Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dc702e-224b-32cb-8dbe-d78f4f04254d.roa
File:                     66dc702e-224b-32cb-8dbe-d78f4f04254d.roa (raw, json)
Hash identifier:          5SV0sDKcWPFolVYRlzjwxSEvOp853Zg7SPIW0r1JnCo=
Subject key identifier:   70:97:AD:EC:48:01:81:17:E0:B2:7C:12:04:78:D5:20:14:10:15:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE5808C504A99B1EA6E250B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dc702e-224b-32cb-8dbe-d78f4f04254d.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        50.114.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:8c:50:4a:99:b1:ea:6e:25:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=50400f5f-7127-4349-9e74-d1f504d77f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:46:ff:5c:92:37:f7:0d:7f:2b:e6:de:f3:
                    b6:1b:02:29:48:a0:b6:70:47:65:12:f1:1f:1f:7f:
                    19:e5:7d:c0:30:99:72:50:a5:cd:85:fc:ea:92:68:
                    55:6c:b0:2c:65:36:e8:34:c0:08:a4:31:95:a8:c9:
                    02:ce:da:ee:e9:e9:54:9e:0d:76:42:6c:a6:2e:40:
                    93:47:85:da:d4:3d:12:01:98:22:ed:8b:e2:6d:17:
                    ab:10:04:6c:e5:e2:aa:7b:65:75:f8:b4:f6:de:47:
                    f8:88:90:d9:90:52:c1:e9:24:7b:3d:84:d0:13:5c:
                    32:74:8e:78:f7:19:c2:1f:24:2b:ad:fc:b4:00:96:
                    85:34:9f:92:75:b4:a3:25:31:2d:2f:db:ac:0d:a6:
                    63:b8:60:12:6a:39:3c:31:f4:20:f7:fd:76:8d:e7:
                    70:53:1c:29:b4:6e:6d:3b:00:72:b8:f0:48:bf:83:
                    14:3d:19:f3:84:b3:92:26:50:39:2a:24:dd:9e:f1:
                    60:74:55:54:dc:cf:35:2b:f6:8a:e0:14:98:ab:92:
                    df:db:ed:aa:54:85:09:ad:31:07:95:4c:e9:dc:21:
                    40:a6:22:c4:98:53:d5:91:96:c7:90:50:38:43:76:
                    46:fa:37:89:bc:0c:b8:42:2b:03:43:c9:e5:40:09:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:AD:EC:48:01:81:17:E0:B2:7C:12:04:78:D5:20:14:10:15:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dc702e-224b-32cb-8dbe-d78f4f04254d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:de:3d:1f:ed:62:90:d2:74:d6:a7:20:d3:cf:36:bd:5b:
         4a:60:30:13:11:cb:ad:5e:bb:8d:7a:ae:f6:c3:83:a8:4c:9f:
         a0:b2:e1:81:64:cd:34:bc:ea:98:eb:ad:4d:91:67:9a:04:b4:
         5a:88:1c:40:61:66:0e:0c:81:d8:33:d8:8b:c3:b1:81:b6:e2:
         4e:b8:3d:ef:19:51:2c:aa:fb:65:4c:b1:02:4a:66:e5:fa:8f:
         94:24:b5:5b:29:ae:ca:c3:72:93:6c:7b:dd:15:84:57:4c:61:
         d1:ca:35:3f:73:d4:52:b6:d0:95:9d:57:0a:8f:92:a6:a6:d7:
         a2:a7:99:1e:db:c3:8f:cf:0e:58:c6:62:ca:66:7a:86:85:c1:
         18:f4:62:64:13:b8:94:5e:e0:51:da:aa:bd:7c:aa:30:ef:77:
         b1:6a:ec:46:35:c5:02:82:a5:f6:cd:e8:6b:1b:af:2d:cd:e9:
         4c:58:ca:27:ad:00:4c:25:67:3d:68:0a:61:d7:fe:63:9b:24:
         56:01:02:d0:10:b6:1e:c9:23:ab:cb:43:d6:6d:4b:08:e9:a4:
         82:8e:b1:aa:8b:1a:cd:00:1a:a3:3b:9d:30:5f:0e:c6:00:12:
         d0:7a:8b:1a:0b:8c:5e:5e:e7:a4:a1:c5:e5:1c:4a:e0:8b:b7:
         6d:fd:7c:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lgIxQSpmx6m4lC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk
NTA0MDBmNWYtNzEyNy00MzQ5LTllNzQtZDFmNTA0ZDc3ZjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR5G/1ySN/cNfyvm3vO2GwIpSKC2cEdlEvEf
H38Z5X3AMJlyUKXNhfzqkmhVbLAsZTboNMAIpDGVqMkCztru6elUng12QmymLkCT
R4Xa1D0SAZgi7YvibRerEARs5eKqe2V1+LT23kf4iJDZkFLB6SR7PYTQE1wydI54
9xnCHyQrrfy0AJaFNJ+SdbSjJTEtL9usDaZjuGASajk8MfQg9/12jedwUxwptG5t
OwByuPBIv4MUPRnzhLOSJlA5KiTdnvFgdFVU3M81K/aK4BSYq5Lf2+2qVIUJrTEH
lUzp3CFApiLEmFPVkZbHkFA4Q3ZG+jeJvAy4QisDQ8nlQAkcmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCXrexIAYEX4LJ8EgR41SAUEBXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjZkYzcwMmUtMjI0Yi0z
MmNiLThkYmUtZDc4ZjRmMDQyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4i3j0f7WKQ0nTWpyDTzza9W0pgMBMRy61eu416rvbDg6hMn6Cy4YFk
zTS86pjrrU2RZ5oEtFqIHEBhZg4Mgdgz2IvDsYG24k64Pe8ZUSyq+2VMsQJKZuX6
j5QktVsprsrDcpNse90VhFdMYdHKNT9z1FK20JWdVwqPkqam16KnmR7bw4/PDljG
YspmeoaFwRj0YmQTuJRe4FHaqr18qjDvd7Fq7EY1xQKCpfbN6Gsbry3N6UxYyiet
AEwlZz1oCmHX/mObJFYBAtAQth7JI6vLQ9ZtSwjppIKOsaqLGs0AGqM7nTBfDsYA
EtB6ixoLjF5e56ShxeUcSuCLt239fHI=
-----END CERTIFICATE-----
Generated at Wed May 27 01:00:47 2026 by rpki-client