Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/49af0413-4c5d-3112-be32-c8a0c758fa35.roa
File:                     49af0413-4c5d-3112-be32-c8a0c758fa35.roa (raw, json)
Hash identifier:          XR1lhnAX9mDG5a8touZSmtO5M22NVXlD18NPICzqi9U=
Subject key identifier:   83:C3:7D:D9:27:E2:63:4F:0E:0A:38:9A:9F:CF:43:EE:C0:38:1B:CC
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EAEE14C0CB951079C4E8F0500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/49af0413-4c5d-3112-be32-c8a0c758fa35.roa
Signing time:             Fri 31 Jul 2026 16:13:07 +0000
ROA not before:           Fri 31 Jul 2026 16:13:07 +0000
ROA not after:            Thu 29 Oct 2026 16:13:07 +0000
asID:                     219427
IP address blocks:        50.2.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:e1:4c:0c:b9:51:07:9c:4e:8f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 31 16:13:07 2026 GMT
            Not After : Oct 29 16:13:07 2026 GMT
        Subject: CN=f3b339d0-6bb2-4681-90fe-6322a70b0f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:42:9f:89:7f:5c:d1:16:7a:40:9c:ce:c6:
                    22:89:fc:52:c8:83:44:65:66:c8:47:b7:7b:f6:6c:
                    51:75:8e:36:bb:2b:34:1f:16:c4:93:18:51:8c:d5:
                    77:63:28:17:3b:bb:9f:ec:4f:d6:30:94:6c:0b:37:
                    b9:93:87:e7:e2:01:82:0e:19:51:36:42:0e:c9:d7:
                    17:f0:aa:a2:9e:bf:ad:16:53:cc:a9:e8:f2:8d:45:
                    1a:d6:19:34:c7:ed:c6:5b:fd:3f:ed:6f:9c:08:87:
                    7e:71:9b:d5:f1:08:cc:be:ec:92:5d:22:e2:59:43:
                    51:ba:16:a0:a8:cf:7f:0d:73:76:96:89:e6:c7:43:
                    43:1f:e9:88:04:d7:34:a8:fc:d7:c2:d3:9c:05:29:
                    f4:bb:e6:62:29:00:83:9a:7e:92:cf:79:82:68:5f:
                    62:5e:dd:30:0d:38:d6:a2:65:a1:eb:d1:38:d5:76:
                    31:16:e3:aa:43:e8:d2:f0:cb:bf:5b:21:2e:6b:b7:
                    3f:c1:09:49:c9:75:dc:a2:4d:63:e8:bd:97:99:b4:
                    e7:af:2f:8e:33:3b:de:ef:1f:84:22:81:76:2a:0c:
                    93:cf:85:a4:6f:0d:d5:5d:90:f7:c6:84:ed:39:a9:
                    9a:31:c6:ea:2b:9c:34:1b:8a:3b:ad:23:0b:7d:9f:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:7D:D9:27:E2:63:4F:0E:0A:38:9A:9F:CF:43:EE:C0:38:1B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/49af0413-4c5d-3112-be32-c8a0c758fa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:e4:b7:45:f4:39:0b:13:fc:58:f1:dc:d1:fc:b3:f2:bd:
         ea:8a:d7:c5:ed:ba:11:73:00:d1:32:0f:1e:99:77:c2:0c:9b:
         31:61:c6:d3:b9:db:2f:0a:02:eb:5d:a3:c7:15:4a:08:eb:92:
         2d:49:05:15:7c:69:79:60:06:14:7c:7b:4c:40:ae:b3:d8:81:
         13:b1:cd:76:f0:91:0d:e9:d1:c2:e3:b0:df:d5:61:de:85:26:
         a2:df:59:8a:38:e2:d0:37:b5:62:37:0d:e1:87:d0:8f:22:87:
         36:fb:cc:04:f4:f7:a5:d6:85:b8:d5:c3:85:45:be:b9:8c:48:
         a1:28:0d:4b:48:6d:a5:5c:4f:fd:63:b5:de:0a:55:77:39:e7:
         10:6b:37:1a:dd:f0:0c:4b:e0:ed:23:3a:66:ab:6d:4e:31:68:
         df:3d:cc:5f:c1:d2:d6:61:16:94:ab:83:d5:ef:f8:ce:55:b4:
         47:7a:6c:57:5a:68:2d:32:cb:1c:28:b2:39:9f:dc:6a:83:1f:
         eb:55:db:41:89:52:89:74:a7:de:b8:8e:8f:ba:73:f2:85:cb:
         f9:49:d8:5f:c1:09:e0:75:26:29:8e:ff:97:dc:49:71:a6:dc:
         1a:77:7d:8a:dc:09:c5:6d:18:f9:1c:37:f3:05:84:4a:c4:4a:
         79:38:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:27:33 2026 by rpki-client