Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/06e2b67f-0b74-334e-8383-0be3dc845cea.roa
File:                     06e2b67f-0b74-334e-8383-0be3dc845cea.roa (raw, json)
Hash identifier:          KqMhaA3YW7rnd4smROp/1qHDKHXzzKFM/20mDse9Kz8=
Subject key identifier:   23:72:8D:9D:D8:FB:99:3C:42:29:4A:AA:06:B9:39:0A:EB:18:DC:7B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64CFAE2C6620A4DD5C9700
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/06e2b67f-0b74-334e-8383-0be3dc845cea.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        50.3.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:cf:ae:2c:66:20:a4:dd:5c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=bd8c5da2-e208-45ee-8e42-caf265229efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:d6:35:8a:71:07:b5:f7:5b:9c:de:2a:ac:
                    8b:bf:03:52:04:2a:d9:6b:55:09:df:61:71:7b:5f:
                    e8:9d:ae:b3:de:43:65:e9:fb:3c:53:33:27:fe:e8:
                    a3:73:99:a3:02:b8:a2:c0:66:2a:91:54:c8:4c:04:
                    08:f4:a6:5e:92:9f:5d:28:e2:32:21:43:30:d7:ff:
                    7f:43:2e:ee:aa:43:3e:4b:4a:1b:d9:e1:95:67:52:
                    fe:3e:a6:2f:5e:ae:0c:53:00:2a:b8:7a:dd:28:37:
                    ac:3e:7b:e2:2c:38:71:66:3e:65:77:92:52:34:c8:
                    ce:ef:a1:66:67:e1:62:4e:7b:da:13:35:06:f6:9e:
                    b7:51:94:a6:96:cc:95:12:2a:b1:5f:de:ed:b1:da:
                    21:d9:e5:86:f1:bc:47:a1:f4:92:ce:03:b3:25:5e:
                    5c:1a:ee:73:b6:7b:d8:b6:20:e0:ca:f2:f1:f7:46:
                    89:71:b9:0a:a2:fa:c0:ab:aa:0a:ac:0d:c4:9f:37:
                    68:39:f8:78:47:0a:bd:9d:60:7b:fc:b3:18:20:dc:
                    c7:0e:0c:fe:5c:ae:f3:42:55:ee:59:fb:a1:58:af:
                    fd:f2:3b:e7:3a:0a:55:3b:f7:f6:6c:44:57:22:28:
                    0a:28:24:6a:52:91:31:95:6c:5d:1f:af:0e:c8:15:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:8D:9D:D8:FB:99:3C:42:29:4A:AA:06:B9:39:0A:EB:18:DC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/06e2b67f-0b74-334e-8383-0be3dc845cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:50:56:d1:14:3a:34:78:81:a0:ee:5d:21:a4:30:13:59:ce:
         75:3e:39:47:d0:86:df:0c:72:30:60:0e:a8:c4:37:d0:50:a8:
         be:b8:25:84:70:39:73:ea:70:37:fe:4c:57:a1:0a:4f:43:f6:
         28:1d:db:74:e2:12:35:c8:ee:97:9f:cc:ad:35:db:a7:f4:96:
         3b:6a:ed:8f:ed:b8:44:1f:57:29:df:56:2d:c8:6d:29:f5:c9:
         53:9c:fe:36:79:96:3a:ee:a3:34:40:98:48:7a:82:bc:21:d1:
         dc:8a:aa:66:0d:70:91:3f:dc:a5:23:82:08:58:16:8c:93:9e:
         de:d1:c3:9d:59:f2:04:68:83:e9:42:de:ba:26:a1:1f:03:e1:
         81:ae:7a:8b:ca:6e:f3:b0:bb:69:4e:4e:1d:1d:ed:e8:a3:c0:
         2e:8f:a1:2c:ab:1e:20:9f:51:d9:ca:4d:0a:44:31:b4:c1:d9:
         e0:57:80:68:2c:ab:39:93:30:11:64:2f:1e:90:1f:e0:27:43:
         1b:37:8c:28:9a:23:16:65:0b:67:0e:bf:18:ff:b3:52:51:ca:
         c9:cf:3e:12:75:56:ea:81:d6:6d:30:dc:64:30:01:0e:5b:93:
         d5:b1:6c:96:ba:e4:41:6f:bf:6d:2e:6c:24:0d:9b:d1:92:63:
         a7:d5:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:23 2026 by rpki-client