Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa
File:                     a8794f77-a850-3e62-bbce-6ba1c46301d2.roa (raw, json)
Hash identifier:          ewoaEMvnYbOGh/d5aQeD7NQP654RuliNAIf9WXEzUTA=
Subject key identifier:   8A:AC:C2:E5:EE:9A:FB:05:2A:3C:AF:4F:9F:1B:F4:DB:64:6F:66:ED
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DFBD628BCBC50B9ED712B3B80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     32043
IP address blocks:        50.2.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:28:bc:bc:50:b9:ed:71:2b:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=e606b5fe-e49e-4ab3-9e41-32ce27e40a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:9b:7c:b2:03:47:f7:93:c1:c1:14:de:45:
                    9b:70:a1:8d:c0:a4:41:9d:3c:01:ae:bc:58:01:ab:
                    25:a2:f1:aa:0c:6d:24:35:7f:3a:ce:4c:59:ca:29:
                    2e:fe:ec:78:58:2b:53:8e:4f:52:14:a6:64:d1:b7:
                    6e:1b:8d:f3:a3:ad:10:15:d5:d0:75:61:c9:f2:89:
                    07:8f:73:3c:b6:af:84:e8:ad:7a:44:e9:74:21:09:
                    d4:18:70:05:29:d5:f9:c1:ae:c8:51:d7:0e:94:e9:
                    14:18:a3:3e:e1:9d:2c:32:63:2a:77:f7:f7:77:89:
                    cf:52:29:59:57:1f:66:25:de:af:2d:79:e0:75:5f:
                    27:75:d8:eb:5b:6c:49:68:49:c4:2d:61:8d:ad:cf:
                    d7:20:74:3f:a6:fd:78:1b:00:06:5a:1c:65:37:f3:
                    c6:40:d5:4e:40:9f:07:4f:8d:36:32:a8:f1:1a:d4:
                    82:4d:35:94:1b:d2:bf:51:ad:c1:6e:14:6e:85:5e:
                    f0:aa:a1:b3:fd:a0:53:6a:08:fb:0e:b7:79:03:9c:
                    44:9e:6d:17:62:1c:2c:73:5c:d5:e8:d5:e5:f0:ae:
                    f4:3a:be:93:5d:9c:18:67:89:e7:81:74:7f:1b:8c:
                    6c:e9:6d:f1:f8:81:c6:69:5d:e4:d4:11:1d:e5:8c:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:C2:E5:EE:9A:FB:05:2A:3C:AF:4F:9F:1B:F4:DB:64:6F:66:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:98:5e:98:7f:29:7d:68:b3:9e:11:90:d8:29:0a:1b:f1:da:
         c5:83:a3:e4:00:bf:3a:e8:37:14:53:30:94:a4:d8:67:b8:0b:
         f9:72:a1:ca:ad:7b:be:03:2e:07:fb:29:5e:21:e9:13:2d:04:
         11:1f:3e:ac:e1:f4:1c:c8:2f:12:7c:5d:ab:65:24:16:6b:10:
         cb:6c:72:ed:0e:d2:50:97:82:2a:d8:48:e2:4e:af:33:6e:ce:
         44:c4:e6:c9:0c:c9:6e:a1:c2:a5:e5:51:97:60:a7:5e:97:f1:
         30:ef:18:f7:e1:ea:fe:e5:71:90:c6:dd:ef:0d:61:08:9a:29:
         c9:24:dd:c4:7e:8e:5b:46:3e:50:41:87:ac:d6:2b:45:b5:85:
         d1:6c:ca:06:ac:75:b2:58:de:0d:77:17:04:4e:fc:b5:86:0f:
         72:44:8e:65:ab:01:29:6c:42:5b:b8:88:96:df:43:22:61:4b:
         f9:ce:a1:3c:30:87:d7:93:4d:a4:b9:76:e4:38:8a:a2:28:07:
         61:cf:48:23:84:be:30:e4:35:31:04:d6:f5:4b:5b:61:66:ff:
         34:4b:91:17:87:a7:96:be:69:af:87:b5:80:58:ac:67:8f:78:
         00:3e:1e:d6:7c:9a:ff:9c:82:1b:bd:64:d2:b8:cb:d2:83:da:
         0d:26:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 08:13:58 2026 by rpki-client