Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2d9951e3-fdc9-3d33-821a-84d78e222d15.roa
File:                     2d9951e3-fdc9-3d33-821a-84d78e222d15.roa (raw, json)
Hash identifier:          rSVKWxGMlOj4vsB0cgdKxfss912hf6XPZL8mBLIxf0o=
Subject key identifier:   9B:FA:35:3B:68:68:34:62:D5:61:5E:26:45:DC:25:3B:9B:60:59:AB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584AD888D000C4CF3D7B1E6FE7E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2d9951e3-fdc9-3d33-821a-84d78e222d15.roa
Signing time:             Wed 13 Aug 2025 19:11:02 +0000
ROA not before:           Wed 13 Aug 2025 19:11:02 +0000
ROA not after:            Tue 11 Nov 2025 20:11:02 +0000
asID:                     16509
IP address blocks:        50.2.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:88:d0:00:c4:cf:3d:7b:1e:6f:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 13 19:11:02 2025 GMT
            Not After : Nov 11 20:11:02 2025 GMT
        Subject: CN=34fcf6a8-bd05-4152-b2ae-7f68ce6bc1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:34:d8:b6:50:a3:bf:e4:82:b1:ab:f7:27:
                    7a:bf:c0:c5:35:47:07:68:80:73:34:89:80:ec:e4:
                    c9:9f:38:8c:7f:52:13:52:89:d0:d5:bc:e5:4e:6b:
                    ae:80:3a:70:d9:64:66:e1:a2:db:8e:38:49:5e:6c:
                    72:3e:36:32:79:f1:f0:ec:1f:17:fa:c5:15:a2:48:
                    8f:20:b9:9e:7f:1d:2c:66:35:ad:cb:ae:f9:56:ab:
                    f9:c5:18:79:2a:3f:00:6e:2a:d9:38:f1:b7:b5:24:
                    c9:c9:5b:94:3b:96:fb:9e:db:e4:33:c5:4d:45:e7:
                    15:46:b7:ca:a4:9a:ae:e8:0d:3d:e9:9d:2c:88:87:
                    3b:0f:b9:12:46:d2:76:7e:c4:9b:a3:5a:73:93:6a:
                    50:31:7c:95:eb:fc:10:24:de:00:83:d0:a0:6c:bb:
                    98:9c:ed:f1:8e:1f:de:be:88:6d:f3:fa:52:18:d4:
                    b2:af:46:22:6e:17:8a:54:1a:fd:f1:13:64:7f:de:
                    a6:c1:cd:93:1c:da:ce:f0:05:a7:d9:d7:db:6d:16:
                    7d:72:6e:73:e5:db:c7:fc:b0:b1:1a:45:e3:26:3a:
                    8d:75:4a:3f:32:f7:61:17:33:37:39:d9:b6:48:9f:
                    05:61:5d:44:d5:d5:e0:50:54:a6:66:3c:18:63:44:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:35:3B:68:68:34:62:D5:61:5E:26:45:DC:25:3B:9B:60:59:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2d9951e3-fdc9-3d33-821a-84d78e222d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:37:40:04:02:fd:ae:fd:0a:1c:f1:ba:cb:a9:c5:e7:9b:
         3e:f0:c8:3c:1d:bb:a2:be:ed:ac:fd:86:69:28:bf:d0:9a:ea:
         c1:2b:cf:f8:37:01:7f:1c:c6:de:7e:a3:67:b7:d6:92:ac:fa:
         fb:58:a1:9a:01:fb:4f:34:18:96:95:1e:04:30:c4:2f:0a:48:
         59:36:8b:70:a6:49:8e:28:7d:50:04:15:ce:da:94:8f:ed:ae:
         9d:e8:ec:57:23:34:78:f6:3e:a6:fd:dc:74:32:37:17:56:02:
         b8:34:f4:5d:2b:0a:1d:45:1d:3d:f3:fc:6c:c0:a9:4b:c7:90:
         1a:59:02:57:9e:e5:e4:79:45:e5:ce:8c:75:f7:d1:d0:15:6f:
         be:f0:d0:d9:e9:80:70:74:9e:ec:64:d6:56:fa:6c:99:b1:d0:
         7b:32:97:c7:ce:04:ac:81:67:da:c7:31:91:6c:8c:6d:fa:79:
         9e:29:e8:f2:44:25:68:15:b3:28:3e:0c:38:aa:4b:8e:e2:18:
         b5:03:be:a0:9d:6d:f8:aa:86:76:3b:3b:63:f2:e1:e9:a6:82:
         23:06:5c:c8:bc:d3:bd:94:c4:6d:e1:69:f7:90:0f:fd:4d:b1:
         d1:3b:c8:c1:89:8c:47:ad:d6:fb:e0:f2:f5:f0:b1:0a:5f:e4:
         17:a9:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:17 2025 by rpki-client