Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ec6ded7-868c-3139-9659-42618eccae73.roa
File:                     6ec6ded7-868c-3139-9659-42618eccae73.roa (raw, json)
Hash identifier:          BTTOaPBSUJJs//ai3OuhmuBwPU6NO3UgEJYIH5g6VJY=
Subject key identifier:   F3:45:27:CA:3F:B6:DC:B6:A0:35:00:A8:CB:BE:0B:D0:2A:81:3B:D0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF6C81C9B5F5F8B303659BF80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ec6ded7-868c-3139-9659-42618eccae73.roa
Signing time:             Wed 26 Aug 2026 10:20:34 +0000
ROA not before:           Wed 26 Aug 2026 10:20:34 +0000
ROA not after:            Tue 24 Nov 2026 11:20:34 +0000
asID:                     219427
IP address blocks:        50.3.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f6:c8:1c:9b:5f:5f:8b:30:36:59:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 26 10:20:34 2026 GMT
            Not After : Nov 24 11:20:34 2026 GMT
        Subject: CN=83799a9d-b61d-455f-9679-76e812969166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:fb:84:ee:c8:39:b7:0b:89:5a:ae:a9:84:
                    b7:3f:97:77:05:08:41:bc:56:86:ef:f0:ec:fa:9a:
                    1b:05:84:bf:ad:26:6d:d4:4e:37:d3:0a:17:79:f1:
                    d4:2f:e4:e2:e0:65:b1:2e:37:c5:06:e0:0d:89:cf:
                    5e:ff:71:36:b6:03:1e:e6:98:03:cf:30:4e:a2:fe:
                    b1:aa:10:39:a7:1c:13:2c:0d:8c:ae:58:a6:60:bb:
                    a8:d1:7d:0d:38:91:b4:b7:40:1d:5b:6f:1c:9e:d7:
                    54:c2:2b:fc:46:44:fc:8f:94:22:ae:b7:93:7a:70:
                    3d:13:1f:2f:e1:54:99:27:ff:67:c5:e8:ee:00:c8:
                    de:43:46:0e:59:71:37:55:fa:49:03:af:33:00:6f:
                    df:e8:f8:0e:ab:0e:29:65:68:5f:4a:40:9e:70:c4:
                    26:a3:58:7b:3b:70:09:6a:74:e1:d5:3d:35:27:18:
                    12:8d:74:6f:9e:84:19:c6:d4:e1:d1:9e:6a:28:6f:
                    e1:da:85:4d:ab:03:7e:fe:5d:0c:ae:ca:40:4c:5e:
                    ce:d4:8f:46:29:6d:ea:14:8b:40:0f:4e:10:be:64:
                    ff:b1:58:aa:ca:0f:45:93:b6:67:2a:e0:37:b3:81:
                    d3:be:99:7f:04:3c:cf:9f:4c:d6:21:d4:3d:1f:75:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:27:CA:3F:B6:DC:B6:A0:35:00:A8:CB:BE:0B:D0:2A:81:3B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ec6ded7-868c-3139-9659-42618eccae73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6c:80:1a:d0:a2:61:c0:ab:72:d3:5a:fa:c8:29:ad:7f:fe:
         d5:1c:c9:4c:3e:e0:35:d5:d9:9f:ef:a2:d8:17:1b:64:db:5e:
         21:bb:6d:db:12:ef:04:e8:5e:ea:9e:35:40:0b:76:9c:16:8f:
         62:87:c1:8e:d0:e0:fc:92:07:c0:86:27:8f:df:44:39:02:3f:
         82:58:a3:fb:67:3a:40:e3:c3:6d:a3:36:58:04:5d:57:61:25:
         f4:60:f3:0a:9c:c4:6a:0e:eb:3a:6a:b8:d8:65:38:01:4c:60:
         2d:3b:b9:8e:fa:42:98:40:a4:ba:93:2e:12:c1:50:d6:18:62:
         fe:9b:ea:41:f4:63:06:59:91:e7:06:cb:44:df:77:2c:89:ee:
         76:a0:a9:27:8c:e3:e1:ea:9c:92:03:c7:0b:cb:3a:bf:01:8b:
         d1:33:81:2f:52:5b:07:26:c9:26:e2:0c:f5:72:c2:d9:7b:54:
         d5:91:38:5f:21:8f:3f:e8:38:47:18:ef:34:94:c2:6e:7c:5d:
         bb:bb:7d:03:e1:40:b8:7f:cf:94:0b:1d:d4:80:7b:45:7e:ba:
         35:fd:5a:b5:3d:69:0f:1a:48:3a:ef:a2:7c:d2:9e:a5:f1:06:
         6b:32:40:7c:5e:a4:b4:72:d7:74:59:5c:06:32:f5:b4:a2:7c:
         26:6d:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:28:39 2026 by rpki-client