Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d58404-31f5-3128-9cb0-4e41d1bfc6fd.roa
File:                     31d58404-31f5-3128-9cb0-4e41d1bfc6fd.roa (raw, json)
Hash identifier:          eBGm5//lPNZai3XaqduDFP6pjq5Yzr6a/2Up1SgTYgU=
Subject key identifier:   9C:88:73:18:99:A5:4A:B5:53:63:00:3A:C3:FF:C0:BD:3B:B3:86:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E0435F497AAD1417BB0C81B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d58404-31f5-3128-9cb0-4e41d1bfc6fd.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     197450
IP address blocks:        50.114.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f4:97:aa:d1:41:7b:b0:c8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=1fbe44df-7bbf-41a9-9b50-6f45a0816502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:fa:91:87:a2:a8:bb:dd:d2:ef:b9:f5:3b:
                    29:8e:8d:ba:2c:00:7f:fa:39:b7:a9:b8:17:da:b1:
                    ee:96:73:08:81:24:4e:5a:5c:69:58:93:a2:5c:c6:
                    4a:76:cd:2a:66:08:8c:83:d1:46:cc:de:6c:12:ae:
                    eb:31:dd:1c:c1:22:45:94:48:2b:4a:2a:f2:34:89:
                    66:6f:ea:fe:9c:31:2d:19:20:07:dd:50:2d:5a:2f:
                    cd:a6:9f:bf:7b:2b:18:40:f3:9c:ae:a8:f0:09:ff:
                    10:58:9b:41:4e:f7:db:3e:e2:11:59:1f:b1:85:66:
                    aa:f6:fb:51:55:0d:a2:cc:04:1d:10:03:58:e0:ee:
                    11:f0:0d:4e:87:95:bb:0a:28:c2:1e:37:73:17:22:
                    ae:3f:41:f5:d9:5a:9d:23:a9:ea:72:ad:96:e9:4a:
                    2c:19:7f:8b:e8:9c:fb:3c:51:e1:e1:6c:4d:c6:c5:
                    25:cc:b2:72:4e:5a:b5:97:0a:7c:fc:8b:ab:e1:aa:
                    59:60:1d:bf:a7:92:51:f7:81:9f:9e:43:4f:a1:74:
                    18:92:1f:0d:a9:70:42:bd:46:cc:ec:97:71:b6:67:
                    f5:79:d7:bb:50:c6:20:60:f9:de:eb:7c:70:d2:f3:
                    dc:b6:06:96:7b:fe:b8:b0:44:75:02:46:43:05:7a:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:73:18:99:A5:4A:B5:53:63:00:3A:C3:FF:C0:BD:3B:B3:86:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d58404-31f5-3128-9cb0-4e41d1bfc6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:75:bf:89:ba:46:55:e5:53:47:fe:18:04:9b:c1:06:fb:
         1d:7f:bb:bb:92:01:5b:70:cc:49:f0:cd:a5:54:64:63:75:de:
         87:81:93:f3:08:cd:43:c6:82:03:cb:b4:c0:56:61:e4:d8:b8:
         f4:21:68:dc:66:5a:01:35:6a:fa:71:58:d2:f0:16:b5:6c:25:
         1d:36:59:d0:3d:46:b7:4e:77:fc:ae:96:c2:d8:83:7b:b0:37:
         86:62:cd:58:ab:1f:d4:ef:b1:d4:ba:c5:b7:68:87:d2:c0:ce:
         8f:9f:d8:ad:69:f2:d3:9d:f3:8a:63:e5:da:09:fe:4a:19:38:
         b7:d0:14:bd:d6:cb:86:7f:c9:46:d1:86:5d:39:79:ef:74:9e:
         73:33:92:e2:78:92:f3:b6:88:e2:ba:7f:2c:c1:b5:ca:a5:9d:
         97:45:60:8a:e7:5f:d6:a7:13:75:48:15:7d:6d:38:48:a0:5c:
         80:01:30:46:b6:8d:c3:8f:87:b9:c9:f0:23:6b:52:01:10:99:
         74:99:1b:b1:9d:5d:8b:93:b7:6b:48:1a:55:3f:91:c7:1e:6c:
         92:ab:e3:58:79:4f:b6:54:ec:e5:ba:43:46:71:3e:b3:a0:8b:
         17:91:16:ac:b0:6b:63:31:8e:50:4f:b8:d8:49:57:f5:30:93:
         af:33:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:45:42 2026 by rpki-client