Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa
File:                     85b3a9a3-978c-327a-b272-c6ffd019c81c.roa (raw, json)
Hash identifier:          AdoEhw2IA4lqhzN9behl1CDVznEFjSSaNKbaZfGIlcU=
Subject key identifier:   4B:7A:EE:A4:80:19:7D:85:A1:7D:60:DC:CD:36:E1:96:42:AF:D6:55
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ED64B8ED352B0DD08CB236440
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa
Signing time:             Fri 14 Aug 2026 19:03:44 +0000
ROA not before:           Fri 14 Aug 2026 19:03:44 +0000
ROA not after:            Thu 12 Nov 2026 20:03:44 +0000
asID:                     6079
IP address blocks:        50.3.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:4b:8e:d3:52:b0:dd:08:cb:23:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 14 19:03:44 2026 GMT
            Not After : Nov 12 20:03:44 2026 GMT
        Subject: CN=b2b1bfd7-855b-420d-9522-e49474f8f3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:3f:12:fb:f8:3d:ac:41:08:16:4e:93:f4:
                    ef:9c:ee:46:54:c1:71:40:81:47:62:78:0e:ce:18:
                    0f:a2:0d:b3:88:47:fc:17:d7:f2:b1:2f:92:01:f5:
                    47:e0:aa:2e:5b:6e:ac:21:93:d1:02:14:a5:cc:5b:
                    cf:8f:f7:68:33:98:e8:55:7b:28:da:a1:ee:36:7f:
                    e8:4f:4d:29:43:fd:a3:88:aa:20:28:14:67:42:5f:
                    f9:28:93:18:ac:4a:80:ef:19:52:1f:cd:bd:d5:05:
                    15:42:89:bc:0b:ba:69:80:70:0f:bb:80:7d:38:93:
                    87:a7:2c:29:2b:72:3b:e7:ba:48:97:52:67:1a:36:
                    c4:57:19:f1:4f:9f:fd:ca:09:14:7c:ca:92:07:33:
                    fe:3e:58:41:ef:bf:0f:ba:5d:c2:e2:af:7a:86:7d:
                    df:af:57:34:0d:e7:42:c0:e7:a7:44:9e:fb:b9:a1:
                    6c:a0:ad:ce:48:05:3e:ad:e1:0b:7c:47:14:2f:4c:
                    50:7e:68:26:e5:44:da:10:1e:f2:cf:bf:38:bf:da:
                    3f:2c:8e:6a:0d:62:5b:af:23:4c:70:74:8d:17:b7:
                    2d:a5:f5:99:61:10:14:02:ac:95:e8:2b:a9:c9:6d:
                    d7:3a:bf:60:da:8c:db:b1:bc:20:7e:46:09:6e:23:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:EE:A4:80:19:7D:85:A1:7D:60:DC:CD:36:E1:96:42:AF:D6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:26:52:95:cf:7f:23:c9:aa:bf:7f:50:25:f5:ef:82:1f:
         ad:5c:fc:85:a1:6b:3d:98:26:14:6a:42:60:01:88:fe:4f:15:
         d1:36:43:14:0f:1a:6f:c0:53:7c:6c:eb:1f:74:ba:cf:0b:56:
         af:45:fe:18:84:24:00:d1:84:1c:a0:3d:86:e7:81:5e:9e:3e:
         4a:ad:a2:8a:da:e7:55:61:ca:2e:be:0c:ad:76:b6:bf:99:b3:
         bd:6d:08:3e:ab:e7:45:07:9e:63:86:98:f4:f7:10:cc:a0:46:
         0e:83:9b:6e:1c:25:cb:af:c3:13:a4:4d:97:a6:77:58:3e:03:
         7e:4c:9e:e3:06:25:22:ad:2d:0f:5e:a8:dc:9a:5d:10:78:96:
         3a:4a:3d:ad:a0:4a:3b:7f:31:87:c3:25:f1:fe:5a:f8:2c:a4:
         76:93:1f:78:f6:19:66:65:23:0d:14:96:05:16:d0:f3:d2:ef:
         49:1a:3a:91:2f:41:cf:19:27:eb:23:ca:88:7f:bc:19:d5:56:
         64:99:91:99:ec:44:1c:35:45:38:86:97:b2:e4:37:68:6a:e9:
         a3:0c:c9:88:43:8c:66:5f:30:b2:fd:16:5f:a1:2c:02:05:c5:
         7f:a2:86:bc:b1:9b:e2:d0:f7:b8:e6:6a:8f:56:0a:74:f8:29:
         22:e2:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:57 2026 by rpki-client