Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60440fd2-4a7a-3cb7-8ff8-734009f1fcb8.roa
File:                     60440fd2-4a7a-3cb7-8ff8-734009f1fcb8.roa (raw, json)
Hash identifier:          W1aWKeC7sMlqVl9GjUzKQ9hIC2STJYqfwsIsHAiXrAk=
Subject key identifier:   3F:A4:57:DF:22:25:F3:67:CF:00:2F:90:A2:84:7E:4B:4C:D0:E9:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F59044D0A1DADDB3B13A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60440fd2-4a7a-3cb7-8ff8-734009f1fcb8.roa
Signing time:             Wed 18 Mar 2026 19:59:35 +0000
ROA not before:           Wed 18 Mar 2026 19:59:35 +0000
ROA not after:            Tue 16 Jun 2026 19:59:35 +0000
asID:                     401152
IP address blocks:        50.114.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:59:04:4d:0a:1d:ad:db:3b:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:35 2026 GMT
            Not After : Jun 16 19:59:35 2026 GMT
        Subject: CN=20a4f6e6-31c7-4ff2-81fa-596605f9c60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:46:5f:e5:83:f8:0c:36:9a:73:5c:73:a3:
                    f7:32:73:4c:aa:8f:c5:38:7f:0c:c6:d8:b8:d3:54:
                    c7:75:2a:8a:f0:0e:0c:71:aa:31:d1:80:bd:74:50:
                    bc:a2:b2:02:37:9d:1d:a5:b7:61:08:d9:65:9b:81:
                    67:2d:44:21:66:79:ed:ab:a2:e0:bd:eb:aa:41:1b:
                    70:56:02:53:07:a2:19:f0:ab:c1:b5:d4:05:a7:39:
                    54:65:dd:02:03:47:42:fc:fe:4e:51:4f:03:c8:da:
                    20:70:8a:b4:d6:98:e2:0e:9a:96:5c:5c:a6:ae:bd:
                    d5:c8:22:32:c6:13:06:7b:cf:21:6f:63:fd:c7:4b:
                    30:c8:9e:69:63:7c:5c:ea:e1:40:17:e1:7c:da:55:
                    6c:63:4f:b8:da:93:36:7a:14:a0:70:8d:b9:f8:31:
                    73:2e:d3:66:dd:76:1d:8b:67:90:5c:15:c1:e6:ec:
                    8b:89:70:d1:75:f3:52:37:4d:98:6c:a2:0a:0e:15:
                    2b:1e:6b:f3:a6:31:92:ab:61:b5:5e:bc:57:92:c3:
                    9d:40:13:f8:d0:4f:ae:54:9a:03:c0:68:cb:ad:28:
                    2c:f1:83:66:9e:8f:c0:37:61:ed:7d:ad:ca:1d:46:
                    ba:ac:fb:23:6f:01:5c:26:08:12:88:61:8f:26:f8:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A4:57:DF:22:25:F3:67:CF:00:2F:90:A2:84:7E:4B:4C:D0:E9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60440fd2-4a7a-3cb7-8ff8-734009f1fcb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:df:d8:67:9f:54:20:7b:6b:08:80:8a:b3:b6:95:87:2e:47:
         f1:e2:cf:82:8b:57:12:e7:94:20:44:58:8d:a5:d1:fc:20:d8:
         e3:b6:41:d0:94:52:a3:29:76:d7:86:ca:11:5f:90:31:73:e3:
         06:90:26:07:91:0d:eb:31:28:b4:47:fe:e0:8a:43:19:bc:cf:
         7a:fd:16:4b:cc:06:68:23:0c:aa:06:9d:81:e4:72:b2:4b:ef:
         65:ae:5a:5b:06:e1:22:fb:b6:1d:25:38:8f:44:ff:1a:68:05:
         e0:93:95:1d:34:03:ce:ef:33:c6:fa:43:f9:70:4d:0b:45:ab:
         7b:be:44:a4:c7:a4:40:d6:20:1a:77:de:8a:7e:c1:c3:5d:c4:
         40:da:0e:c7:b1:94:ae:9a:8f:26:33:04:16:be:b5:dd:f6:bf:
         5a:03:61:5e:91:a4:d6:28:3c:a5:5e:60:18:ec:d2:de:c6:cb:
         76:78:27:a5:dc:56:a5:07:15:b5:8d:ae:32:5e:0a:77:7b:bb:
         83:04:53:e2:06:a3:80:cd:da:72:93:fe:f6:9d:89:62:5f:6b:
         b7:75:e3:3c:82:2b:23:fe:81:ba:30:f7:3f:b5:49:7a:c4:86:
         f9:00:4c:6a:94:08:0d:9d:41:dc:86:3f:7b:1e:80:82:50:d0:
         2c:2d:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:46:19 2026 by rpki-client