Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631ad0f3-1516-39aa-b092-3f055f579365.roa
File:                     631ad0f3-1516-39aa-b092-3f055f579365.roa (raw, json)
Hash identifier:          hwA6aizzxgTjVNagnh1s2b4wDvgQgRHvvdi4+WxEgww=
Subject key identifier:   1D:0A:AF:6C:C7:28:5D:FD:C4:78:DF:99:3B:31:1C:02:D1:B8:D8:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B1CBE9AE1663B9ADEE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631ad0f3-1516-39aa-b092-3f055f579365.roa
Signing time:             Wed 01 Apr 2026 17:56:12 +0000
ROA not before:           Wed 01 Apr 2026 17:56:12 +0000
ROA not after:            Tue 30 Jun 2026 17:56:12 +0000
asID:                     401152
IP address blocks:        50.114.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b1:cb:e9:ae:16:63:b9:ad:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:12 2026 GMT
            Not After : Jun 30 17:56:12 2026 GMT
        Subject: CN=2c91e4b2-23ff-4d5e-9bf7-10c089f96d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:0f:56:0e:d5:0b:90:9e:37:0a:d0:65:99:
                    54:74:a2:2e:22:68:0d:f5:f9:fd:ab:e9:e3:39:58:
                    c0:5f:42:07:f9:a2:4d:6f:dd:ea:8e:be:c3:6d:50:
                    d0:fc:34:dd:7e:9b:d0:db:95:4c:85:a5:73:49:0c:
                    e0:28:86:71:e2:ab:3d:54:32:36:7e:44:8f:03:9f:
                    c1:f5:7c:a8:20:a5:72:7f:81:1e:d6:d3:93:24:4a:
                    2a:ae:93:a7:15:00:fe:7d:b9:f3:b3:d6:25:2c:ad:
                    a1:24:f3:99:76:cb:bb:83:d8:cc:9c:5f:27:f0:6d:
                    91:51:0f:36:d7:7e:19:03:33:ed:7b:9e:d0:5b:62:
                    b5:77:99:aa:92:30:5d:80:59:14:1e:c5:99:71:f9:
                    18:57:1d:bf:65:cb:f0:cc:c1:cb:88:e6:fe:48:4c:
                    d8:2e:2f:0e:4f:4e:d3:56:2a:ff:06:b9:ad:6b:7b:
                    26:1d:79:9d:36:27:a1:e2:4f:bf:2a:5d:ea:c9:56:
                    ec:72:83:db:60:be:33:74:76:fa:92:da:01:21:52:
                    d7:d5:9a:c5:34:87:10:aa:fc:ce:18:4f:52:25:27:
                    94:b8:ea:b3:94:e1:fe:95:c9:a5:34:94:69:91:7d:
                    1e:9e:5b:ad:cd:9b:59:f2:4c:22:54:67:21:45:a5:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:AF:6C:C7:28:5D:FD:C4:78:DF:99:3B:31:1C:02:D1:B8:D8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/631ad0f3-1516-39aa-b092-3f055f579365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:2b:23:d1:22:f3:0d:be:91:a2:c6:b4:90:6e:62:f0:95:
         6e:b5:b4:b0:1d:c9:58:56:bb:8a:f4:87:f2:c5:72:56:0d:99:
         be:b5:29:1e:52:2b:bc:b5:8e:5f:aa:3b:15:56:c5:75:0f:f2:
         60:96:80:f6:27:b6:30:ef:f5:3b:a5:c0:67:39:0e:f5:da:ed:
         e5:fb:81:dc:6b:f3:0a:bd:60:fc:46:27:1a:b7:d6:37:cd:5d:
         8f:4e:0c:db:e9:fc:85:6c:aa:b8:9c:8f:29:71:45:a5:05:93:
         f2:a3:b5:3d:6f:1f:50:a0:e2:c9:33:fc:c9:e8:d6:5b:1c:bc:
         2a:c0:69:82:3c:ef:ba:3d:8d:99:8d:2f:c7:81:40:ff:32:6a:
         c8:48:9c:b7:9f:e6:7e:36:19:4a:35:98:8f:95:1c:4f:ef:5e:
         f6:68:ce:88:af:5a:2a:e0:d2:e1:e3:de:84:14:5b:b6:82:3d:
         34:f2:84:69:18:d4:eb:fd:26:db:fa:c7:4b:01:ce:39:7b:99:
         89:07:3c:5b:82:c1:f3:22:46:83:00:a5:36:b7:49:a5:eb:08:
         98:53:85:d0:82:32:55:71:a5:4e:7c:2a:12:62:92:ee:69:bf:
         0e:7f:71:15:96:69:8d:e7:42:f2:e2:63:d9:00:d5:e6:0b:a8:
         70:33:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:38:40 2026 by rpki-client