Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa
File:                     2aef3248-7c40-314e-ae9a-5417edd08137.roa (raw, json)
Hash identifier:          t3gL9Hn7k568sB8KbZD2kEL0g8UndYiLeEKyI2QG0Zg=
Subject key identifier:   E1:42:B7:C6:BE:41:52:4D:94:91:D6:67:61:AD:D0:05:30:94:47:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798AE87509A9E5FBA34F180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        50.92.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ae:87:50:9a:9e:5f:ba:34:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3c6c8f49-e0aa-41b9-a3ee-8dc36460abe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:1e:b8:16:88:e6:c5:3c:07:eb:e4:fb:4f:
                    97:f2:72:0f:42:45:23:36:e7:50:ab:16:87:e2:79:
                    74:b7:cd:ef:9d:ab:3d:fb:17:12:3c:5b:02:4b:a6:
                    dc:16:97:2f:95:2c:08:a6:fa:31:33:fb:45:af:ff:
                    4e:45:10:0e:a1:2f:b6:00:d1:39:5e:6b:6f:16:b3:
                    73:7e:d0:71:b8:03:2f:15:6d:46:42:e5:7e:f8:cc:
                    0b:96:2e:7c:b7:55:f4:47:9c:ba:5d:35:32:1e:7b:
                    3b:4b:df:4e:8d:ed:77:8b:3e:03:4e:b5:c4:dd:0a:
                    37:30:9c:97:7f:db:86:f1:d0:ad:a1:b2:d6:fe:b2:
                    6f:96:39:03:3f:99:22:ae:17:a6:46:3a:63:bf:64:
                    e7:47:2a:96:76:0e:ba:b2:22:65:a1:ac:23:68:a5:
                    6f:d8:03:4f:b1:4e:3f:44:cf:70:fa:e3:b1:61:17:
                    bf:d0:29:1e:59:b6:7f:99:9b:e6:eb:eb:d5:73:a1:
                    0d:ba:d3:7c:53:3e:35:9d:de:25:99:6e:d2:08:20:
                    8d:38:63:5b:c9:de:85:36:46:e7:90:71:4d:5b:db:
                    07:64:37:35:2d:c5:07:8b:65:ea:29:1a:77:18:2b:
                    0f:7a:69:68:77:03:90:1d:3d:a9:fe:cd:b7:b6:cc:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:42:B7:C6:BE:41:52:4D:94:91:D6:67:61:AD:D0:05:30:94:47:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:da:c3:12:5c:d1:36:96:57:19:3c:22:41:c6:d2:6e:e2:b9:
         c6:f4:c2:55:f0:05:e9:c8:03:dd:50:da:b3:0f:09:b9:aa:ba:
         00:c8:9a:d4:35:f0:5b:f6:82:98:e6:44:4f:8a:5a:a5:01:5f:
         59:04:38:26:14:86:b5:a4:9d:ab:7e:72:21:41:aa:cc:74:82:
         07:94:8a:4a:ec:4a:87:69:06:c4:ab:29:43:ee:bc:68:8c:20:
         0c:87:45:a5:2b:ec:42:ca:4b:c3:9d:5f:c8:f5:5e:f0:83:21:
         44:cf:c2:d2:ff:f6:96:5e:c5:0f:09:f8:d9:a9:cb:88:c5:4c:
         06:0b:0f:53:86:97:1a:4e:46:51:35:42:93:49:cf:7a:06:d8:
         f3:ff:0a:f5:93:71:59:17:e3:2a:b5:75:8a:f6:88:f9:30:fd:
         17:c7:24:b7:b3:97:cd:d2:c9:c7:c7:91:99:c8:bc:40:9e:73:
         22:08:82:99:5c:71:5a:2f:4f:c3:00:64:8d:63:54:6c:e9:58:
         71:19:20:58:5a:c1:16:4d:a2:82:a5:c5:e8:f3:a9:ec:19:22:
         f0:e8:e7:75:91:d6:26:fb:07:b8:fa:25:f5:d8:f9:47:cc:eb:
         59:7a:52:79:9b:9d:1e:45:8d:b9:0e:a3:04:96:57:3d:fe:ad:
         4d:97:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:41:19 2026 by rpki-client