Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa
File:                     85b3a9a3-978c-327a-b272-c6ffd019c81c.roa (raw, json)
Hash identifier:          c6d37naBizMw5sA11M9Z+Z6g+kl56UVTqD5QV0KxYvg=
Subject key identifier:   07:99:BC:81:A3:6C:28:B2:FE:FC:32:EA:C4:B4:28:05:70:F7:A4:D6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F78E82E1389F4FCD68B1A4AC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     6079
IP address blocks:        50.3.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2e:13:89:f4:fc:d6:8b:1a:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=bcc2ca50-61b0-44aa-a6ab-2f94c6481a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:42:48:8d:80:d7:6e:fd:0c:d0:b0:86:3d:
                    b2:5e:bd:83:7b:24:56:7a:66:e5:9e:d5:83:c4:41:
                    01:c1:04:69:df:88:8b:22:cb:df:96:95:a8:94:c8:
                    d5:29:15:50:f8:7d:57:ce:20:68:58:a8:c1:6e:87:
                    07:94:bc:6b:4b:fd:24:98:e1:46:e8:82:7d:6c:8c:
                    8e:3f:a9:39:07:ca:46:ee:a1:7b:a2:9d:fe:89:fc:
                    6f:4c:f1:15:73:2f:24:a6:4a:36:0b:00:37:70:1e:
                    79:5a:04:f7:11:8f:85:a8:77:93:7e:7e:60:24:aa:
                    67:21:90:4b:05:e8:2e:91:21:70:70:66:8b:ad:b9:
                    9c:b6:97:79:2b:68:f9:4d:ae:b1:25:f3:12:3f:7c:
                    96:13:e0:73:e6:98:5a:e0:0e:91:2e:30:64:5a:54:
                    d9:01:ec:30:de:a0:2f:88:57:90:7c:83:94:0f:22:
                    c3:11:93:89:67:e7:97:42:5e:65:2e:08:84:a9:f2:
                    52:95:c5:fc:be:e7:14:39:f6:f7:f6:b6:d5:69:da:
                    37:9d:7d:99:06:a7:1e:30:1a:0f:ce:a9:59:4c:80:
                    50:f2:47:a5:5f:a9:49:8e:1e:aa:1f:39:16:42:83:
                    77:9e:3f:26:12:14:32:0a:74:be:ed:57:8c:28:91:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:BC:81:A3:6C:28:B2:FE:FC:32:EA:C4:B4:28:05:70:F7:A4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/85b3a9a3-978c-327a-b272-c6ffd019c81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:21:51:22:f2:c1:43:12:b9:8c:ac:15:2e:23:3a:a4:62:
         a2:38:6e:7c:49:6c:30:9f:65:76:eb:f1:c6:6a:44:43:6e:d3:
         31:97:7a:8a:f8:40:31:dd:97:38:06:98:93:0f:4e:2a:ba:d0:
         f1:75:b8:6c:de:dc:a8:be:10:b5:16:95:a5:48:15:54:9b:cb:
         2a:c5:c1:c1:f4:73:09:da:63:48:c7:ad:3a:57:5c:1e:7e:f8:
         77:14:db:2f:f4:d1:9f:29:07:cd:b5:6c:4e:db:43:b3:1d:db:
         42:62:66:62:d1:d4:8f:d1:6f:29:04:d1:00:60:ca:f0:a0:7f:
         5c:58:6a:e1:70:aa:ad:ab:49:2b:8b:25:a3:52:eb:93:b9:0f:
         35:3d:88:94:82:5e:01:3a:56:49:dd:93:cd:5f:3f:ef:05:24:
         d3:6c:15:28:36:11:66:4d:71:09:66:37:80:f2:d0:c9:a6:18:
         a8:7c:e0:6a:cb:91:ce:2a:2d:0c:a1:f6:e5:10:34:37:5e:50:
         cf:9a:eb:d0:55:96:19:3b:d3:99:02:a9:68:a4:8b:6c:ea:b9:
         60:30:91:bf:74:7f:af:59:18:c8:c4:1b:c5:06:00:96:a6:03:
         15:82:c6:03:4f:e9:b9:51:a0:d3:2f:59:ce:86:6b:3b:92:45:
         7a:0a:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:53:32 2026 by rpki-client