Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fd0d517-8214-3d8a-8135-092fe15d00fa.roa
File:                     6fd0d517-8214-3d8a-8135-092fe15d00fa.roa (raw, json)
Hash identifier:          rWCG28Ag8SdNk4v5VDkK+0jz4hQgLBWHJhF5uKIpULo=
Subject key identifier:   E2:38:B9:82:C4:0E:88:B9:30:47:B6:E8:B9:E9:35:80:9A:27:BF:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ECD90E96ACCEE242FEB523180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fd0d517-8214-3d8a-8135-092fe15d00fa.roa
Signing time:             Tue 11 Aug 2026 16:01:12 +0000
ROA not before:           Tue 11 Aug 2026 16:01:12 +0000
ROA not after:            Mon 09 Nov 2026 17:01:12 +0000
asID:                     401152
IP address blocks:        50.114.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:90:e9:6a:cc:ee:24:2f:eb:52:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 11 16:01:12 2026 GMT
            Not After : Nov  9 17:01:12 2026 GMT
        Subject: CN=6ac41e52-3e81-451a-be48-ad6ef55e3f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:33:fa:ea:a0:44:82:f9:cb:42:78:f6:64:
                    8c:b8:2f:fd:71:ea:eb:5f:b8:13:57:a0:f8:e0:ca:
                    a2:4b:1a:d5:d9:b1:66:d7:c0:b6:e4:51:c0:8b:a5:
                    86:19:9b:56:b9:5a:27:6d:dd:74:5c:34:6f:9a:ed:
                    66:38:eb:d0:75:c9:8d:62:ba:df:75:91:bc:e2:44:
                    6f:fb:dd:d0:03:fc:86:64:e4:51:7f:2c:44:9e:34:
                    bf:ff:ad:28:b1:26:5b:20:91:90:56:94:8a:e5:0a:
                    2e:f7:fd:1c:11:78:72:c1:8b:4a:0a:9d:53:5b:6c:
                    d8:0b:d1:b9:19:ed:d3:e0:5b:aa:ae:3c:10:d7:3c:
                    aa:cf:7c:33:dd:cb:c1:4d:51:e9:bf:33:b5:f7:5f:
                    48:9c:da:37:40:5c:fa:03:95:2e:e3:8b:da:2a:b8:
                    14:e7:a2:96:69:f4:28:7a:9c:27:0b:78:8d:a6:72:
                    8c:25:49:3b:ac:2d:20:64:a0:66:00:e2:6e:f6:8b:
                    5f:94:bb:a0:5e:6d:f4:8f:39:65:d0:8b:98:42:6d:
                    a7:9e:7b:73:d0:47:c9:b1:22:43:4d:06:a2:dd:b7:
                    4e:da:46:57:72:85:db:42:3a:da:50:7b:53:83:51:
                    21:43:60:8a:a3:de:59:94:6b:b6:02:a1:36:4f:97:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:B9:82:C4:0E:88:B9:30:47:B6:E8:B9:E9:35:80:9A:27:BF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fd0d517-8214-3d8a-8135-092fe15d00fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:b5:5a:25:33:61:0c:05:3f:6b:de:a0:22:5a:8e:b3:f6:
         fa:94:8c:f5:bc:00:79:56:cf:26:fa:2f:6e:40:2e:d2:35:6b:
         d5:33:02:09:ea:a8:96:87:b8:3e:c2:84:a2:92:1d:06:7c:70:
         36:5d:e6:9a:34:fa:09:df:2b:ae:74:6d:07:24:5e:94:5f:36:
         08:a8:77:ab:71:cf:83:85:f7:2d:08:83:21:27:1f:d9:5d:3a:
         32:4e:fb:38:ac:f6:6f:78:2a:1e:f4:20:8d:c9:ad:4a:e1:34:
         b4:95:38:27:dd:04:84:4d:74:4a:8a:12:30:0b:67:30:ad:14:
         56:51:14:ae:1e:83:0f:c8:e7:4c:ab:45:fa:1f:3c:d1:c1:89:
         76:3d:26:53:a3:22:67:7f:8a:d1:91:75:05:40:ff:59:69:a3:
         db:43:19:64:35:14:8a:4d:dd:e8:a9:0e:60:90:86:8e:6d:da:
         3b:53:11:10:9b:97:eb:80:bf:99:82:f7:01:00:43:42:19:17:
         4b:db:a9:03:74:e0:bd:dc:c6:cf:5e:c4:2f:b7:a2:30:28:d7:
         b0:f9:90:6b:ad:79:d8:25:ab:88:42:17:4e:79:56:51:ab:20:
         c8:49:49:01:f4:a7:f4:5a:fa:56:a9:88:dd:f5:53:ab:95:c8:
         5c:33:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 01:11:47 2026 by rpki-client