Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa
File:                     0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa (raw, json)
Hash identifier:          LPnupSVKHioM0qzMHwnc4Y11ZH1X5B/Fri3g4mllJnA=
Subject key identifier:   00:80:33:39:9D:2D:9A:3B:1B:8E:10:E5:32:26:F4:E9:3C:F0:92:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F576815AA237AD91C929E3CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        50.114.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:15:aa:23:7a:d9:1c:92:9e:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=66d4280d-0fa7-452a-94aa-a9ffc988f3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:e8:fb:55:a7:20:01:59:ee:e3:f4:08:46:
                    59:7f:e0:e7:4d:e0:de:92:27:a2:d5:f1:a3:ce:4a:
                    71:a2:bf:2a:1a:8b:97:1b:75:02:64:66:d3:be:3c:
                    f7:5e:6a:01:65:04:94:bc:30:b7:d5:ef:b1:17:24:
                    b5:5a:8a:62:c6:6f:19:8c:d6:67:98:a9:1b:93:29:
                    84:6b:3b:28:f6:54:cc:ea:28:6c:f4:1a:12:44:32:
                    45:40:71:06:75:a1:1b:47:20:cd:73:e6:84:7f:4a:
                    cd:d5:bf:f0:1d:98:eb:02:6f:bc:ab:41:57:f8:e6:
                    44:2d:95:aa:79:6f:cc:d6:10:5a:52:85:dd:dc:fa:
                    7f:82:f7:68:c2:f4:6e:b5:03:cd:0d:f4:56:6f:f1:
                    c4:a5:ea:32:6c:28:25:d8:b3:08:86:be:3f:61:f1:
                    39:8b:f2:9d:20:da:6e:da:ea:e1:a3:72:98:dd:ac:
                    f5:58:44:a9:30:42:b2:35:4c:f8:52:fb:e0:dd:db:
                    44:17:84:2f:d1:cb:e2:4a:99:10:ce:94:69:35:c1:
                    66:8d:75:0a:07:22:14:37:4f:a7:92:33:c4:cf:2d:
                    46:d6:79:88:28:3b:64:c4:ce:1a:61:e1:2c:be:3a:
                    ce:ea:d8:2b:cf:aa:3c:5b:4e:7f:e9:53:da:de:7b:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:33:39:9D:2D:9A:3B:1B:8E:10:E5:32:26:F4:E9:3C:F0:92:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b547f69-d61a-3a3b-9577-aeb774ee9dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:c9:79:95:31:1f:1a:b2:f9:c9:c7:22:b4:fb:32:64:19:
         5b:de:28:10:95:b7:26:78:c3:c7:ef:9a:ac:c0:2f:ea:4c:31:
         5e:08:b7:6a:01:a3:93:5d:4c:a6:67:1a:fa:6c:1e:aa:68:03:
         17:d0:7b:b0:d5:f2:af:58:83:75:b5:4e:67:a1:7e:54:da:63:
         5b:e8:94:31:9c:4b:a9:cf:a0:69:c7:e8:f4:b4:2c:60:23:aa:
         f6:41:46:64:6a:b3:15:cf:20:3c:ce:06:88:31:76:23:10:76:
         98:e0:32:20:e2:84:17:5d:7d:61:56:b5:a9:8d:c6:36:bb:7e:
         4b:61:8a:8e:bf:c4:7f:be:39:b1:db:fc:13:3a:92:0e:4d:2a:
         8a:77:d0:22:7d:19:f6:c0:07:3c:ea:4f:6b:3d:7f:c0:74:15:
         c1:18:18:f4:88:af:88:e4:98:9f:b9:da:4a:98:5b:a7:32:76:
         4c:8d:d2:72:42:7a:28:37:51:41:dd:2f:f5:71:43:00:7f:5e:
         33:1d:bc:c9:32:94:94:c5:d6:c5:8d:7c:8d:aa:e8:b6:fc:74:
         c6:18:50:74:b9:0d:9d:e8:c7:af:6e:16:f8:f9:d4:38:1e:6f:
         74:8d:71:27:da:37:1d:8d:51:db:5d:05:27:53:ff:f0:18:a5:
         1d:ce:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:19:02 2026 by rpki-client