Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91fc68f4-41bd-3a3d-97f9-d7681380021d.roa
File:                     91fc68f4-41bd-3a3d-97f9-d7681380021d.roa (raw, json)
Hash identifier:          XNVPcXbX++06wulOFRLaO0k7jj/xSccEcKIy68pfBFo=
Subject key identifier:   F4:77:7C:00:08:BD:3F:3C:D0:61:96:DA:44:BE:26:9B:E9:41:F9:56
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F58A8B44D33EDE451C480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91fc68f4-41bd-3a3d-97f9-d7681380021d.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        50.114.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:58:a8:b4:4d:33:ed:e4:51:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=43add6d1-feb5-4233-9175-0b95f46a1878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:e3:8d:da:ed:7a:08:6b:4b:ee:13:92:67:
                    68:36:e1:bd:da:35:dd:de:22:66:cf:4e:0d:86:80:
                    7f:dc:66:ba:21:33:ac:d9:89:87:c3:bf:e2:fc:c5:
                    6a:96:bc:ea:4f:45:0e:20:96:40:23:ff:ac:0a:e8:
                    b0:b4:1d:48:9f:81:35:70:03:96:8a:38:71:27:9a:
                    bc:e5:8b:37:37:a5:64:8a:00:48:8a:75:51:d1:bd:
                    ab:e3:74:0d:06:81:0f:81:23:2d:9d:f9:01:7c:24:
                    80:32:97:e7:cb:39:7d:37:65:0f:67:ae:8a:04:fc:
                    23:38:15:29:61:09:91:79:fd:f1:39:be:dc:9e:7c:
                    43:38:ca:f0:00:5e:71:1c:db:74:20:3a:64:a6:02:
                    96:8b:0e:b6:f0:a1:e4:ea:b6:93:af:c6:43:83:6d:
                    53:8c:f2:39:c7:5f:8a:3f:f7:90:9a:ec:02:d8:6a:
                    50:cc:87:2b:bb:05:0f:5e:aa:ba:42:f9:ce:c9:ff:
                    75:a9:92:32:62:70:e6:c2:9b:d2:cb:cd:9d:1a:cb:
                    a1:01:77:7a:de:64:38:89:9a:08:a9:62:6c:c5:95:
                    f3:a5:2e:b5:fc:69:55:22:e7:12:78:76:2f:c2:c2:
                    15:03:32:99:78:25:a5:c1:27:61:26:64:f6:2d:ce:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:77:7C:00:08:BD:3F:3C:D0:61:96:DA:44:BE:26:9B:E9:41:F9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91fc68f4-41bd-3a3d-97f9-d7681380021d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:74:79:9e:f4:e7:97:ac:6b:59:8b:cb:c7:35:cf:76:35:
         66:4d:d1:54:78:1a:da:58:23:fb:af:d4:01:37:cb:04:48:3e:
         d5:78:76:7c:8a:f9:54:77:b5:0d:8b:50:e7:cf:0f:b3:4d:1d:
         cc:77:fb:af:91:d1:ff:a2:15:ab:ea:7d:71:57:54:23:f6:35:
         d1:2e:ed:13:96:5d:2e:62:00:b0:63:cc:fc:68:95:d6:e0:7d:
         df:af:6d:65:f1:9d:13:c2:53:bd:ff:b1:2f:19:0b:66:37:3e:
         78:24:33:d7:c9:40:4a:09:62:c1:a6:2b:eb:7b:3e:9f:ff:b0:
         61:f4:dd:96:58:c7:21:f6:b2:dc:f5:bb:1b:8d:a8:5f:db:48:
         b4:a9:22:ba:dd:fd:22:55:f0:0c:bb:00:cc:1b:15:58:3e:9d:
         3a:14:42:ff:27:e6:70:a9:96:5d:60:14:13:fb:ab:46:9b:da:
         fb:f1:d2:b3:19:d8:e1:71:cf:4f:2b:b9:fd:69:2e:f6:8b:a0:
         33:53:a3:21:bc:f2:c6:d4:ed:4d:44:84:71:76:7f:b2:bd:d6:
         ea:ea:bb:16:c3:b5:e6:30:cc:c1:c6:a3:d3:b3:50:26:88:ec:
         64:9b:a3:99:41:73:c0:d4:c0:48:b9:34:9e:7d:77:5c:5f:3a:
         01:86:f3:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1iotE0z7eRRxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxODE5NTkzNFoXDTI2MDYxNjE5NTkzNFowLzEtMCsGA1UEAxMk
NDNhZGQ2ZDEtZmViNS00MjMzLTkxNzUtMGI5NWY0NmExODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4fjjdrteghrS+4TkmdoNuG92jXd3iJmz04N
hoB/3Ga6ITOs2YmHw7/i/MVqlrzqT0UOIJZAI/+sCuiwtB1In4E1cAOWijhxJ5q8
5Ys3N6VkigBIinVR0b2r43QNBoEPgSMtnfkBfCSAMpfnyzl9N2UPZ66KBPwjOBUp
YQmRef3xOb7cnnxDOMrwAF5xHNt0IDpkpgKWiw628KHk6raTr8ZDg21TjPI5x1+K
P/eQmuwC2GpQzIcruwUPXqq6QvnOyf91qZIyYnDmwpvSy82dGsuhAXd63mQ4iZoI
qWJsxZXzpS61/GlVIucSeHYvwsIVAzKZeCWlwSdhJmT2Lc4SQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPR3fAAIvT880GGW2kS+JpvpQflWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFmYzY4ZjQtNDFiZC0z
YTNkLTk3ZjktZDc2ODEzODAwMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD70dHme9OeXrGtZi8vHNc92NWZN0VR4GtpYI/uv1AE3ywRIPtV4dnyK
+VR3tQ2LUOfPD7NNHcx3+6+R0f+iFavqfXFXVCP2NdEu7ROWXS5iALBjzPxoldbg
fd+vbWXxnRPCU73/sS8ZC2Y3PngkM9fJQEoJYsGmK+t7Pp//sGH03ZZYxyH2stz1
uxuNqF/bSLSpIrrd/SJV8Ay7AMwbFVg+nToUQv8n5nCpll1gFBP7q0ab2vvx0rMZ
2OFxz08ruf1pLvaLoDNToyG88sbU7U1EhHF2f7K91urquxbDteYwzMHGo9OzUCaI
7GSbo5lBc8DUwEi5NJ59d1xfOgGG8zQ=
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:55:26 2026 by rpki-client