Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8259b3ce-2903-37f4-b8b1-39c637a8a87d.roa
File:                     8259b3ce-2903-37f4-b8b1-39c637a8a87d.roa (raw, json)
Hash identifier:          3lTHBayFJKGXO2bXIOf69HB8bCCD7CR5SQVHnSX6o+8=
Subject key identifier:   BA:57:23:BC:85:88:4E:49:D0:7F:BC:DF:02:01:69:7E:A8:BF:56:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF4E8007198DF2C90703AE618
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8259b3ce-2903-37f4-b8b1-39c637a8a87d.roa
Signing time:             Tue 25 Aug 2026 18:13:12 +0000
ROA not before:           Tue 25 Aug 2026 18:13:12 +0000
ROA not after:            Mon 23 Nov 2026 19:13:12 +0000
asID:                     3257
IP address blocks:        50.114.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e8:00:71:98:df:2c:90:70:3a:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 25 18:13:12 2026 GMT
            Not After : Nov 23 19:13:12 2026 GMT
        Subject: CN=7a4d6fb5-389c-4ab1-b701-76e099f17ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:b6:9b:d6:e9:e4:70:0c:0e:7a:5c:bb:fd:
                    3e:f2:6d:dc:fa:d2:a3:1c:a7:71:24:4e:63:fb:85:
                    c7:13:02:c4:b0:9c:ad:a8:41:67:00:55:48:22:02:
                    d2:10:a4:49:4b:6e:f9:bc:0d:df:b0:b4:7b:d9:e0:
                    b6:0d:78:6b:e0:93:11:b8:4d:63:50:10:0f:a1:f6:
                    3e:3c:2d:7c:a7:d5:99:08:c5:a7:dd:4a:97:02:88:
                    5b:04:28:17:5c:30:80:0e:2c:5a:e0:70:35:0b:a8:
                    51:53:aa:08:08:06:83:7e:49:21:02:b4:91:f2:1b:
                    0b:0e:0a:13:a3:6c:23:06:0d:06:f1:da:4c:b4:5c:
                    60:55:ca:9b:37:a6:e8:0e:7d:a1:20:6d:c9:e0:71:
                    45:da:85:d6:ed:17:7a:56:ac:23:8a:24:3b:eb:47:
                    fc:1c:81:6b:12:e7:38:ca:99:98:44:fe:99:b0:b0:
                    a6:d1:cb:f1:fe:42:b9:dd:00:d4:8c:99:e8:cd:91:
                    db:c9:cb:ce:19:f1:20:02:31:ac:fe:92:9b:61:29:
                    45:98:26:42:94:91:11:82:02:e6:6b:2f:46:9d:46:
                    07:9e:2c:d2:60:57:55:76:85:b0:f4:a4:ad:48:de:
                    bb:77:b7:46:c1:0f:00:8d:e9:4a:1c:02:03:57:f0:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:23:BC:85:88:4E:49:D0:7F:BC:DF:02:01:69:7E:A8:BF:56:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8259b3ce-2903-37f4-b8b1-39c637a8a87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ea:b8:d9:31:7e:ae:40:32:12:7a:d1:c1:a5:92:ad:48:16:
         2d:17:7a:7e:b9:e7:d1:9a:14:9e:e1:6e:a0:6b:70:8e:45:00:
         27:d4:63:d1:de:37:ee:66:e0:86:c0:18:ec:e8:96:43:dc:b9:
         bc:08:26:cd:51:92:95:f6:7c:f8:be:9c:e5:24:b8:fd:2b:1d:
         ce:21:02:6e:bb:ca:a7:60:38:42:a4:25:92:be:8d:91:ce:7e:
         b6:19:e5:e0:52:7b:b3:57:ba:94:36:87:c1:d7:60:5f:d5:59:
         8a:70:5b:e1:74:9b:59:ec:18:8b:28:1c:6f:10:13:a2:e7:dd:
         93:01:e1:c4:fb:cd:44:50:b8:21:04:53:64:d9:1c:d3:31:d1:
         85:d8:50:6d:48:30:c8:a2:92:00:32:69:a4:83:22:54:c9:fc:
         6b:b1:a2:ee:91:e6:61:3e:fa:f1:5b:95:c8:71:47:24:7a:99:
         a9:06:91:90:6a:ce:24:e1:eb:13:1d:3e:8b:22:40:75:87:88:
         d0:5e:11:3f:3c:fc:c1:9f:84:c4:76:ca:4a:80:e4:a0:06:7c:
         aa:90:39:55:57:8b:c3:f5:a3:42:71:35:66:6a:61:40:72:9e:
         49:aa:5a:83:31:1c:78:ae:fe:28:a5:7c:b2:58:9d:05:59:59:
         de:99:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:01 2026 by rpki-client