Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/655ae6f1-5fb4-31d1-b346-f1cd5a0c1a5d.roa
File:                     655ae6f1-5fb4-31d1-b346-f1cd5a0c1a5d.roa (raw, json)
Hash identifier:          Y2iBRxroeXO8fIQ8rK/hFMMat907ranEf3iNsV8pIf0=
Subject key identifier:   CE:D1:A4:6F:83:DD:A9:A7:AC:59:75:FC:12:3A:A1:49:20:FD:DB:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62B231E67F89AFB3D1389BE4
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/655ae6f1-5fb4-31d1-b346-f1cd5a0c1a5d.roa
Signing time:             Fri 03 Apr 2026 16:29:50 +0000
ROA not before:           Fri 03 Apr 2026 16:29:50 +0000
ROA not after:            Thu 02 Jul 2026 16:29:50 +0000
asID:                     10753
IP address blocks:        50.114.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:b2:31:e6:7f:89:af:b3:d1:38:9b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:29:50 2026 GMT
            Not After : Jul  2 16:29:50 2026 GMT
        Subject: CN=72c49dac-028b-48d5-a19e-101a0adfcd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:0b:a4:4d:a0:4c:d1:df:9d:df:39:08:03:
                    02:47:f3:ec:6a:77:93:16:3a:4f:f4:63:8e:fd:09:
                    47:2a:a3:ee:a0:cd:6a:20:0b:0c:5a:8a:05:07:85:
                    e1:46:a6:64:13:5a:3d:0a:d7:06:e7:33:18:5c:f9:
                    78:40:e4:d5:14:af:a7:78:81:86:f6:de:0b:04:7b:
                    10:c4:7e:20:25:0d:9f:05:b7:18:1c:84:12:7e:63:
                    63:ef:ac:f9:26:bb:ee:aa:87:c9:3d:24:5c:6f:ac:
                    79:c4:7b:42:ff:bb:2d:bd:3d:e2:39:a3:f6:90:b1:
                    68:4a:1b:ff:b2:8b:a9:3a:1e:ec:cb:37:db:61:fc:
                    9d:71:c8:cd:e5:d0:cc:3a:36:42:a4:56:08:71:2d:
                    13:a5:f3:65:b9:33:dd:07:3b:bf:d1:e6:17:6b:55:
                    f3:54:1c:3f:77:53:7b:40:05:48:d2:6e:a5:61:66:
                    95:5f:c4:f8:0d:9d:ad:a0:61:d9:54:55:61:d3:9b:
                    91:5f:40:a2:13:20:c1:f7:10:ce:96:60:5b:0f:4a:
                    89:70:34:11:41:78:9a:8c:b3:62:77:99:40:ff:bf:
                    7a:5e:eb:4e:11:86:40:f1:b2:5e:aa:8c:b9:8c:e2:
                    f9:6a:c3:b5:f8:3f:af:48:ab:02:24:21:62:75:e2:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:A4:6F:83:DD:A9:A7:AC:59:75:FC:12:3A:A1:49:20:FD:DB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/655ae6f1-5fb4-31d1-b346-f1cd5a0c1a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7e:db:1c:fd:ea:86:17:f8:83:c4:e7:64:90:bd:0f:de:f5:
         65:2e:c5:22:61:72:fa:ac:b0:52:d6:4c:0b:aa:86:a1:47:8b:
         89:c7:60:a9:4c:c2:60:78:c3:bb:da:08:22:79:5f:ba:68:0e:
         16:d3:7b:9d:e4:55:7b:51:52:6c:51:59:39:71:4e:af:70:38:
         b4:57:32:25:20:ba:64:36:75:cc:2c:1d:e5:f7:e4:e9:2a:72:
         1c:4e:18:6a:43:c8:ab:5d:63:7f:85:29:74:d3:e6:9e:b9:6f:
         42:4d:d4:18:6b:9c:e9:8f:17:91:e5:4f:10:39:0b:16:3a:f8:
         93:8d:00:a7:81:31:e1:0f:4c:0c:bd:c6:f4:dd:28:5c:06:d4:
         67:c8:79:04:48:fd:1e:6a:67:93:51:f2:6e:27:5c:e2:a7:8e:
         71:33:e8:7c:85:45:03:66:f3:96:ce:ce:ca:7f:12:49:f7:00:
         d6:58:e8:b3:1d:e1:e0:f1:f4:73:92:5a:94:32:4a:17:38:c2:
         53:68:f0:d7:8d:2a:db:c2:e0:ec:c0:3f:1b:5d:d5:b6:00:a6:
         2f:44:39:ed:c1:d7:75:0a:88:a3:1f:5c:59:df:4b:9a:6b:28:
         ff:e1:be:7a:62:be:93:1c:43:d8:e6:e2:83:8c:0a:ed:87:a8:
         6b:f7:dc:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1isjHmf4mvs9E4m+QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwMzE2Mjk1MFoXDTI2MDcwMjE2Mjk1MFowLzEtMCsGA1UEAxMk
NzJjNDlkYWMtMDI4Yi00OGQ1LWExOWUtMTAxYTBhZGZjZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSgLpE2gTNHfnd85CAMCR/PsaneTFjpP9GOO
/QlHKqPuoM1qIAsMWooFB4XhRqZkE1o9CtcG5zMYXPl4QOTVFK+neIGG9t4LBHsQ
xH4gJQ2fBbcYHIQSfmNj76z5JrvuqofJPSRcb6x5xHtC/7stvT3iOaP2kLFoShv/
soupOh7syzfbYfydccjN5dDMOjZCpFYIcS0TpfNluTPdBzu/0eYXa1XzVBw/d1N7
QAVI0m6lYWaVX8T4DZ2toGHZVFVh05uRX0CiEyDB9xDOlmBbD0qJcDQRQXiajLNi
d5lA/796XutOEYZA8bJeqoy5jOL5asO1+D+vSKsCJCFideLkXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7RpG+D3amnrFl1/BI6oUkg/duqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjU1YWU2ZjEtNWZiNC0z
MWQxLWIzNDYtZjFjZDVhMGMxYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd+2xz96oYX+IPE52SQvQ/e9WUuxSJhcvqssFLWTAuqhqFHi4nHYKlM
wmB4w7vaCCJ5X7poDhbTe53kVXtRUmxRWTlxTq9wOLRXMiUgumQ2dcwsHeX35Okq
chxOGGpDyKtdY3+FKXTT5p65b0JN1BhrnOmPF5HlTxA5CxY6+JONAKeBMeEPTAy9
xvTdKFwG1GfIeQRI/R5qZ5NR8m4nXOKnjnEz6HyFRQNm85bOzsp/Ekn3ANZY6LMd
4eDx9HOSWpQyShc4wlNo8NeNKtvC4OzAPxtd1bYApi9EOe3B13UKiKMfXFnfS5pr
KP/hvnpivpMcQ9jm4oOMCu2HqGv33Ms=
-----END CERTIFICATE-----
Generated at Sat Apr 4 15:31:09 2026 by rpki-client