Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/014061ad-0ee3-302d-a37f-48d214ff5eba.roa
File:                     014061ad-0ee3-302d-a37f-48d214ff5eba.roa (raw, json)
Hash identifier:          JelykBtpWelXhcob8OKJ6gOJ6E2dKvQklOud5iV/c0w=
Subject key identifier:   0D:63:FF:60:25:C2:63:24:31:05:3C:B3:1B:71:5E:CF:C9:71:8D:F7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF9E20B8DD14C0827BAECBD00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/014061ad-0ee3-302d-a37f-48d214ff5eba.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     395793
IP address blocks:        50.3.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0b:8d:d1:4c:08:27:ba:ec:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=d1bf2ec1-ffa0-46d7-bb30-47ecc77b2e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:81:15:f8:0f:ee:70:15:cf:52:43:81:de:
                    45:a1:51:5c:5a:5d:5c:1a:6b:27:76:9d:f7:72:0a:
                    d9:89:40:38:0d:52:3c:b0:9e:09:65:46:d7:6c:e1:
                    08:6e:4e:0d:11:71:19:6f:60:e1:81:e3:f7:f3:07:
                    64:c1:72:6e:2a:67:6a:09:1f:1b:e8:9d:98:d6:d7:
                    ab:14:b5:a6:63:4f:86:1a:1a:fd:62:fb:55:65:6b:
                    27:58:c9:14:36:11:33:98:7c:da:c4:07:70:41:f9:
                    c6:ba:56:ea:30:59:f5:4f:b8:9b:06:a0:b6:94:18:
                    89:8c:40:a6:07:33:57:40:f0:ff:ea:4a:8d:96:5e:
                    d9:34:ea:99:df:01:c4:1d:bc:61:e4:1b:56:e7:a3:
                    d4:24:3a:76:df:48:45:22:7d:60:0e:39:36:2c:91:
                    8c:65:70:10:2d:0c:5b:f4:d4:08:d0:1e:6d:e5:9f:
                    49:20:d7:a1:4a:12:48:36:62:fd:8b:9d:67:cd:d3:
                    91:4b:50:17:2b:e2:0c:64:69:94:63:56:30:08:d9:
                    ec:b5:c2:61:7e:6e:30:17:af:c0:52:fc:5f:b6:bb:
                    6f:4a:69:09:52:81:b2:a5:8b:97:05:64:ad:97:7a:
                    65:2f:ac:2c:74:5c:a7:99:6b:4a:62:d1:ca:c7:01:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:FF:60:25:C2:63:24:31:05:3C:B3:1B:71:5E:CF:C9:71:8D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/014061ad-0ee3-302d-a37f-48d214ff5eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5e:ee:9b:8d:e4:3f:19:74:b7:be:a2:c0:2a:b5:d6:11:b8:
         dc:a1:c1:a3:83:28:78:13:f0:fc:2f:9d:1b:ac:96:1b:66:96:
         43:3b:2a:55:1d:dd:db:f3:e3:dc:97:a2:0b:81:e3:dc:9d:81:
         d5:70:8d:4e:57:ad:09:21:41:ce:10:58:a0:1d:f5:e9:8c:56:
         ac:6f:dc:82:9e:a0:f2:3d:22:73:98:e5:e1:89:37:1e:c9:ea:
         f5:c7:6e:93:e3:92:4b:39:48:3b:3f:82:8f:31:86:4d:43:bb:
         4a:06:e7:9d:64:c9:d6:91:fe:f7:d6:f5:ba:0e:5c:9e:43:55:
         a2:3f:25:6b:ff:ed:a8:07:15:b0:5b:de:12:91:84:ae:e5:f7:
         5c:69:ce:7d:fd:b8:cb:97:4f:17:99:d2:dc:9a:62:d1:7e:86:
         13:d4:ca:33:9f:83:41:1b:49:35:6c:d7:75:c8:f5:dc:5f:dc:
         b7:da:43:c5:32:02:c3:ab:9f:c7:05:45:02:70:a1:a1:ef:9e:
         63:e6:ee:4f:37:e6:f7:73:75:f2:75:d9:67:d7:95:46:62:70:
         88:f6:5f:71:aa:95:94:88:50:f3:8c:7a:38:ac:60:b0:01:25:
         7e:01:74:52:9f:35:99:2e:c5:2e:ec:22:38:1c:70:6a:11:a9:
         31:2e:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:52 2026 by rpki-client