Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa
File:                     f643914a-37cf-3512-b7c7-357c3984daab.roa (raw, json)
Hash identifier:          1S2EIpBgslsGme7DEy98GevJmRJghL9ezVSYVdc18fU=
Subject key identifier:   23:74:DE:22:3E:37:7F:B9:E4:04:27:51:4E:8F:C5:18:52:AD:51:E4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DFBD6285756054F46853B8DC8
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     32043
IP address blocks:        50.2.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:28:57:56:05:4f:46:85:3b:8d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=3170f306-f8b5-4466-bc46-99eb63ba3f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:30:88:f8:82:cc:e8:d9:88:5d:e6:1f:2e:
                    c2:a7:da:cb:cc:32:c7:28:88:ae:54:eb:ec:17:35:
                    4e:bd:d4:84:9a:1d:55:46:f5:69:c7:25:4d:47:13:
                    c7:31:d0:38:ec:65:8f:9d:45:36:d2:f9:5d:22:7f:
                    d1:27:4c:28:fe:97:64:eb:5a:3c:97:e4:bc:0c:f6:
                    bd:cc:b3:a9:ab:73:e3:4a:87:ed:60:f0:47:b2:96:
                    5d:67:32:33:6c:6e:2b:a7:95:d8:05:fb:6b:49:0b:
                    b2:84:2f:0f:f8:df:c9:be:05:74:cf:8f:3e:0e:db:
                    c2:e3:7e:47:af:a3:4f:c1:8b:42:c6:62:dc:fb:50:
                    12:e6:b9:6e:27:f8:c8:ce:35:91:d7:38:71:8e:6b:
                    ed:28:c8:a6:91:5c:ba:ca:02:ca:74:ed:fa:f2:50:
                    9b:5a:40:55:e6:a3:e6:6e:0b:aa:67:91:90:25:b6:
                    37:36:53:d5:69:fa:e3:dc:34:4b:fa:5d:95:59:42:
                    89:68:ac:62:70:9b:01:13:6f:64:ff:59:f1:a0:c8:
                    8d:93:72:f3:8f:4b:00:de:59:6d:fa:a2:50:b3:50:
                    64:25:b9:22:25:9e:df:fe:15:0b:f2:6b:cb:80:4a:
                    61:8a:7b:fb:8f:19:60:7c:96:c6:bf:59:d8:16:5e:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:74:DE:22:3E:37:7F:B9:E4:04:27:51:4E:8F:C5:18:52:AD:51:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f643914a-37cf-3512-b7c7-357c3984daab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:40:25:0e:92:44:66:2e:57:b3:84:98:20:eb:04:3d:56:
         1b:87:a2:6b:be:10:23:9d:b4:13:28:02:c1:12:1d:2c:eb:44:
         a0:85:15:b1:cd:54:37:5d:f8:7f:f2:81:83:52:ed:8b:eb:08:
         3f:e3:83:c9:cd:f8:6b:3c:5f:1f:b3:22:22:94:ae:15:90:bf:
         0b:d9:de:6f:5f:f4:85:a3:17:ed:6a:f0:f1:e0:f1:6c:45:35:
         f3:34:c1:b2:20:b5:99:fc:6a:c3:81:e6:a6:2b:b3:9c:1d:a0:
         38:b4:1c:0b:16:b6:39:6f:99:1c:91:e7:dc:f3:27:9e:6f:15:
         db:35:17:cf:f6:9e:87:41:72:09:e9:18:ec:0c:f0:bd:a1:cc:
         04:7c:d1:d0:bf:aa:00:3a:67:83:3a:13:80:2f:cd:cb:31:21:
         fb:f7:d6:8b:72:3b:95:cc:e8:ac:77:e4:d7:bb:c2:38:eb:6d:
         09:99:69:f4:e5:cb:5c:3a:29:86:cf:b5:92:06:1a:50:cb:90:
         35:8f:e5:af:c4:87:fe:c6:d6:85:87:e3:75:e3:e9:29:82:41:
         a9:f2:88:b4:2d:b4:4c:27:d6:5f:bc:19:55:ac:60:34:8a:bb:
         27:0b:28:3a:ec:00:bf:7d:50:8b:20:8d:cb:52:0f:6d:64:e4:
         b5:c2:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 08:15:07 2026 by rpki-client