Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957df9cb-793b-3ac7-9fcc-854eb2d7d1e7.roa
File:                     957df9cb-793b-3ac7-9fcc-854eb2d7d1e7.roa (raw, json)
Hash identifier:          RBsgmax+3WCGquWarrvLiSn6R0i9FMsOGiKSiL8KDrw=
Subject key identifier:   4A:DC:CE:22:DB:8F:7A:6F:F2:52:AF:44:E4:F4:43:BE:18:5C:6E:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62B5FB968FA4B9F092284380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957df9cb-793b-3ac7-9fcc-854eb2d7d1e7.roa
Signing time:             Fri 03 Apr 2026 16:37:28 +0000
ROA not before:           Fri 03 Apr 2026 16:37:28 +0000
ROA not after:            Thu 02 Jul 2026 16:37:28 +0000
asID:                     6079
IP address blocks:        50.114.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:b5:fb:96:8f:a4:b9:f0:92:28:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:37:28 2026 GMT
            Not After : Jul  2 16:37:28 2026 GMT
        Subject: CN=a07eb04e-e324-4afc-bab2-1417e4523e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:c8:f5:f3:5d:bf:ad:95:13:47:34:38:93:
                    f2:3a:6b:76:b1:91:d1:7d:d8:77:54:35:4a:37:bf:
                    d1:84:8e:9e:80:d6:b3:b9:a4:a5:44:44:ee:dd:49:
                    9b:6d:9e:ff:6e:ea:e7:0a:22:7e:d4:2e:c0:59:6e:
                    52:ff:8a:aa:60:6f:7d:db:2a:34:33:1d:86:e4:e3:
                    68:42:29:7c:e4:f3:48:04:b2:ef:11:bc:f0:04:a9:
                    88:62:7e:0d:42:a6:37:30:ec:57:1a:c5:6e:d8:d4:
                    da:f7:2c:1c:7b:f1:90:a5:41:cf:01:88:2d:e4:d8:
                    36:7c:0c:42:56:77:cf:90:51:35:6b:61:30:fd:e0:
                    b0:24:29:9e:72:e6:c7:f1:bb:b5:97:f4:f4:90:13:
                    aa:c0:27:e6:a8:1f:81:d3:93:cb:f0:15:3f:45:46:
                    0b:a3:d3:a1:96:86:50:c1:c2:ef:be:db:ca:a9:98:
                    c1:53:86:c4:e5:af:a5:2f:60:ca:9a:00:c3:12:78:
                    e9:09:74:5d:4d:65:7e:e9:a0:b7:01:90:30:73:e0:
                    11:a9:d3:29:55:aa:78:68:93:90:e7:e1:57:04:e4:
                    62:de:b4:71:67:88:58:e8:d4:b9:1d:3f:ef:18:fc:
                    64:3b:6a:c2:a5:45:a9:c9:a4:3a:dd:dd:a7:af:2f:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:CE:22:DB:8F:7A:6F:F2:52:AF:44:E4:F4:43:BE:18:5C:6E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957df9cb-793b-3ac7-9fcc-854eb2d7d1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:2b:af:04:e1:14:5e:44:e9:9e:e2:c1:e9:51:02:55:d2:
         cb:8a:ea:8a:c7:b1:c6:d7:b5:93:34:8f:70:9f:ee:82:97:ba:
         4e:0b:f0:a9:2b:24:4e:e9:0e:e4:dc:9e:3c:cf:0b:b9:74:1b:
         0b:6d:30:be:76:d9:5b:f8:ab:eb:df:7c:24:ef:9f:6e:70:16:
         c1:54:e6:06:03:da:b3:56:3c:66:4b:2a:da:4b:32:c9:e3:0a:
         30:2b:44:5e:60:6a:fd:3b:74:c9:12:40:cf:51:ff:64:87:1e:
         9b:d5:20:ec:2b:7d:2c:2b:85:53:82:8c:17:91:8b:99:e1:b9:
         c2:1c:e3:a1:35:47:7b:2b:ec:93:49:2c:49:dc:f6:39:f3:11:
         cf:0a:03:2d:bd:47:cf:97:cb:fc:f2:b8:ac:7c:fc:33:be:b0:
         42:fd:11:e7:20:f8:47:00:24:81:0d:f6:ae:7a:74:87:d6:a5:
         a5:a0:cd:72:76:31:5c:8b:5f:87:b6:99:c0:86:3a:25:15:8b:
         a1:d5:a8:dd:5c:f2:bf:02:63:a5:f5:c3:19:35:3d:2e:6d:79:
         77:da:f1:73:c4:d3:a4:d9:28:30:71:f6:f2:cc:72:9a:18:9d:
         db:f9:71:f1:76:4a:64:40:f9:15:18:cb:29:99:4f:4e:ce:3a:
         2a:c6:f9:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1itfuWj6S58JIoQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwMzE2MzcyOFoXDTI2MDcwMjE2MzcyOFowLzEtMCsGA1UEAxMk
YTA3ZWIwNGUtZTMyNC00YWZjLWJhYjItMTQxN2U0NTIzZTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiXI9fNdv62VE0c0OJPyOmt2sZHRfdh3VDVK
N7/RhI6egNazuaSlRETu3UmbbZ7/burnCiJ+1C7AWW5S/4qqYG992yo0Mx2G5ONo
Qil85PNIBLLvEbzwBKmIYn4NQqY3MOxXGsVu2NTa9ywce/GQpUHPAYgt5Ng2fAxC
VnfPkFE1a2Ew/eCwJCmecubH8bu1l/T0kBOqwCfmqB+B05PL8BU/RUYLo9OhloZQ
wcLvvtvKqZjBU4bE5a+lL2DKmgDDEnjpCXRdTWV+6aC3AZAwc+ARqdMpVap4aJOQ
5+FXBORi3rRxZ4hY6NS5HT/vGPxkO2rCpUWpyaQ63d2nry+ohwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErcziLbj3pv8lKvROT0Q74YXG6nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTU3ZGY5Y2ItNzkzYi0z
YWM3LTlmY2MtODU0ZWIyZDdkMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALDyK68E4RReROme4sHpUQJV0suK6orHscbXtZM0j3Cf7oKXuk4L8Kkr
JE7pDuTcnjzPC7l0GwttML522Vv4q+vffCTvn25wFsFU5gYD2rNWPGZLKtpLMsnj
CjArRF5gav07dMkSQM9R/2SHHpvVIOwrfSwrhVOCjBeRi5nhucIc46E1R3sr7JNJ
LEnc9jnzEc8KAy29R8+Xy/zyuKx8/DO+sEL9Eecg+EcAJIEN9q56dIfWpaWgzXJ2
MVyLX4e2mcCGOiUVi6HVqN1c8r8CY6X1wxk1PS5teXfa8XPE06TZKDBx9vLMcpoY
ndv5cfF2SmRA+RUYyymZT07OOirG+Yk=
-----END CERTIFICATE-----
Generated at Sat Apr 4 15:29:47 2026 by rpki-client