Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d5e037-eda9-39a7-8b3e-4ad0e12f4baf.roa
File:                     55d5e037-eda9-39a7-8b3e-4ad0e12f4baf.roa (raw, json)
Hash identifier:          6WtF/tSfCGG+NIt1WiIf3Hat5EHEn99d5lXcdl6bfto=
Subject key identifier:   CC:4D:E5:DB:2D:00:AC:86:97:97:AF:48:75:9A:DD:B4:90:D6:E5:30
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D766218EA3994CCB8B1315280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d5e037-eda9-39a7-8b3e-4ad0e12f4baf.roa
Signing time:             Fri 10 Apr 2026 17:44:37 +0000
ROA not before:           Fri 10 Apr 2026 17:44:37 +0000
ROA not after:            Thu 09 Jul 2026 17:44:37 +0000
asID:                     834
IP address blocks:        50.114.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:76:62:18:ea:39:94:cc:b8:b1:31:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 10 17:44:37 2026 GMT
            Not After : Jul  9 17:44:37 2026 GMT
        Subject: CN=1151ab91-f3c6-4d5e-aec9-4fa78ec8b019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:2c:92:11:84:91:9a:e1:98:0c:10:e4:5a:
                    74:76:44:18:f3:26:39:88:94:d6:86:b6:3e:b3:09:
                    30:38:40:1f:cf:0d:52:8a:36:9e:af:bb:32:c5:cb:
                    61:77:22:b7:d7:fe:76:12:b9:ef:96:16:4f:e7:7d:
                    2e:28:60:86:57:e2:2b:9d:a0:5b:92:e9:2a:fc:1d:
                    fe:75:50:b5:32:0a:44:30:10:4b:9a:c9:11:95:3d:
                    d7:16:a7:41:a0:31:be:f3:41:dd:db:6a:2b:0f:61:
                    1c:d0:63:61:68:9b:02:a5:54:d0:53:06:f1:0c:90:
                    66:81:c0:62:ae:63:86:02:73:c6:64:eb:b0:43:63:
                    03:7f:85:8c:b9:f2:62:70:11:10:5c:03:88:41:89:
                    25:f2:b5:22:01:b7:c8:9c:17:a7:9e:9f:a7:aa:27:
                    fb:77:c9:2f:39:ab:64:9f:d3:fb:60:71:84:e6:c8:
                    8a:dc:af:3b:7e:ef:9f:19:d2:a8:e3:94:1e:41:11:
                    e1:47:ba:90:e6:f8:ba:25:5d:c9:e1:ab:7a:ad:ac:
                    c0:b7:b7:5f:6a:cd:28:b2:6c:49:aa:ce:26:3c:53:
                    56:72:16:d6:2d:83:54:b0:fd:70:ee:28:18:b0:7f:
                    21:8f:57:6e:73:04:0d:7e:b4:72:e5:49:d2:e1:c3:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4D:E5:DB:2D:00:AC:86:97:97:AF:48:75:9A:DD:B4:90:D6:E5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55d5e037-eda9-39a7-8b3e-4ad0e12f4baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:38:ea:85:e0:6d:b2:39:04:0f:52:3d:63:08:e2:00:e4:
         42:9a:7d:79:96:d3:fd:c2:1b:78:82:0b:96:93:35:9a:97:11:
         48:99:0b:15:9d:39:2b:b8:a2:20:81:9a:cc:05:78:20:92:6f:
         7d:ea:71:bc:8e:db:d2:fa:69:01:29:99:bb:56:40:10:57:5a:
         00:a3:c7:03:91:8c:4b:8c:3a:48:1b:e5:dc:57:0d:85:22:1e:
         5e:2a:65:a6:93:23:4c:fa:17:d8:aa:76:63:8c:0c:82:a9:24:
         4b:f7:cc:7d:37:3f:dc:f6:d9:b8:4a:47:24:a6:56:8a:cf:62:
         22:2a:cb:60:93:38:db:38:97:64:d9:9c:0d:b9:10:b9:6d:9d:
         c6:2d:58:9a:66:f2:ab:f4:ff:a4:a9:8a:ea:d0:66:cb:22:59:
         9c:c7:8d:67:b8:80:cf:a8:77:75:61:44:82:80:c3:cc:38:8f:
         2c:5b:65:d4:b6:98:7b:5a:b3:bf:95:4a:28:26:88:c8:f6:78:
         98:ac:0d:ac:a4:d6:7f:d8:a2:60:96:09:fb:88:f0:2e:c8:e6:
         6b:e5:28:6a:b5:ee:99:d0:07:8f:34:5b:eb:6c:42:c1:80:6e:
         3c:56:ad:55:15:83:50:98:bd:21:47:2d:58:6a:a4:de:aa:f6:
         41:48:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 15:09:50 2026 by rpki-client