Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa
File:                     0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa (raw, json)
Hash identifier:          NqwDDYYetrdBql9vTuYmOlDFgZQ8jw3BL8bciIiMSRg=
Subject key identifier:   80:49:D4:A1:E8:DA:57:19:69:BD:1A:0E:3B:4C:59:3D:8B:63:8B:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB57C68A41CB59DEFC823B800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     2914
IP address blocks:        50.114.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:68:a4:1c:b5:9d:ef:c8:23:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=7d339796-5c66-4db9-b9d3-0b9221945f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:d5:75:9a:88:72:93:79:78:f0:89:0f:f7:
                    14:61:14:29:ec:fc:07:8e:f7:4d:81:f6:08:23:4a:
                    01:c3:1f:11:25:35:63:90:29:5c:c3:79:bf:99:b7:
                    bc:2b:60:6c:b1:e2:84:5e:94:91:e5:70:d7:cf:c0:
                    29:09:3c:87:28:7c:b2:0d:42:6d:73:ab:f9:bb:9c:
                    51:34:9e:07:cd:58:0e:bd:be:10:56:4d:57:d5:be:
                    d1:d4:7f:7f:e3:42:bb:bb:b2:a4:49:bb:c8:5c:84:
                    d9:8c:66:ac:a4:23:c2:b6:eb:0e:4f:c6:87:3e:30:
                    13:2d:af:4a:ea:2d:46:b4:9d:81:89:75:69:94:03:
                    f7:eb:e9:62:2a:25:5f:82:24:ea:2c:7e:80:e9:51:
                    eb:94:8f:36:82:84:19:5e:11:0d:b4:16:16:21:8c:
                    ef:33:10:b9:83:f0:bd:53:81:42:9c:3c:d6:92:1d:
                    cf:f7:27:74:45:ee:e8:39:90:a0:a8:6f:4a:16:74:
                    b9:cc:51:ef:cd:76:f3:9d:a8:89:4a:c4:ac:ef:57:
                    3a:bd:4b:34:9c:82:2d:9e:03:25:15:83:56:d0:86:
                    b8:cb:d1:fd:f7:f0:c0:3d:56:8b:fa:5f:b3:85:96:
                    98:56:3c:f4:89:51:ab:aa:3b:d1:8d:98:cd:e9:db:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:49:D4:A1:E8:DA:57:19:69:BD:1A:0E:3B:4C:59:3D:8B:63:8B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:be:56:3b:94:95:b4:a7:b0:fa:bc:64:e8:b2:80:6b:5e:
         d2:7c:b7:f0:bc:bf:d9:ff:f5:d0:14:22:0d:96:fc:e2:17:e4:
         a6:bb:6f:d3:9b:bf:1c:bd:c2:e7:13:d2:6a:dd:c3:cd:35:24:
         b9:42:3d:14:1e:34:dc:0a:b9:d8:25:e9:34:a8:74:22:ab:51:
         fd:90:bc:a5:f9:00:8c:51:8a:5b:52:8d:39:3c:11:72:3f:d9:
         06:40:10:0c:49:3d:90:0e:6d:63:01:43:53:c3:57:5d:61:ef:
         b8:27:97:cc:22:91:af:21:71:f3:02:38:be:5e:15:f3:ff:3c:
         82:97:24:38:df:93:90:b8:f1:2c:1d:19:c9:44:09:8f:21:ab:
         1c:5f:f3:0b:4a:36:4d:ef:e8:81:b7:c4:20:cc:30:6d:40:4f:
         48:c4:95:44:a3:bd:3e:ae:df:4a:e8:b8:fa:3e:14:eb:33:8f:
         08:8e:fd:34:d1:a8:02:d1:bc:97:b2:74:18:b0:1b:51:fc:91:
         1a:1d:d9:99:88:17:ee:b8:fb:83:af:a8:26:01:96:53:81:bb:
         6d:24:1c:59:8a:63:d0:d6:c3:5d:9a:3b:eb:b1:15:7e:5d:e8:
         50:05:dc:5d:98:38:80:ae:80:c1:e7:8c:84:fb:8d:bd:cb:09:
         e8:40:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:48 2026 by rpki-client