Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3009b8dc-a362-3169-a4e1-751afd24090d.roa
File:                     3009b8dc-a362-3169-a4e1-751afd24090d.roa (raw, json)
Hash identifier:          M6ISVvF6CriuOYaU/hJ9H31SP+gZ+ZMqONIvsF2iF3M=
Subject key identifier:   7C:23:DD:25:11:C4:56:D8:7B:D5:17:61:BD:13:38:19:7B:A0:F3:C5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DA42CF0AB6A07598F5C7188C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3009b8dc-a362-3169-a4e1-751afd24090d.roa
Signing time:             Mon 27 Apr 2026 03:24:42 +0000
ROA not before:           Mon 27 Apr 2026 03:24:42 +0000
ROA not after:            Sun 26 Jul 2026 03:24:42 +0000
asID:                     834
IP address blocks:        50.114.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a4:2c:f0:ab:6a:07:59:8f:5c:71:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 27 03:24:42 2026 GMT
            Not After : Jul 26 03:24:42 2026 GMT
        Subject: CN=83a517e2-4499-4e31-91c0-d738d19b4a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:c0:7b:b3:7f:35:da:3e:3e:5c:7f:fb:54:
                    e0:46:39:cd:87:1b:e3:76:be:d4:7f:b9:61:9a:0a:
                    65:24:e8:81:34:c4:cf:04:da:1d:d6:2a:93:5d:70:
                    9a:42:3d:9c:3b:a9:69:a9:06:f7:ec:28:a2:57:ef:
                    9f:dc:dd:7c:97:28:26:38:97:f4:36:38:ab:0c:92:
                    32:a1:5d:b6:2c:17:d6:01:d3:f7:ab:e7:68:01:1f:
                    40:96:79:24:27:ad:60:7b:b8:07:5b:0f:15:8b:19:
                    c0:c8:fd:3b:0a:b0:61:93:83:db:78:5e:d1:b8:6f:
                    ce:ac:14:52:d0:59:cb:be:4c:75:ba:3a:29:80:e7:
                    4b:5c:fd:5b:14:7b:08:3a:49:ee:81:fe:a9:d1:da:
                    c2:2a:b3:9a:bd:95:a8:4c:57:e3:d5:8a:97:4c:4f:
                    83:16:38:d3:8f:4d:32:e0:2e:10:3f:1d:a3:3a:33:
                    d8:9b:33:87:eb:94:da:37:92:ff:14:c4:a9:30:e0:
                    ff:52:7b:63:67:63:25:e3:a7:80:6e:92:77:b2:4a:
                    79:e2:d5:84:47:62:19:84:30:b8:3e:a5:18:eb:4f:
                    ec:dc:3d:d1:05:a2:46:b7:69:2c:09:d6:3c:64:3e:
                    39:8e:23:28:7b:3e:d7:1d:17:00:c8:0b:d5:34:16:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:DD:25:11:C4:56:D8:7B:D5:17:61:BD:13:38:19:7B:A0:F3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3009b8dc-a362-3169-a4e1-751afd24090d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:08:53:d8:fb:73:65:28:02:f2:27:f9:45:5c:99:e0:ed:c6:
         91:a9:c7:c2:bc:91:5e:c8:f0:bb:19:e5:7f:e1:dc:72:bf:a2:
         5d:dc:b8:1f:d4:2b:6c:3e:5c:21:51:25:06:56:40:bf:b2:4c:
         d1:85:d7:00:8f:19:31:4d:71:0a:07:0f:d6:9c:3d:2b:27:75:
         f1:c6:4f:4f:66:2c:19:45:ab:52:18:c6:c9:d4:25:5d:b3:07:
         ce:ae:58:3f:2e:75:2f:cf:f5:8c:d9:24:9c:2d:c9:e8:f5:85:
         ca:34:73:a0:5b:53:71:97:dc:4b:33:ab:89:02:6d:67:42:8b:
         fa:c2:09:60:3d:26:52:95:cc:c8:23:d2:46:c9:2c:94:5c:37:
         1e:c6:e2:0e:86:53:7a:b4:49:a4:f7:49:38:e2:f7:51:08:1e:
         c3:21:3b:c3:fd:87:cb:b8:ab:9e:f7:77:21:c4:0d:e7:83:d8:
         e3:48:5a:1e:ac:17:82:96:75:f8:5f:ef:de:c3:a6:9d:48:6d:
         d4:ea:20:9f:be:77:ec:14:e8:28:87:11:b7:40:2a:ff:6f:65:
         76:3b:8a:20:11:9e:c6:7f:ba:87:2a:e0:47:47:c7:76:bb:00:
         f2:71:2a:bd:b7:35:28:bd:87:1b:79:de:3b:22:fd:6e:3b:02:
         d9:21:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 22:28:39 2026 by rpki-client