Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa
File:                     42f3700d-498f-3164-9508-b07e06be2c2d.roa (raw, json)
Hash identifier:          siewjT4ELQ5GR674uKKCjp4h8SOXaQKkG0xJhqkYrJM=
Subject key identifier:   E9:81:4F:F9:87:AF:0E:FD:92:91:E2:E1:23:48:1D:63:FF:18:EC:AB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64F783976C441647E01060
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        50.3.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f7:83:97:6c:44:16:47:e0:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=53e92954-a54f-41cb-916b-353ca2c13504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:f0:93:c8:e9:4b:a5:c4:d3:4b:27:6b:e0:
                    42:12:43:c8:1c:37:21:77:78:75:a5:76:9a:a1:42:
                    63:39:ed:a1:1c:25:71:65:95:7c:20:1d:6b:a2:a6:
                    5a:0b:9f:98:42:4c:c4:11:4a:9a:4a:a0:23:e5:97:
                    09:56:21:09:3c:44:64:bb:ed:4a:e3:3b:80:76:d0:
                    45:cc:91:59:1c:9b:06:9f:dd:dc:45:9a:ba:ad:8f:
                    85:d1:9a:05:cf:10:b2:20:2c:03:43:14:9e:4b:db:
                    c0:3a:d3:81:9f:8c:60:32:b9:de:e2:ce:6a:c2:70:
                    d4:d7:9b:7c:70:82:7d:47:83:d1:ba:07:38:6a:b7:
                    e9:32:03:60:a7:91:24:0d:c4:61:a6:bd:4a:ac:ea:
                    c0:1a:a3:90:d2:29:af:fe:0d:8a:ec:7c:a2:56:54:
                    00:b3:7f:c1:97:e8:aa:88:61:9d:84:60:2c:65:28:
                    b6:0f:c6:5d:26:df:81:0c:28:0d:57:e5:53:5f:c2:
                    46:d7:54:7b:8a:d2:3e:e8:8d:ec:c0:26:fe:d4:45:
                    75:0f:4d:31:17:5c:88:10:ce:0e:9a:d7:07:8a:55:
                    8e:9e:93:42:35:bb:72:b0:f3:95:43:41:c3:9c:bd:
                    5b:c4:89:d0:9e:96:29:e0:78:52:19:69:85:82:cf:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:4F:F9:87:AF:0E:FD:92:91:E2:E1:23:48:1D:63:FF:18:EC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42f3700d-498f-3164-9508-b07e06be2c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:21:9e:3a:f3:9d:8a:1b:a4:37:ea:02:9e:c7:8b:e7:86:
         6d:31:3a:84:7c:ed:78:94:5c:aa:92:d5:5e:f4:09:de:f0:3b:
         ef:9c:85:82:2c:2f:d1:a1:88:15:d9:ea:e5:91:a3:26:02:a0:
         05:b8:6f:c2:9b:88:f7:c6:4e:7b:93:04:d0:02:bb:54:50:0d:
         bf:db:4c:87:e8:2e:2d:fd:db:dc:b9:5e:f4:72:28:b8:6a:f6:
         be:50:32:c1:d8:fa:c5:a5:e0:bb:1e:ee:d7:e1:17:0f:a5:8d:
         0f:54:0d:eb:47:d3:5a:2c:d8:ea:fb:0e:b2:4d:36:c9:08:dd:
         27:8b:53:9a:1d:36:2a:89:8c:f5:f1:86:2f:fc:d0:1c:3b:d6:
         50:0a:cb:3d:47:5c:16:1d:24:9a:d0:0f:a7:6e:54:b1:7a:89:
         8c:e3:51:1c:7a:06:f5:64:51:84:ea:5a:bd:d9:e7:a6:44:26:
         14:0a:39:43:9c:32:74:78:19:ea:60:d9:2e:ce:8f:a3:66:96:
         87:5d:18:a2:fd:a3:8b:77:06:de:9c:4f:fa:d8:cf:84:c1:35:
         20:c3:39:63:e5:6a:a6:96:19:86:89:79:48:0b:a8:9b:5e:7f:
         f0:2c:4b:70:89:2f:3b:45:19:e2:d4:b6:3e:07:6e:f2:88:b3:
         4c:0b:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:54 2026 by rpki-client