Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e79bd945-01d8-3d9d-8a80-b7d1d0503bdc.roa
File:                     e79bd945-01d8-3d9d-8a80-b7d1d0503bdc.roa (raw, json)
Hash identifier:          4PqInXHwiPimZsZ8i8OxMdE247z+mgkRMbrMe+gnd7g=
Subject key identifier:   E9:C6:67:C6:3E:98:B4:DC:5F:74:61:AA:AD:9A:65:27:84:CC:41:FC
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EFA124077DCF042FCC803B980
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e79bd945-01d8-3d9d-8a80-b7d1d0503bdc.roa
Signing time:             Thu 27 Aug 2026 14:37:22 +0000
ROA not before:           Thu 27 Aug 2026 14:37:22 +0000
ROA not after:            Wed 25 Nov 2026 15:37:22 +0000
asID:                     2914
IP address blocks:        50.3.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:12:40:77:dc:f0:42:fc:c8:03:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 14:37:22 2026 GMT
            Not After : Nov 25 15:37:22 2026 GMT
        Subject: CN=9a34c3a6-f84e-4e50-849d-ebb03efb3d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:4b:80:42:78:f7:d1:a3:bf:10:24:d1:ab:
                    40:26:31:fe:7f:3e:eb:f1:06:a4:75:49:53:56:ed:
                    28:84:05:3f:95:c6:29:81:93:8d:7a:95:2f:32:77:
                    f6:ec:02:9d:47:d3:0e:f1:06:23:7a:2e:16:01:d7:
                    2d:ae:3d:74:68:5b:45:66:43:f3:25:45:b4:31:3e:
                    93:c7:a2:80:e6:5b:96:16:16:27:d6:e7:c2:f9:78:
                    ae:c1:3d:1c:3e:a6:76:49:7e:57:38:41:67:c4:7d:
                    ab:5e:03:62:87:e3:c3:b3:0c:c9:dc:88:2f:78:5a:
                    f8:93:28:f6:4f:e7:ff:19:80:da:f8:1a:80:4e:57:
                    2c:79:3b:b4:aa:2c:d9:71:a7:de:bb:c2:72:0a:d9:
                    73:9e:21:7a:fd:07:57:0b:19:61:0a:0f:b1:17:61:
                    13:22:01:bd:2f:40:41:87:20:d3:66:9f:46:75:b8:
                    f1:44:11:a7:bb:8f:60:e9:8f:af:02:31:c3:ff:00:
                    76:d1:e0:24:6e:2c:bd:f3:f0:43:ea:85:f6:e5:44:
                    a9:19:f6:a4:41:41:91:62:c3:17:54:72:5d:1f:1e:
                    72:9e:5c:42:3a:ae:52:8f:86:91:8e:ce:b7:62:3f:
                    af:40:48:9b:31:11:bd:51:fd:08:1d:96:f9:7b:96:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:67:C6:3E:98:B4:DC:5F:74:61:AA:AD:9A:65:27:84:CC:41:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e79bd945-01d8-3d9d-8a80-b7d1d0503bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:54:cd:b3:85:56:a6:2e:86:6e:4f:51:9b:b5:9f:b9:f3:
         b9:ef:b4:59:ba:70:13:f5:5a:87:4c:5e:b6:85:ed:42:54:15:
         1e:c2:da:f9:3a:85:8b:54:66:b5:a0:f2:9d:08:f7:22:85:ec:
         88:c0:ab:94:03:66:58:aa:b0:35:3b:59:1e:7f:8c:54:2c:56:
         c7:cb:6d:e8:5c:4a:89:b0:4a:d9:b8:58:aa:02:6c:89:2c:c9:
         c5:90:24:bf:bc:ae:fd:c3:57:2a:59:0a:cd:9a:05:d9:47:bb:
         14:8c:a7:f3:09:14:d7:4b:f1:7a:50:cb:b6:95:0a:c5:1a:d3:
         33:b0:fc:8c:36:7a:dd:37:a8:f1:6d:4e:14:a2:08:a7:1e:c8:
         d2:3f:33:5a:f4:dd:1d:59:9c:dd:ca:95:62:47:06:90:15:a6:
         7d:64:62:2c:2b:ad:05:c5:8f:cf:92:f6:2f:97:24:80:1e:62:
         94:73:ed:b6:46:50:d0:35:40:0a:9c:aa:fc:ab:7e:41:77:e6:
         cc:65:0c:46:92:7a:d2:5a:3d:9c:88:15:80:e3:5f:a4:e4:75:
         7d:a3:51:c0:3c:b3:d5:4f:92:a3:5c:37:7a:26:02:63:4d:b3:
         ac:03:16:60:05:3a:1d:2a:4a:8d:0b:83:96:05:49:6d:38:a6:
         24:88:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:43 2026 by rpki-client