Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b307a108-60ff-3573-903c-08c9cfab6577.roa
File:                     b307a108-60ff-3573-903c-08c9cfab6577.roa (raw, json)
Hash identifier:          zq9/HLo8Ig/ZfHP4bwest27viIDAtKrYISyGMCv69lU=
Subject key identifier:   89:7A:49:D8:75:61:31:A8:C8:63:6A:F0:57:CA:45:2D:C2:BA:0D:E7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ECBD1CAE02284BFE71B4E8C80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b307a108-60ff-3573-903c-08c9cfab6577.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     2914
IP address blocks:        50.3.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:ca:e0:22:84:bf:e7:1b:4e:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=39a1723e-cef9-42be-99b4-effec5401c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:39:f5:d3:8f:e2:45:c8:7d:ec:74:2d:6e:
                    c3:ac:d6:56:59:36:64:fe:af:13:64:9c:ec:63:66:
                    86:7a:02:7c:06:33:e8:52:40:33:09:e1:b3:2d:45:
                    31:a1:1c:36:cb:e8:eb:be:a8:3d:ba:88:d7:22:f5:
                    30:3d:3c:db:81:79:06:cf:5a:40:71:5d:45:2a:b0:
                    b6:47:82:3b:05:e6:69:44:63:01:1f:5e:2f:76:72:
                    50:03:59:13:c3:96:04:0e:a3:02:32:be:ea:c8:54:
                    6a:ac:4f:af:72:52:cb:69:df:61:9b:9f:56:d1:34:
                    6c:81:82:08:41:f9:9d:cb:81:c8:68:58:f9:ee:01:
                    21:02:63:99:f1:ab:45:bd:26:f4:2a:5e:2d:40:db:
                    ae:46:29:d8:f1:aa:3b:1c:c9:a1:e9:40:15:78:eb:
                    59:95:e6:dd:00:ed:26:1e:8f:c4:8c:0c:ff:ee:f2:
                    a9:f6:e3:e9:ae:df:85:4c:2c:2a:0d:be:97:7e:1c:
                    64:72:b8:df:aa:90:83:3c:26:e7:87:f4:68:72:c6:
                    42:d9:48:83:95:3a:a1:f6:47:34:7b:73:a0:de:a4:
                    3e:e6:d7:83:82:91:fc:f1:03:53:8c:cc:25:f9:1f:
                    58:75:65:af:f0:e8:eb:88:ba:9c:13:08:32:21:6a:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:49:D8:75:61:31:A8:C8:63:6A:F0:57:CA:45:2D:C2:BA:0D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b307a108-60ff-3573-903c-08c9cfab6577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:38:72:64:25:4b:ab:18:6d:8e:bd:02:76:ab:f3:87:2c:
         fc:c9:e2:ff:18:35:a5:bd:b2:9e:3f:00:36:1e:e9:42:60:04:
         b7:b8:58:31:92:74:8e:2f:4b:d1:85:0f:5c:00:0c:e6:00:4c:
         bf:f3:1c:9a:8f:be:99:50:77:d9:40:9c:7a:83:b7:d0:ca:b7:
         19:7a:45:f3:5e:6e:d2:7d:ab:7b:86:ef:e6:c8:05:b0:c9:39:
         86:a9:85:d3:a1:69:34:b4:5c:20:6b:a4:1e:19:f2:c8:97:29:
         c2:6b:2f:5c:0b:12:fc:2c:d6:79:b6:fe:b9:5f:b8:e1:a5:ab:
         20:e8:69:b1:90:04:b3:82:a2:09:dd:5e:ee:59:31:a7:94:97:
         ab:a4:5d:23:61:04:a9:d8:cc:dd:8e:d4:7a:b9:c0:d0:6f:ef:
         06:0a:81:32:93:f8:31:c0:fa:43:4b:f0:62:22:3d:32:f4:3e:
         2b:bb:c0:ac:7a:82:6a:0f:19:bc:8e:67:b3:54:f5:15:3f:a7:
         2e:21:70:08:3b:c3:6b:de:e6:83:ab:df:21:a3:53:aa:3c:dc:
         77:22:bf:b9:ce:01:69:25:3d:ab:b3:60:93:63:5b:47:02:80:
         15:e2:9f:d7:a3:d1:da:71:c4:e9:98:dd:9b:75:14:f4:4a:8f:
         39:b4:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:48 2026 by rpki-client