Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa
File:                     a20e0277-c9c3-3cea-abfc-1a4724175152.roa (raw, json)
Hash identifier:          SyWA/Ib65nMElvl0Z7YBfcS7Blfukssh9njg54ltd/U=
Subject key identifier:   1C:F0:D3:DD:3E:73:4C:E6:AC:FC:03:C8:DB:20:13:79:6A:C1:AE:39
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E577F3FF592423B4A32709380
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        50.3.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:3f:f5:92:42:3b:4a:32:70:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=45bedfb4-6c15-4cc5-93f5-dcd4caf7ab1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a5:95:87:7f:eb:85:31:68:45:77:77:5c:9e:
                    08:be:16:77:a0:8e:07:bf:00:bd:2a:6f:5a:c7:f5:
                    09:01:b0:eb:c0:88:8f:7d:17:e9:65:f7:56:c1:39:
                    c4:ac:00:bf:b7:47:d5:58:32:0e:f0:78:e8:9d:a5:
                    82:91:45:50:f3:cc:66:be:7d:4f:32:d3:62:bd:26:
                    99:b0:de:b3:21:9d:29:f9:d6:7c:1e:97:91:b1:51:
                    8d:3c:af:91:d7:99:f0:30:b7:64:26:6b:ce:a1:59:
                    96:96:7f:e9:7e:bd:15:71:d4:48:4d:e9:47:9a:c1:
                    04:e1:8f:2a:76:c7:4f:72:7e:38:c3:ab:bc:86:fa:
                    a2:af:0e:bd:27:dc:bf:97:ae:07:7a:ca:0b:30:af:
                    57:d2:ba:21:c9:79:c7:1b:8d:38:de:07:76:a7:d3:
                    3b:e1:54:84:95:2c:b9:21:cc:a8:b0:39:8e:4b:24:
                    ee:d6:59:d8:82:8a:73:fe:39:32:cd:02:fe:7c:90:
                    a9:df:37:dc:be:73:a9:70:d7:96:fd:23:c9:f3:74:
                    ac:10:75:54:24:51:4f:9f:c7:f1:98:39:46:07:53:
                    2f:e0:a2:ef:f9:27:61:a2:b9:24:8a:a7:16:68:30:
                    4d:55:22:44:98:06:0c:45:89:06:00:a0:9f:7a:4b:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:D3:DD:3E:73:4C:E6:AC:FC:03:C8:DB:20:13:79:6A:C1:AE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a20e0277-c9c3-3cea-abfc-1a4724175152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:bd:cc:2b:ae:e8:cd:cb:e4:43:d5:dc:50:13:c6:a3:fa:
         a2:7b:21:5e:26:07:64:31:8d:7a:27:35:66:6c:01:9c:fd:13:
         6d:fe:eb:98:36:47:b7:86:cf:d9:42:b9:91:c0:dd:29:d3:8a:
         e5:fd:f2:d9:bc:8c:03:e2:4e:37:1d:24:45:45:81:3b:76:9e:
         90:39:cf:9e:28:1b:6b:09:46:36:4d:cb:de:85:46:f2:27:03:
         dc:7f:a9:e0:27:c0:15:3b:9d:1f:fd:21:e9:a4:a9:06:da:cc:
         61:02:57:39:f0:e0:11:ea:7a:8c:49:aa:09:65:f2:c3:15:30:
         0c:b6:b7:2b:76:16:b8:48:2b:e7:e3:0a:7e:ba:7d:80:56:a2:
         ad:7e:d0:b2:fd:4f:c7:b8:2b:e8:64:e2:fb:c6:b1:97:3e:90:
         8f:1c:51:d6:92:be:3d:ea:2c:7b:92:15:37:a6:e3:29:f9:11:
         4d:a2:79:d9:35:66:33:e3:79:de:b8:bb:84:67:5e:16:ba:0e:
         dc:f9:6d:38:78:fa:87:ce:69:73:ed:c9:0d:96:8b:48:b9:a7:
         02:bd:0c:b7:dd:9b:7f:b9:43:7f:5c:c7:1a:4b:d1:c2:b9:bc:
         a4:82:de:ba:9e:20:0f:0c:ff:00:41:82:25:95:a1:40:0d:2f:
         fe:53:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:27:42 2026 by rpki-client