Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e3d86ff-7959-3265-b0ab-3fb41594b0f7.roa
File:                     7e3d86ff-7959-3265-b0ab-3fb41594b0f7.roa (raw, json)
Hash identifier:          ijgcf1dqN2OwhyFA1KjqBIbrkBePjHo0aLuMxigGNHI=
Subject key identifier:   86:C5:A8:4B:78:1E:05:C4:27:55:18:60:16:63:E4:8E:6C:18:A2:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F59BFE4861BAF456A2CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e3d86ff-7959-3265-b0ab-3fb41594b0f7.roa
Signing time:             Wed 18 Mar 2026 19:59:35 +0000
ROA not before:           Wed 18 Mar 2026 19:59:35 +0000
ROA not after:            Tue 16 Jun 2026 19:59:35 +0000
asID:                     401152
IP address blocks:        50.114.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:59:bf:e4:86:1b:af:45:6a:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:35 2026 GMT
            Not After : Jun 16 19:59:35 2026 GMT
        Subject: CN=1b103294-3085-4f78-869d-3c3b5873a4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:30:82:07:2d:0e:9a:26:21:8d:03:72:cc:
                    d6:34:24:32:64:ad:86:b7:12:87:8a:d2:07:45:5c:
                    f6:43:b5:bc:a3:78:85:5a:08:49:83:e9:eb:63:7d:
                    0b:9c:e8:46:29:d7:64:2a:03:bb:38:f5:09:5e:84:
                    fc:0f:33:03:fe:74:c3:81:2f:2e:d4:12:bf:f9:ac:
                    3d:19:72:9e:e3:c4:b9:a7:e8:51:1f:e2:97:75:5d:
                    86:78:3a:6e:1f:f3:96:69:5b:b9:99:da:74:21:54:
                    3e:1b:34:0b:05:ce:20:94:f9:8f:92:67:c5:b3:53:
                    3a:92:ed:be:7e:41:05:e7:63:23:d7:dd:37:c4:d6:
                    f3:df:49:ed:1c:fb:6a:ef:9f:eb:dd:82:c0:b1:bb:
                    a9:fc:ae:c0:48:c7:59:29:6a:d3:23:7e:f0:cb:3b:
                    a1:3f:12:f3:d6:3c:03:44:58:e4:26:4f:0b:89:97:
                    c7:9c:88:57:b2:d5:63:9c:39:07:13:32:2d:20:c2:
                    e4:a4:6c:44:3a:78:ba:0e:8e:a3:da:df:b9:43:20:
                    c0:d8:a1:ae:a1:a1:e4:36:d0:92:9a:82:4b:7d:ba:
                    ee:88:9b:8f:07:fd:70:12:58:23:4d:b8:c9:01:23:
                    04:f3:31:a3:28:fb:18:01:64:9c:5f:03:ab:ba:ee:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:A8:4B:78:1E:05:C4:27:55:18:60:16:63:E4:8E:6C:18:A2:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7e3d86ff-7959-3265-b0ab-3fb41594b0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:1e:ba:35:00:94:b2:ba:48:6a:2d:62:03:58:93:6c:56:
         d9:5e:4e:9f:2f:f7:01:97:15:92:4a:cc:67:0b:6c:b7:67:fa:
         0a:38:75:eb:e0:50:9f:85:42:93:ef:f7:40:fb:8b:a6:b7:2e:
         d6:52:3b:89:4e:15:16:8d:34:a4:2f:b6:b1:db:94:2b:51:7e:
         ee:c6:ae:10:14:7c:79:b7:96:90:20:44:3b:7f:55:d5:04:42:
         af:0f:10:21:9a:37:12:c1:1d:8a:82:b6:7d:49:0f:fe:7c:b3:
         3f:66:4d:a1:90:2f:ea:51:e8:f7:f4:d9:88:3f:d9:6b:63:65:
         c8:a3:6f:0b:13:3c:1d:e1:72:b5:7f:82:c2:72:0a:30:fd:bf:
         92:65:1b:c4:b3:77:54:2e:91:eb:84:82:25:c4:cd:b8:72:f0:
         51:d4:d3:6c:b7:fd:ac:4f:24:b0:f3:fd:03:68:1b:40:07:ca:
         1c:d1:40:66:28:74:57:7e:76:86:14:07:71:87:f3:df:55:58:
         f2:22:73:04:5a:18:f0:36:e0:f6:47:d9:48:0f:13:2e:b7:80:
         5d:35:30:c0:7b:f1:f2:5e:44:73:53:f4:a1:19:e7:18:30:24:
         d9:11:fb:69:46:7a:cf:fe:90:63:33:b6:48:7a:5b:64:1c:f8:
         1f:86:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:49:57 2026 by rpki-client