Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d46f9e4-a599-3d62-bc21-28b388dc7fa0.roa
File:                     3d46f9e4-a599-3d62-bc21-28b388dc7fa0.roa (raw, json)
Hash identifier:          UQG7YbKp+VgakZ2fXYxJGlFvekR1D2q6El89C5FIyHA=
Subject key identifier:   A1:A8:1A:40:80:65:14:E5:C2:C3:E2:4F:0C:A4:45:26:F6:CD:9A:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E133D7FD7CA928E0B86007E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d46f9e4-a599-3d62-bc21-28b388dc7fa0.roa
Signing time:             Fri 05 Jun 2026 22:12:47 +0000
ROA not before:           Fri 05 Jun 2026 22:12:47 +0000
ROA not after:            Thu 03 Sep 2026 22:12:47 +0000
asID:                     2914
IP address blocks:        50.114.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:3d:7f:d7:ca:92:8e:0b:86:00:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  5 22:12:47 2026 GMT
            Not After : Sep  3 22:12:47 2026 GMT
        Subject: CN=7672b474-f326-4917-85f4-8a1d0d4364a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:1f:c8:2e:73:63:15:ab:96:38:bb:08:39:
                    59:b9:7b:80:96:23:7c:50:f5:fa:42:25:48:d3:b0:
                    95:f3:91:de:ca:08:77:e4:7d:f7:89:6e:f7:82:bf:
                    c2:93:0e:63:f1:8a:90:c2:26:ae:68:d0:ae:0d:b3:
                    ce:29:f9:de:75:05:3f:dd:87:48:30:6c:6c:66:ad:
                    1a:fc:d2:fd:22:5e:d3:9f:88:c9:ea:f7:23:c0:ac:
                    ed:0b:e8:79:22:04:99:c4:22:48:02:fa:d4:b7:42:
                    93:a6:6b:0e:1d:88:05:c0:66:d9:c6:1c:fe:0d:dc:
                    1b:a6:0f:9b:76:54:ef:77:7c:f2:70:f1:64:d6:d9:
                    21:3e:6f:d1:ff:c9:76:cf:8f:d7:27:9f:4f:21:d0:
                    d7:4b:16:61:13:43:82:51:a0:12:e3:e4:89:68:87:
                    c1:d5:33:75:f9:5f:22:af:5d:77:3a:69:5e:a7:31:
                    80:7a:53:8e:1f:f2:68:a5:7f:6e:5a:8c:f5:6a:69:
                    87:16:b2:09:65:89:cb:33:b0:11:1d:c7:da:90:55:
                    8f:c1:b4:44:23:a9:db:fe:2c:56:66:c5:cd:4e:41:
                    de:c1:38:aa:c0:26:43:35:12:6f:1a:8d:a3:69:0d:
                    62:c6:ba:b8:fd:d3:f4:06:9b:76:0c:a1:1b:b7:79:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:1A:40:80:65:14:E5:C2:C3:E2:4F:0C:A4:45:26:F6:CD:9A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d46f9e4-a599-3d62-bc21-28b388dc7fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:22:a6:d7:55:16:87:56:a7:9d:e1:61:84:3d:3e:cc:99:e0:
         0e:46:85:14:2b:a8:e3:04:32:10:5b:a0:3a:e1:1b:4f:71:14:
         a2:ee:c3:a9:f3:90:bb:5d:06:c5:aa:7a:a6:5a:2f:d1:00:6e:
         05:4a:99:17:58:37:c3:7f:d5:b4:07:10:47:07:98:a5:9c:29:
         6d:87:31:f9:70:a9:df:02:63:89:57:f7:20:4f:f0:48:83:c3:
         9e:69:f5:aa:c5:6c:73:4a:46:ce:68:6d:ec:08:9e:29:f4:e2:
         2e:0e:60:03:79:1e:20:1a:62:51:1c:01:bc:59:e2:d4:34:7c:
         90:13:c8:23:83:1c:7b:f4:82:77:3f:af:80:d9:bb:68:b7:76:
         9a:48:e6:7d:de:41:d5:5f:7e:f2:53:72:f3:fc:a0:65:e0:0e:
         32:90:b4:b0:a9:97:f3:b7:42:c1:01:12:c9:0d:bd:88:a9:e2:
         8b:13:ba:cd:a3:31:57:1f:84:30:a3:a3:7a:5a:40:b3:69:8f:
         91:e5:8b:ca:cd:ec:ce:a4:ba:ec:0a:17:ae:ea:c3:41:f5:4f:
         f6:66:c6:1c:e7:0f:11:f1:fd:43:44:29:57:63:6c:48:88:44:
         48:b0:60:77:06:57:30:4b:4d:80:17:00:53:d2:b3:88:8c:08:
         b7:02:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:20:21 2026 by rpki-client