Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68fc9286-2c8f-32e1-b302-260bc1c8d917.roa
File:                     68fc9286-2c8f-32e1-b302-260bc1c8d917.roa (raw, json)
Hash identifier:          whGxwqVEBrIKcltGZV63rBiaco3aD4iJohcGKOk6iGs=
Subject key identifier:   1F:E4:56:A6:85:BE:FC:0A:0F:39:82:B7:63:39:3C:A5:26:E1:EA:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D253D95DD801ED6573D6B0600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68fc9286-2c8f-32e1-b302-260bc1c8d917.roa
Signing time:             Thu 12 Mar 2026 16:10:34 +0000
ROA not before:           Thu 12 Mar 2026 16:10:34 +0000
ROA not after:            Wed 10 Jun 2026 16:10:34 +0000
asID:                     7385
IP address blocks:        50.114.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:3d:95:dd:80:1e:d6:57:3d:6b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 12 16:10:34 2026 GMT
            Not After : Jun 10 16:10:34 2026 GMT
        Subject: CN=f03ef980-8637-4f75-90b1-1ca3a5656f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:90:3b:89:31:e6:df:15:87:ba:bb:b6:24:
                    73:d7:2c:09:e7:b9:8c:30:c1:58:c6:f5:86:2d:d1:
                    bb:a3:fe:aa:f1:3f:35:d2:c1:f0:94:86:38:e6:8b:
                    c3:08:65:6e:24:83:dc:e4:1c:c2:fa:b7:66:ec:0a:
                    cc:ed:04:77:ea:5c:cc:ea:c3:1d:a9:86:8f:d7:8e:
                    03:93:74:69:d9:1f:ef:3a:ff:d5:a0:c7:73:7c:9e:
                    62:b2:47:2a:10:4e:77:9c:e0:b8:be:11:de:bc:d3:
                    db:21:c3:9c:b8:bb:a1:55:3d:87:a0:4f:67:ba:56:
                    c1:fa:7a:30:a8:1c:b7:ac:2c:01:44:a3:2f:3e:a7:
                    d8:af:f0:87:37:cb:f7:19:ee:66:30:21:1e:75:71:
                    8f:f2:04:6c:8a:c9:c1:21:2a:75:71:65:ab:a9:90:
                    33:d5:f6:29:c9:d3:c5:fd:14:ab:65:ed:1b:05:d6:
                    ef:00:53:10:36:e3:00:64:9a:e1:d2:49:3d:38:5f:
                    f7:4a:d1:cd:5b:3e:9f:62:a7:18:90:53:89:99:b7:
                    dc:64:77:8b:a6:12:ac:d9:56:09:ae:4a:c0:2b:d2:
                    bd:22:fe:46:ba:90:9d:fc:4e:8a:02:08:c6:85:11:
                    e6:86:cc:40:cc:2f:56:f3:01:47:9d:32:0f:a7:f7:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:56:A6:85:BE:FC:0A:0F:39:82:B7:63:39:3C:A5:26:E1:EA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68fc9286-2c8f-32e1-b302-260bc1c8d917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:d2:05:6c:47:da:bb:4a:22:f8:8a:6e:71:ef:f4:39:4a:
         33:82:b3:df:e5:a7:29:69:a6:bc:06:73:97:76:0f:16:fd:6d:
         d0:92:44:0a:47:01:84:8e:9f:9d:84:e3:de:42:32:d5:9d:02:
         ed:4a:f3:0b:f0:6b:4f:04:97:79:06:c2:53:7b:ca:91:34:d4:
         eb:0e:b9:b9:56:83:73:b9:89:5b:97:be:ec:74:b2:a0:ba:24:
         1c:51:ec:81:f6:1f:f1:f9:b4:2c:73:fa:fa:5a:f9:08:6b:49:
         f7:74:88:1c:f4:79:d9:e0:d3:56:71:b1:fd:94:5e:59:3d:49:
         95:d4:c6:37:74:66:4d:0f:f6:93:8f:ef:05:85:6d:fa:5c:76:
         46:b7:a8:e5:3b:ae:24:2a:af:83:e6:bc:2b:fc:ec:e3:db:96:
         20:a9:02:7a:ec:9f:f9:80:bb:78:58:2a:2c:c9:d6:43:03:49:
         e4:4a:74:7a:ca:61:68:e8:c4:45:92:dd:c9:19:96:77:8b:c0:
         1c:2d:2a:d4:7e:9c:40:c2:0f:7f:65:27:14:c9:be:b3:48:06:
         f7:94:3b:58:f2:c3:f8:a6:9e:a4:45:dd:2b:fb:53:09:1e:f3:
         ff:ff:37:9b:d4:1f:dd:4e:a1:24:c1:a4:25:92:c1:5d:cd:97:
         7f:c7:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:55:18 2026 by rpki-client