Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/943d6b56-e854-3743-95d0-8b686c63756c.roa
File:                     943d6b56-e854-3743-95d0-8b686c63756c.roa (raw, json)
Hash identifier:          CI2E9XxZ2tHNtpkgKOu90P6DhgPKLMUM2/TsEOlfenI=
Subject key identifier:   F2:07:B8:7E:07:F4:59:7C:77:90:08:9C:82:A3:B2:9C:9B:EF:DD:F3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F58EAC722C243B022F20C7880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/943d6b56-e854-3743-95d0-8b686c63756c.roa
Signing time:             Wed 30 Sep 2026 13:59:38 +0000
ROA not before:           Wed 30 Sep 2026 13:59:38 +0000
ROA not after:            Tue 29 Dec 2026 14:59:38 +0000
asID:                     174
IP address blocks:        50.2.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:ea:c7:22:c2:43:b0:22:f2:0c:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 13:59:38 2026 GMT
            Not After : Dec 29 14:59:38 2026 GMT
        Subject: CN=57b8845c-06ad-4863-b178-584218e70b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:9c:8b:bd:c6:29:a3:00:b4:be:7c:d7:e6:
                    61:3b:ab:72:5b:d3:c1:2c:3b:79:58:a7:eb:70:ed:
                    35:4e:94:f2:bb:d5:fc:21:bf:a7:b8:f8:4b:ca:23:
                    85:cf:bc:6d:c3:ff:b9:8f:33:3d:3c:a3:dd:4f:73:
                    62:9d:48:a8:b6:c5:12:5b:11:a6:bf:13:18:a1:1d:
                    63:5a:d3:73:25:7d:fc:40:f2:a6:39:11:f8:39:3d:
                    86:11:ff:19:0b:fd:97:4d:9c:c0:70:18:d6:82:b2:
                    59:be:3b:ba:f8:cf:eb:eb:7e:48:68:19:ba:ae:0f:
                    6c:1a:a9:5c:48:89:79:ae:e6:19:b4:ab:70:fb:5e:
                    da:b0:dd:e7:99:51:c4:56:bd:67:45:23:df:1e:8f:
                    6e:6d:36:35:22:3b:f5:73:aa:b0:ca:ae:58:8a:51:
                    51:78:e2:58:f3:5c:70:68:0d:94:37:0c:a3:a7:5f:
                    c3:d2:6c:09:c2:ed:3f:8f:e0:80:87:55:df:f4:c5:
                    ce:bb:93:e6:a0:27:31:17:d5:80:84:0f:98:72:71:
                    f6:24:ca:a9:ac:dd:b2:8c:d2:75:00:bd:e0:93:bc:
                    c4:a9:b4:38:98:6c:c2:1b:e2:42:d8:e7:0f:b1:02:
                    3f:6f:01:3d:cd:04:a5:0d:22:23:ab:6c:c1:2b:b4:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:B8:7E:07:F4:59:7C:77:90:08:9C:82:A3:B2:9C:9B:EF:DD:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/943d6b56-e854-3743-95d0-8b686c63756c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:17:f0:01:9a:62:1a:db:5e:29:07:b5:28:8f:8e:92:57:
         a2:59:99:1b:80:01:ab:37:93:0c:1b:3c:c4:d8:0e:3a:b4:05:
         7a:fa:74:d6:85:e4:35:e9:ed:81:a0:a6:69:aa:08:6e:3b:94:
         8c:2a:b7:c2:31:14:8c:73:33:b5:b8:8f:4c:28:08:c3:20:ef:
         0f:bc:04:1f:be:6e:9f:98:37:bf:b0:47:ce:f3:d5:47:73:aa:
         ac:8d:cb:3f:84:f6:6e:f7:16:da:15:2e:11:41:4b:28:58:c7:
         5c:52:6f:9f:50:87:50:fa:27:b5:a5:2b:48:54:e1:b1:6b:00:
         42:62:7a:62:51:ef:8e:4a:59:ca:53:95:15:11:66:63:26:22:
         75:9c:eb:24:e4:c3:64:f1:1b:1d:e1:c0:b7:cf:dc:ea:90:1a:
         1f:76:7a:ee:1c:61:81:a8:23:99:e0:4a:4b:b3:9f:dd:39:85:
         5b:77:31:55:c6:d8:56:63:04:c2:c2:e4:07:8b:2f:2e:7e:62:
         2b:26:c2:51:08:14:bd:06:b5:1f:61:da:98:cf:2e:1d:5b:9e:
         52:52:a6:ed:24:d8:c5:f7:8e:dd:f7:a6:fb:3b:da:94:00:88:
         07:7c:69:cc:53:ec:5a:8e:a0:b9:be:58:ca:93:49:7e:3f:78:
         c0:19:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:40:46 2026 by rpki-client