Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1c04be8-dcc6-3f3c-af52-a8c7466ebbd5.roa
File:                     d1c04be8-dcc6-3f3c-af52-a8c7466ebbd5.roa (raw, json)
Hash identifier:          RSgUHWnPgX8z4uMRxtP2bJqOIll/rYNnf889S5STjiI=
Subject key identifier:   EB:5D:EA:C6:9C:1B:35:7A:1C:D0:72:90:65:13:71:2C:2C:0B:F7:17
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DF4DB56D8FDF844D0AD648B80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1c04be8-dcc6-3f3c-af52-a8c7466ebbd5.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     35280
IP address blocks:        50.2.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:56:d8:fd:f8:44:d0:ad:64:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=eeba960d-0b5d-4f17-b9f8-fcf01a7e3077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:65:75:01:51:05:d9:a8:32:b0:03:63:15:
                    0b:7e:a2:08:67:b8:e2:36:2b:f8:72:fc:21:7b:a2:
                    7c:6f:b1:4d:af:b9:ae:c8:00:d0:ea:eb:77:85:6b:
                    33:bb:4f:b8:be:1c:23:89:1a:7d:ef:e4:cc:6a:cf:
                    8d:f6:bd:ce:fa:11:77:b2:1a:31:fb:96:5c:11:8b:
                    8b:68:b3:5a:f0:e1:3e:75:fd:b0:d6:08:fd:fe:09:
                    33:0e:5a:30:98:67:47:ae:07:a8:6e:18:20:55:02:
                    44:71:62:6d:19:3f:0d:8b:da:0f:ea:5a:a8:c3:60:
                    24:1b:31:d3:1d:3a:8c:6c:ed:d0:e2:5a:0f:99:a5:
                    6e:6c:bb:c3:e6:17:b5:d9:28:0a:00:4d:d9:37:c3:
                    43:59:13:17:a7:ad:78:32:0a:1e:f1:23:00:90:55:
                    18:59:63:ec:7d:f0:0c:1c:af:2b:0c:7c:f4:be:91:
                    0b:0e:21:89:35:f9:b3:96:b8:3e:ed:02:05:f6:6f:
                    ca:69:99:e3:9b:37:9d:59:60:95:39:a5:a3:e6:1d:
                    21:86:d1:3f:41:26:c3:b1:b5:54:e0:39:3b:cc:ab:
                    b8:a1:ad:8f:51:63:c9:fc:d7:d7:e0:05:8b:9f:0f:
                    b9:29:ad:78:bd:87:10:a3:8d:92:ac:34:da:11:03:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:EA:C6:9C:1B:35:7A:1C:D0:72:90:65:13:71:2C:2C:0B:F7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d1c04be8-dcc6-3f3c-af52-a8c7466ebbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:64:21:3e:3e:df:15:dc:49:ef:74:8a:49:b4:e9:77:42:6f:
         d3:d5:c4:62:6c:82:9e:56:8c:98:73:44:b5:6e:d2:c0:5e:1d:
         c2:91:03:3e:00:b4:25:09:93:a7:ea:ca:42:78:03:2f:1b:28:
         64:f6:20:70:ab:f7:70:43:59:e3:cb:3a:87:7c:e3:50:1a:d4:
         5f:99:67:68:78:b7:13:c7:f6:d6:ae:26:07:78:e5:ee:61:8e:
         10:d5:f6:ad:a0:1c:33:0c:49:b3:fa:22:4a:e4:17:cc:7d:77:
         10:e4:3c:3f:ee:a9:16:6f:20:3d:59:bf:e6:dd:b4:36:21:39:
         2b:09:89:28:42:19:07:2b:53:17:45:30:27:e4:39:3d:c1:ec:
         9d:97:44:6a:2c:69:73:91:c2:a6:61:1c:5f:b0:50:14:93:6e:
         a0:8d:35:07:ac:b6:b8:6f:90:8b:00:18:5a:96:32:05:eb:9e:
         80:a7:3e:2c:07:65:7a:15:4f:bc:eb:0d:e5:3d:86:c3:57:ce:
         02:b0:e9:1c:f7:b8:3e:59:8f:9b:00:12:8c:39:77:27:b5:4a:
         a3:0f:54:18:a1:55:ec:4d:60:ae:6d:83:1a:3d:94:62:32:f5:
         1c:29:8a:6a:81:52:9c:df:3e:bb:2b:b7:6f:18:34:df:4e:4f:
         32:ed:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:06:07 2026 by rpki-client