Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/80712d91-1aa2-3b73-bb4e-70a7be46c5b0.roa
File:                     80712d91-1aa2-3b73-bb4e-70a7be46c5b0.roa (raw, json)
Hash identifier:          IAMIsC9c/zg1KIFmUQqxxbpBb7kxVu851M0mliC+qvI=
Subject key identifier:   F0:69:B8:78:25:3A:61:92:96:28:B8:31:21:C9:57:D1:78:0A:2A:70
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ECCC8A4F8AD9B950D71412F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/80712d91-1aa2-3b73-bb4e-70a7be46c5b0.roa
Signing time:             Tue 11 Aug 2026 09:17:41 +0000
ROA not before:           Tue 11 Aug 2026 09:17:41 +0000
ROA not after:            Mon 09 Nov 2026 10:17:41 +0000
asID:                     20473
IP address blocks:        50.3.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cc:c8:a4:f8:ad:9b:95:0d:71:41:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 11 09:17:41 2026 GMT
            Not After : Nov  9 10:17:41 2026 GMT
        Subject: CN=31b6c96e-7f9d-4986-a2a1-8d41a971db8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:76:03:e9:34:c2:88:7a:e6:30:2c:02:f5:
                    37:ce:ee:b8:cc:d3:60:17:57:c3:06:4e:80:9d:7b:
                    27:fc:77:dc:01:da:e8:5c:55:36:64:f4:17:ec:5c:
                    2d:42:af:4e:aa:97:30:79:02:2f:6c:3e:c1:9d:60:
                    92:ca:a9:7b:5a:c5:47:c4:67:14:0c:72:f2:ed:84:
                    2f:a1:f5:1a:f2:12:4c:56:28:da:a5:d9:bf:a5:6d:
                    ed:62:14:70:23:35:77:54:11:8b:83:78:d6:62:24:
                    af:2e:8d:6e:88:17:ad:30:9f:5e:80:2a:b3:22:6a:
                    1f:59:d2:b5:b3:ad:ff:c6:b0:b7:4c:4d:b1:e2:b9:
                    fd:43:0b:7a:f0:bd:02:70:ef:a8:d1:3b:48:ed:b8:
                    96:01:bf:5c:27:a7:57:36:3e:e1:30:2b:f0:d2:f2:
                    ca:98:ad:87:af:07:78:0d:04:c3:2a:e3:a8:c9:ed:
                    94:73:e0:87:b6:ac:2e:19:dc:da:c5:db:35:3a:05:
                    c3:df:67:12:f7:1a:25:2c:f0:fd:c5:73:8f:32:95:
                    02:d2:b0:cf:61:75:d4:e2:41:d3:cd:cd:8f:ac:14:
                    e3:40:c1:94:07:c1:26:88:27:e5:df:f4:ba:3e:b4:
                    8d:ec:45:e2:78:78:98:0f:5b:27:33:5c:3f:6a:65:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:B8:78:25:3A:61:92:96:28:B8:31:21:C9:57:D1:78:0A:2A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/80712d91-1aa2-3b73-bb4e-70a7be46c5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:93:0e:bc:3c:d2:b2:4f:cf:eb:3e:81:92:ed:f5:18:7e:
         ac:76:2f:7f:ce:fa:73:3a:13:5e:9a:de:4f:7c:3c:44:73:93:
         ba:b6:37:da:77:9a:ec:ac:c9:8e:ae:41:52:4f:50:0f:4f:73:
         68:cf:34:83:85:2d:c9:c0:91:cf:c5:66:c8:44:28:c1:3a:b7:
         b8:3e:05:b1:11:fd:84:5e:4a:e1:15:02:8f:99:ae:05:d8:db:
         ea:b6:82:3e:19:26:95:9c:08:32:c4:7f:cd:9f:6b:04:3e:69:
         0b:30:4e:0b:a3:20:7a:43:a0:91:7e:18:1d:4f:f3:64:3c:a1:
         a0:f7:52:08:4b:82:0d:9c:28:27:eb:3c:d7:66:01:ae:33:34:
         7f:9f:93:7f:88:62:31:c1:f7:81:e4:b8:08:57:5e:77:a4:17:
         e3:b7:94:64:71:4b:5c:80:fe:65:02:b3:ff:3b:fc:f1:8f:3c:
         06:2e:84:0d:43:0b:9d:e6:9a:a8:09:cf:7e:66:1f:2c:f0:70:
         27:53:fc:55:2b:68:cf:91:ae:7a:11:2c:02:cf:53:f9:5e:aa:
         1e:52:00:29:50:65:a2:1f:d0:56:bf:7a:47:7a:8e:82:49:b3:
         ce:ea:23:b8:d1:ed:53:74:e3:3f:6a:29:0d:c8:19:83:1e:25:
         f2:a6:67:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7MyKT4rZuVDXFBL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDgxMTA5MTc0MVoXDTI2MTEwOTEwMTc0MVowLzEtMCsGA1UEAxMk
MzFiNmM5NmUtN2Y5ZC00OTg2LWEyYTEtOGQ0MWE5NzFkYjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYt2A+k0woh65jAsAvU3zu64zNNgF1fDBk6A
nXsn/HfcAdroXFU2ZPQX7FwtQq9OqpcweQIvbD7BnWCSyql7WsVHxGcUDHLy7YQv
ofUa8hJMVijapdm/pW3tYhRwIzV3VBGLg3jWYiSvLo1uiBetMJ9egCqzImofWdK1
s63/xrC3TE2x4rn9Qwt68L0CcO+o0TtI7biWAb9cJ6dXNj7hMCvw0vLKmK2Hrwd4
DQTDKuOoye2Uc+CHtqwuGdzaxds1OgXD32cS9xolLPD9xXOPMpUC0rDPYXXU4kHT
zc2PrBTjQMGUB8EmiCfl3/S6PrSN7EXieHiYD1snM1w/amWa0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBpuHglOmGSlii4MSHJV9F4CipwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODA3MTJkOTEtMWFhMi0z
YjczLWJiNGUtNzBhN2JlNDZjNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAS6kw68PNKyT8/rPoGS7fUYfqx2L3/O+nM6E16a3k98PERzk7q2N9p3
muysyY6uQVJPUA9Pc2jPNIOFLcnAkc/FZshEKME6t7g+BbER/YReSuEVAo+ZrgXY
2+q2gj4ZJpWcCDLEf82fawQ+aQswTgujIHpDoJF+GB1P82Q8oaD3UghLgg2cKCfr
PNdmAa4zNH+fk3+IYjHB94HkuAhXXnekF+O3lGRxS1yA/mUCs/87/PGPPAYuhA1D
C53mmqgJz35mHyzwcCdT/FUraM+RrnoRLALPU/leqh5SAClQZaIf0Fa/ekd6joJJ
s87qI7jR7VN04z9qKQ3IGYMeJfKmZ/Q=
-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:43 2026 by rpki-client