Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b406e1a-e8f5-34b2-864f-c8a031e2f49e.roa
File:                     8b406e1a-e8f5-34b2-864f-c8a031e2f49e.roa (raw, json)
Hash identifier:          ZM4n/T2PA93BZqL6wD3yHc+E/lMN38TZM4erks3uLik=
Subject key identifier:   D0:49:31:7E:C1:73:79:F1:E2:68:46:0F:03:77:D3:2B:E5:AA:94:AA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4D5DE4B8EC7A0A0C64350DC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b406e1a-e8f5-34b2-864f-c8a031e2f49e.roa
Signing time:             Sat 26 Sep 2026 10:41:53 +0000
ROA not before:           Sat 26 Sep 2026 10:41:53 +0000
ROA not after:            Fri 25 Dec 2026 11:41:53 +0000
asID:                     2914
IP address blocks:        50.3.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:5d:e4:b8:ec:7a:0a:0c:64:35:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 26 10:41:53 2026 GMT
            Not After : Dec 25 11:41:53 2026 GMT
        Subject: CN=7b16186a-66bc-4b0d-869e-656b60d2a6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:1a:e5:fd:38:33:32:9c:53:4e:b7:99:9b:
                    c4:98:4a:a3:d1:36:c1:cc:75:27:da:a5:b9:f4:f4:
                    2c:81:6d:d5:af:aa:7d:30:51:9c:fc:50:d6:52:54:
                    c8:04:3e:ec:c9:0b:90:7e:02:eb:b8:21:c5:6d:5a:
                    2b:66:3b:d9:99:ba:38:04:6b:8e:48:b9:8a:c5:d5:
                    9d:be:41:a2:95:cd:68:c6:a2:01:45:99:ce:16:c5:
                    9b:66:40:d0:25:c7:bd:bc:67:7f:e1:dd:b3:05:46:
                    65:60:23:16:58:05:f0:52:44:d9:0b:d8:99:82:05:
                    21:db:5b:f8:15:84:08:45:e4:02:56:1b:71:86:37:
                    ea:73:13:cf:67:68:22:5b:c8:62:6e:84:1d:50:94:
                    88:b8:cc:b1:67:dd:72:75:ac:19:a2:34:79:b2:3c:
                    07:eb:0d:5d:bb:df:f7:b1:32:a5:43:01:0e:e4:c1:
                    93:1b:3d:a1:1a:76:09:90:09:ba:9d:8d:30:ad:2e:
                    dd:2d:61:ce:29:d0:66:8a:d7:65:5d:c3:19:05:45:
                    e5:7e:2e:a3:d3:e2:9b:5b:50:30:7b:04:71:b6:6f:
                    1f:25:12:11:3e:9d:b5:ac:b9:02:cd:d0:d7:52:b8:
                    31:bb:9d:8d:25:35:53:e6:9b:07:2f:8e:d6:83:75:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:31:7E:C1:73:79:F1:E2:68:46:0F:03:77:D3:2B:E5:AA:94:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b406e1a-e8f5-34b2-864f-c8a031e2f49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:85:95:2a:dd:9e:e1:de:6d:a9:b5:9a:65:87:cb:c2:cd:
         ca:0c:9e:8f:5d:71:6b:46:7a:c2:0b:95:2a:fb:b8:90:97:71:
         56:d8:5e:a9:95:e3:c4:4d:82:2b:da:55:f5:d3:18:a9:f3:da:
         94:cd:fb:de:d0:53:66:86:b9:6a:44:e3:4c:b0:68:8d:6b:d1:
         98:39:be:23:11:66:5f:25:aa:d4:7a:ac:f3:87:79:35:fd:2b:
         f4:46:d9:d2:fc:6f:72:34:70:25:a0:61:da:b5:7e:4b:ea:7c:
         d7:b1:fb:fa:d3:96:4c:c6:26:34:c5:7f:c4:94:ce:41:c6:91:
         42:55:17:11:3d:38:93:5c:34:69:43:c4:e5:78:8b:55:db:55:
         3c:84:db:ea:c9:f6:fc:18:30:1f:34:51:ce:6a:fd:34:d4:ea:
         1f:ac:72:7f:d9:a7:71:11:cb:11:97:a3:d6:d3:17:19:e1:10:
         7d:c3:7c:c6:36:df:2e:b2:f3:75:eb:68:40:3e:d3:d8:4f:00:
         7d:a6:c3:b5:d8:1d:90:54:46:4f:bb:ff:06:e9:dc:f8:78:23:
         8b:4b:c5:40:d9:f2:b8:ed:85:d5:b0:17:03:7d:22:18:56:49:
         1c:ee:77:d2:d7:c9:7f:56:14:b3:9f:e3:e7:70:33:9e:07:76:
         66:df:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:51 2026 by rpki-client