Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f1fd6f91-f203-34f6-808e-229a7043f6cf.roa
File:                     f1fd6f91-f203-34f6-808e-229a7043f6cf.roa (raw, json)
Hash identifier:          XeTxcfofGcNykYhnq85jqwbD/h4CDWFLy54knK5tSTE=
Subject key identifier:   30:0A:E5:BE:43:84:C6:ED:13:84:81:61:17:A6:27:81:50:F7:59:CB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4988E599D43737220A510620
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f1fd6f91-f203-34f6-808e-229a7043f6cf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        50.3.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:e5:99:d4:37:37:22:0a:51:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f40ac22e-44a8-4ca0-8ddd-d35dd9363bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:84:fd:6f:ab:6f:a3:b7:f5:8e:ec:8a:69:
                    3a:71:09:7d:88:80:c5:0d:f7:88:c3:6b:30:d2:d5:
                    aa:de:b4:af:4b:42:98:f4:99:f6:4c:dd:5f:5c:8a:
                    ff:f4:01:c4:bf:30:3c:87:5f:39:23:44:2d:e5:89:
                    79:59:12:68:c5:de:79:4a:90:63:e6:14:08:cc:82:
                    e9:19:af:3e:19:f7:1d:be:a0:94:76:0b:97:19:1b:
                    a3:74:df:bb:e8:8f:fe:bc:a3:1f:da:b1:4c:b7:2b:
                    f4:00:41:36:ae:15:52:f5:0f:bd:2b:f0:d0:d2:26:
                    12:22:89:48:98:67:dd:ee:49:79:2e:1b:46:67:dc:
                    8c:29:d6:87:39:ad:60:8d:27:56:12:08:9e:2e:da:
                    bd:c1:c0:4d:cb:77:4e:39:24:4e:ca:db:2b:ba:66:
                    5f:fb:a9:11:8d:94:69:02:57:88:27:1f:08:d1:e2:
                    26:c7:e5:81:c0:e4:e3:7c:58:da:94:2b:60:40:e1:
                    52:b2:41:83:4a:cb:03:75:12:45:ee:49:95:37:90:
                    96:06:91:13:70:0a:62:10:72:a8:e0:4d:87:0d:42:
                    e4:b9:1b:a2:89:eb:45:e8:6c:80:86:e4:19:38:c7:
                    76:cc:ab:1f:7e:04:7b:86:dc:2d:8f:76:96:29:3b:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:E5:BE:43:84:C6:ED:13:84:81:61:17:A6:27:81:50:F7:59:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f1fd6f91-f203-34f6-808e-229a7043f6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:6e:c1:68:8d:53:60:73:42:06:64:0b:b1:c4:b3:e8:f1:
         a5:bd:72:b6:5f:2b:21:fe:3c:32:cb:ba:52:3d:9d:9d:64:bf:
         88:8d:8a:b8:b3:9c:c5:19:0f:a2:52:75:ad:c9:22:c6:39:97:
         f7:d0:15:26:27:10:d9:d6:4f:82:7d:af:87:3c:bc:f1:6e:be:
         c5:83:41:1b:90:89:18:58:c9:df:d0:e7:ba:0f:2d:59:3e:b5:
         bc:d6:b2:31:a5:95:d2:db:34:6c:b6:99:0b:f0:52:91:6e:0f:
         33:9b:6e:39:4e:ab:c3:96:4b:41:cc:27:d7:7a:3b:75:9e:58:
         1e:85:df:5e:a0:25:af:7e:cd:1d:af:1f:2b:8a:47:90:85:46:
         f7:bd:a1:65:00:5a:c7:92:69:c8:e8:0a:3b:f4:fa:5d:0d:a4:
         49:59:c3:7b:89:bf:13:9d:06:15:2d:11:d5:49:84:ac:57:04:
         20:9c:55:11:34:9a:b1:e7:51:ea:f0:20:be:67:c1:9d:bb:25:
         ec:a6:50:a6:02:ed:65:0a:c8:f6:c6:a0:96:08:29:3f:24:0e:
         bd:f3:aa:a8:ae:f3:51:4f:1a:c7:f6:ab:03:ef:c1:6f:f3:99:
         e5:29:cc:c0:8c:e1:94:26:0a:7f:67:fa:aa:80:03:f6:78:81:
         e2:7c:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:07 2026 by rpki-client