Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f3bbe7d-56c9-33dd-bbcf-9210ce9757e3.roa
File:                     4f3bbe7d-56c9-33dd-bbcf-9210ce9757e3.roa (raw, json)
Hash identifier:          Nwg4puuTmmTfrfVAtaCSQuyoheN2QfSkF6o6Z0btNaY=
Subject key identifier:   F2:EB:7C:DD:76:05:2A:D4:18:D1:AF:5C:52:23:23:72:B3:64:6A:97
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF4E80059C66DFCA37A147C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f3bbe7d-56c9-33dd-bbcf-9210ce9757e3.roa
Signing time:             Tue 25 Aug 2026 18:13:12 +0000
ROA not before:           Tue 25 Aug 2026 18:13:12 +0000
ROA not after:            Mon 23 Nov 2026 19:13:12 +0000
asID:                     3257
IP address blocks:        50.114.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e8:00:59:c6:6d:fc:a3:7a:14:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 25 18:13:12 2026 GMT
            Not After : Nov 23 19:13:12 2026 GMT
        Subject: CN=d02e65d7-36f2-4ec8-b8f5-75e96f378787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:52:49:72:dd:c4:80:4e:0c:31:27:04:a1:
                    7d:ee:e3:65:34:a8:2f:21:eb:f6:82:14:42:ee:cf:
                    bb:7e:ee:bd:ac:fd:97:71:70:71:72:d4:d3:86:04:
                    05:fe:b2:f0:d0:15:06:ad:44:21:1a:7e:3e:cf:7f:
                    b1:8b:3e:b9:26:59:af:27:27:fb:82:ba:c7:13:89:
                    8c:58:47:37:e0:a7:21:ab:2f:f5:23:c5:dd:84:0f:
                    80:c4:84:96:e6:24:70:6e:d9:0d:5c:27:8c:3d:fc:
                    ca:53:dc:14:b3:dc:e4:43:1f:6a:bd:99:d3:61:b5:
                    da:ef:97:30:a4:ca:74:8b:fb:23:7d:77:62:79:a1:
                    82:e2:58:87:58:47:a2:70:a7:28:ff:47:a3:e4:9b:
                    3a:86:81:0b:e3:7d:48:af:50:8e:6c:8f:34:c4:4b:
                    1f:6d:52:63:99:1c:ca:da:b9:74:1c:60:15:9c:81:
                    dd:ee:da:4f:ec:d9:92:5a:17:91:78:00:7c:6a:f2:
                    24:a3:af:b4:70:67:66:ab:ca:c4:e0:c0:0a:14:6b:
                    f9:68:ff:69:9d:a1:f7:aa:df:37:44:e4:06:5a:d7:
                    49:19:bc:a2:3e:7f:11:4b:0b:a3:b8:a7:b7:12:4d:
                    3b:d3:da:46:50:81:ba:d5:3e:57:0e:b8:89:e1:bb:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EB:7C:DD:76:05:2A:D4:18:D1:AF:5C:52:23:23:72:B3:64:6A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f3bbe7d-56c9-33dd-bbcf-9210ce9757e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:29:ec:e0:1a:70:af:e0:27:42:e8:31:b0:c7:26:23:ac:75:
         45:62:58:d2:ad:f5:62:a1:a3:22:a7:da:80:ea:bf:69:89:d1:
         1c:42:aa:90:ce:14:f8:0b:52:e0:74:29:ff:bc:94:a3:4f:6f:
         48:74:f8:78:8d:c4:48:f6:c2:aa:53:fd:80:15:58:36:24:60:
         86:ed:bd:51:67:a5:eb:a4:2d:44:e8:3d:8d:31:8d:1c:ed:77:
         54:d4:bf:15:52:61:b7:35:b6:97:06:cd:0f:a2:30:1c:f9:04:
         12:7a:5e:ef:0b:e2:f0:1d:ab:60:6d:81:8d:12:a5:52:06:20:
         23:27:73:8d:aa:0d:23:f4:2d:ee:37:c3:b5:01:67:86:99:76:
         4f:aa:7b:3d:d5:93:e0:14:43:53:49:54:74:19:dc:7c:da:ce:
         d5:1e:ff:93:3a:a4:c3:1b:5c:05:58:8d:12:7d:0d:2e:c2:bb:
         1a:00:89:88:78:fc:71:b8:d3:a7:9e:e4:d4:2f:ad:78:dd:69:
         ae:8e:a0:40:0b:a5:89:75:a4:8f:42:79:ea:76:77:25:47:06:
         1a:13:48:82:74:30:85:de:81:cb:b0:a8:d6:a7:7c:ec:35:64:
         f1:fb:bb:b1:e7:6d:6a:60:d8:ae:33:8a:3e:ca:5a:52:d1:57:
         f4:03:b4:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE706ABZxm38o3oUfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgyNTE4MTMxMloXDTI2MTEyMzE5MTMxMlowLzEtMCsGA1UEAxMk
ZDAyZTY1ZDctMzZmMi00ZWM4LWI4ZjUtNzVlOTZmMzc4Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2tSSXLdxIBODDEnBKF97uNlNKgvIev2ghRC
7s+7fu69rP2XcXBxctTThgQF/rLw0BUGrUQhGn4+z3+xiz65JlmvJyf7grrHE4mM
WEc34Kchqy/1I8XdhA+AxISW5iRwbtkNXCeMPfzKU9wUs9zkQx9qvZnTYbXa75cw
pMp0i/sjfXdieaGC4liHWEeicKco/0ej5Js6hoEL431Ir1CObI80xEsfbVJjmRzK
2rl0HGAVnIHd7tpP7NmSWheReAB8avIko6+0cGdmq8rE4MAKFGv5aP9pnaH3qt83
ROQGWtdJGbyiPn8RSwujuKe3Ek0709pGUIG61T5XDriJ4bs/vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLrfN12BSrUGNGvXFIjI3KzZGqXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGYzYmJlN2QtNTZjOS0z
M2RkLWJiY2YtOTIxMGNlOTc1N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQp7OAacK/gJ0LoMbDHJiOsdUViWNKt9WKhoyKn2oDqv2mJ0RxCqpDO
FPgLUuB0Kf+8lKNPb0h0+HiNxEj2wqpT/YAVWDYkYIbtvVFnpeukLUToPY0xjRzt
d1TUvxVSYbc1tpcGzQ+iMBz5BBJ6Xu8L4vAdq2BtgY0SpVIGICMnc42qDSP0Le43
w7UBZ4aZdk+qez3Vk+AUQ1NJVHQZ3HzaztUe/5M6pMMbXAVYjRJ9DS7CuxoAiYh4
/HG406ee5NQvrXjdaa6OoEALpYl1pI9Ceep2dyVHBhoTSIJ0MIXegcuwqNanfOw1
ZPH7u7HnbWpg2K4zij7KWlLRV/QDtPk=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:51 2026 by rpki-client