Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a2385d-a700-3e0c-842d-2040ff3b5df6.roa
File:                     73a2385d-a700-3e0c-842d-2040ff3b5df6.roa (raw, json)
Hash identifier:          CzxiqmG32/qE6ruW4FQ/rgall33r7KfyrrkPkOzy3JU=
Subject key identifier:   DF:44:C6:F4:9E:79:F8:6A:F2:45:A0:EF:6B:45:C6:C0:ED:27:60:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D30DDDF2E2870C710C2F07100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a2385d-a700-3e0c-842d-2040ff3b5df6.roa
Signing time:             Mon 16 Mar 2026 20:07:25 +0000
ROA not before:           Mon 16 Mar 2026 20:07:25 +0000
ROA not after:            Sun 14 Jun 2026 20:07:25 +0000
asID:                     401152
IP address blocks:        50.114.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:dd:df:2e:28:70:c7:10:c2:f0:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 16 20:07:25 2026 GMT
            Not After : Jun 14 20:07:25 2026 GMT
        Subject: CN=d99a7c85-a109-4c90-811b-295b649a2b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:09:5c:60:09:6e:2a:30:c6:b6:80:bf:cf:
                    64:dc:07:6c:f7:ac:e0:7f:f1:eb:f4:eb:8e:17:7b:
                    9c:11:e6:be:00:b2:2c:11:cb:05:46:11:0e:c9:de:
                    5e:7a:6c:81:9f:17:a7:1a:96:c7:fe:e5:65:6e:3d:
                    bf:4f:dd:01:69:9b:e6:e8:ee:be:80:99:cf:89:39:
                    7e:b1:1e:1e:6b:69:89:ee:ba:63:f3:09:ed:ab:ad:
                    f9:76:31:5f:ed:d7:92:da:0a:ff:41:48:90:a9:2c:
                    17:d9:8b:17:be:76:e6:3a:c1:50:be:75:97:0e:18:
                    78:33:ea:a1:37:da:9b:b3:4e:14:c5:08:f4:4a:47:
                    17:9d:3d:53:5e:52:01:93:f7:98:8c:2a:fb:c4:cc:
                    ae:85:aa:6b:d4:05:6b:b7:35:54:6b:83:0e:a5:9f:
                    20:51:78:9b:3b:ce:a4:5a:df:28:e4:06:85:e7:1d:
                    e2:f7:86:81:d4:7d:49:90:cc:dc:1b:c3:82:b7:b3:
                    bd:db:90:34:7a:f8:e2:0a:e7:4d:08:a0:58:e9:b9:
                    cc:fa:c5:3a:3b:9c:4a:5a:f6:d7:43:97:b1:c2:42:
                    b3:2c:0b:9e:7a:b1:7a:95:f4:19:7f:1a:9f:d9:fa:
                    64:34:cd:14:8d:e4:fc:ea:71:7f:39:23:10:95:7c:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:C6:F4:9E:79:F8:6A:F2:45:A0:EF:6B:45:C6:C0:ED:27:60:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a2385d-a700-3e0c-842d-2040ff3b5df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:c1:fb:cb:3a:7f:4a:84:87:31:c0:46:d3:51:ee:05:d4:
         2a:51:c0:22:b1:d3:94:28:3d:54:fd:a5:5b:fd:74:9a:02:c9:
         43:02:20:83:d0:2c:97:15:5e:0e:77:56:75:93:d5:2a:9d:5e:
         7c:67:53:02:dd:0e:48:0f:d6:75:a8:16:a3:3c:86:7c:44:c0:
         01:a3:ea:18:eb:b6:69:01:cf:17:1f:95:44:42:f1:77:ed:7e:
         78:8e:d8:2d:6a:e6:b7:b4:b7:68:22:37:49:2e:c0:5d:8d:47:
         60:df:0f:14:8e:46:8e:80:d3:5d:ea:2d:2c:66:ef:ce:7c:5e:
         03:1b:4a:f8:3e:6c:96:1a:f6:07:dc:9e:fb:e0:1e:7f:c9:c3:
         62:5d:20:95:91:82:ca:0f:1e:9a:c8:f1:9f:9b:15:18:7f:2c:
         1e:41:25:e7:9f:d4:51:fc:de:a0:c4:a1:19:1a:1c:00:f9:85:
         f2:d4:db:18:7a:8a:00:0c:08:17:41:ef:2e:f8:b9:4b:70:22:
         c0:82:97:c1:b9:50:12:2e:75:a2:31:1d:68:07:b8:70:00:9f:
         6f:56:7c:6e:28:ba:2d:f6:aa:3e:c6:3b:a2:e5:f2:b5:f9:43:
         04:6e:02:02:c8:34:87:57:33:1f:c5:ce:8e:81:f6:70:71:ef:
         95:f1:3e:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0w3d8uKHDHEMLwcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxNjIwMDcyNVoXDTI2MDYxNDIwMDcyNVowLzEtMCsGA1UEAxMk
ZDk5YTdjODUtYTEwOS00YzkwLTgxMWItMjk1YjY0OWEyYjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHYJXGAJbiowxraAv89k3Ads96zgf/Hr9OuO
F3ucEea+ALIsEcsFRhEOyd5eemyBnxenGpbH/uVlbj2/T90BaZvm6O6+gJnPiTl+
sR4ea2mJ7rpj8wntq635djFf7deS2gr/QUiQqSwX2YsXvnbmOsFQvnWXDhh4M+qh
N9qbs04UxQj0SkcXnT1TXlIBk/eYjCr7xMyuhapr1AVrtzVUa4MOpZ8gUXibO86k
Wt8o5AaF5x3i94aB1H1JkMzcG8OCt7O925A0evjiCudNCKBY6bnM+sU6O5xKWvbX
Q5exwkKzLAueerF6lfQZfxqf2fpkNM0UjeT86nF/OSMQlXzuDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9ExvSeefhq8kWg72tFxsDtJ2D8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzNhMjM4NWQtYTcwMC0z
ZTBjLTg0MmQtMjA0MGZmM2I1ZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3ewfvLOn9KhIcxwEbTUe4F1CpRwCKx05QoPVT9pVv9dJoCyUMCIIPQ
LJcVXg53VnWT1SqdXnxnUwLdDkgP1nWoFqM8hnxEwAGj6hjrtmkBzxcflURC8Xft
fniO2C1q5re0t2giN0kuwF2NR2DfDxSORo6A013qLSxm7858XgMbSvg+bJYa9gfc
nvvgHn/Jw2JdIJWRgsoPHprI8Z+bFRh/LB5BJeef1FH83qDEoRkaHAD5hfLU2xh6
igAMCBdB7y74uUtwIsCCl8G5UBIudaIxHWgHuHAAn29WfG4oui32qj7GO6Ll8rX5
QwRuAgLINIdXMx/Fzo6B9nBx75XxPm4=
-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:10 2026 by rpki-client