:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/50bf481e-391c-3b37-ba7e-14df41379603.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     12684
IP address blocks:        162.249.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a8:bd:e3:f5:2b:d8:5c:e3:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fab6d93-73c4-48ff-add0-c3a94c2edb61
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=f5f4651d-5971-444e-b3c6-a4fc1d81fc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:5f:55:42:f5:dc:1f:1a:12:90:04:da:9e:
                    38:e8:d8:fd:55:1f:29:0d:5f:cb:28:68:c5:70:02:
                    57:95:f7:80:44:a0:9b:26:c3:12:fb:2b:f1:28:c6:
                    74:0f:fa:c5:a2:11:68:3a:06:01:a0:98:52:24:f7:
                    18:a7:ae:d0:6b:94:f2:38:22:dc:c4:dc:26:58:21:
                    3b:dc:d7:08:d6:61:08:53:d4:d0:0f:ed:60:78:45:
                    0a:5c:22:c4:a3:27:af:85:d1:fa:b4:97:bf:1e:8a:
                    69:00:96:89:5e:ba:2d:7d:4d:43:d4:a6:7c:4c:e4:
                    97:a6:30:12:a1:b4:55:bc:f8:f6:be:54:dd:70:ee:
                    66:7b:a1:0a:c5:79:d3:d6:cf:16:86:6a:e4:50:94:
                    57:6d:75:2a:48:09:3b:6c:36:21:62:b1:4c:fb:bb:
                    f8:94:11:e0:d1:30:a7:4d:bf:c9:f0:d7:61:a2:23:
                    81:bd:0e:71:c3:7d:dc:59:9a:da:b3:46:c7:f9:c6:
                    40:93:f2:6f:7c:9c:63:ea:39:1b:c4:1e:5e:d9:d7:
                    56:20:63:d0:2d:a8:ab:bc:4e:e2:3d:62:f6:7c:81:
                    3f:7b:28:f0:b4:9f:74:26:1c:b0:79:be:55:eb:6b:
                    f9:8c:32:3b:a5:2c:c2:4e:b7:e3:e1:93:15:80:dd:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:8C:A4:54:AC:C7:86:9A:13:E2:17:0F:A5:4A:B5:45:6B:C1:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/50bf481e-391c-3b37-ba7e-14df41379603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.crl

            X509v3 Authority Key Identifier:
                keyid:2D:94:1B:23:AD:A5:F5:E1:D8:DA:B3:1B:72:75:3B:08:F2:58:5E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:fd:60:09:6d:c7:cd:13:76:f1:4e:ed:2c:8f:29:40:42:df:
         a4:0e:37:39:75:9f:19:37:4c:a6:e9:97:f9:7f:fa:c2:52:36:
         6d:c2:d4:e1:b1:bd:04:0b:f2:26:d4:61:13:c2:0f:b8:11:f0:
         22:5e:8c:15:e2:d7:60:b0:87:19:28:e4:18:36:67:b8:b5:6b:
         8a:af:21:8c:1c:b8:bb:9b:d9:c7:32:0b:65:63:a1:49:a5:26:
         9b:c4:40:a5:ca:f7:72:98:ae:5d:f2:ae:b4:91:c9:fb:3d:61:
         27:fb:dc:89:10:3f:4b:0e:3d:e5:cb:37:24:5a:f7:30:bb:d4:
         be:12:a4:ca:b2:80:31:6f:9e:cf:41:9c:33:39:d6:40:f8:8a:
         f6:67:fb:5d:c2:2a:b8:e3:d3:86:0b:ef:0a:25:6d:e1:61:8c:
         4a:a3:87:ff:08:f8:bf:37:eb:11:1f:de:0c:b7:b7:ad:8d:67:
         7a:15:42:4e:9c:75:92:2c:19:26:a6:55:a7:24:5e:9a:01:12:
         d5:31:4b:67:71:a5:0c:53:1c:2f:08:34:46:fc:b7:4d:1b:b8:
         bc:e8:77:27:dc:9f:ea:f5:d7:c0:c9:3e:86:9c:db:ca:19:68:
         02:ee:85:b5:bb:29:b4:50:9c:eb:6a:a2:68:e3:7f:fc:d5:0f:
         6e:3c:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:40:12 2026 by rpki-client