Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/993a981b-f856-3287-b45f-b6f36087cdcf.roa
File:                     993a981b-f856-3287-b45f-b6f36087cdcf.roa (raw, json)
Hash identifier:          nH9w6zGLkBwLLHlSHlsYyWzHmWLiBvgWTLrlkyU7fpU=
Subject key identifier:   77:CC:D4:41:7F:7D:B3:BB:9B:EC:74:88:DA:E8:FF:B1:DE:09:18:57
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D60B1AB9EC87C45B0FFE311C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/993a981b-f856-3287-b45f-b6f36087cdcf.roa
Signing time:             Thu 02 Apr 2026 23:17:10 +0000
ROA not before:           Thu 02 Apr 2026 23:17:10 +0000
ROA not after:            Wed 01 Jul 2026 23:17:10 +0000
asID:                     2914
IP address blocks:        50.114.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:b1:ab:9e:c8:7c:45:b0:ff:e3:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  2 23:17:10 2026 GMT
            Not After : Jul  1 23:17:10 2026 GMT
        Subject: CN=c6e7489c-a45a-415f-b7eb-02df4478c508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:f2:a1:8d:79:e5:0a:85:3d:65:34:d8:3a:
                    f7:5d:0d:56:0a:86:ae:9b:df:80:22:43:b7:81:01:
                    ce:96:a2:f9:c0:83:8d:7a:66:ef:76:13:38:04:62:
                    94:8d:4f:7e:77:2b:84:a5:b8:01:5f:c4:30:be:9f:
                    3f:c2:23:85:a0:6c:7e:69:4c:9c:26:ee:62:22:92:
                    e8:cd:be:30:d4:12:aa:91:e1:77:02:f2:91:d5:f0:
                    88:c4:1c:02:ab:f4:41:fd:d6:dd:85:ca:4a:88:a9:
                    1c:7b:30:3a:11:49:30:56:e2:38:be:be:1f:e4:b3:
                    00:aa:79:1f:18:c3:40:32:36:18:4a:a2:bd:14:e3:
                    3a:b3:7c:8a:9d:96:12:12:4b:e0:35:9b:60:ea:9c:
                    8e:79:6b:7f:0c:e2:a6:09:3a:38:4a:96:67:09:78:
                    d9:e4:30:16:ab:64:a9:4a:b6:79:4c:85:b3:c9:25:
                    02:48:08:0c:f5:0c:b6:aa:dc:6c:f0:80:4c:6f:06:
                    5b:9f:45:df:43:75:f4:fb:f8:5e:17:f3:f1:ef:4d:
                    6c:8d:dd:9a:9c:ee:45:c8:d0:bb:7b:a0:0a:2b:32:
                    de:59:c6:2f:a4:4f:c4:dd:17:d3:1b:2d:68:b7:37:
                    52:e4:22:b3:25:19:e8:84:fc:b1:ce:66:6f:e8:dc:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CC:D4:41:7F:7D:B3:BB:9B:EC:74:88:DA:E8:FF:B1:DE:09:18:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/993a981b-f856-3287-b45f-b6f36087cdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:f2:ad:a3:7b:fc:74:c7:70:4b:ef:bc:9f:5e:ba:d6:27:
         a2:d4:b3:56:38:34:1b:bd:af:a9:0a:46:14:85:f4:f3:07:06:
         79:9f:b0:24:d1:01:9c:2d:7a:f1:1a:d6:83:9c:ba:13:31:93:
         5a:70:61:8b:4b:b4:91:2e:d5:49:ca:7e:55:e6:32:da:99:ba:
         4b:1c:d0:77:69:5b:aa:49:7b:2b:45:74:a6:a1:64:c5:af:61:
         95:27:a5:5e:f0:14:5d:3d:86:cd:3f:49:10:c1:10:c5:d4:b5:
         6c:08:e6:ea:ad:e5:6d:32:50:3f:b0:78:33:1d:87:ed:cd:e1:
         a7:11:1d:2c:f8:90:15:23:d4:01:e0:8e:c8:5a:7a:d7:8e:2b:
         d7:89:4f:f1:e9:23:4c:5f:7c:03:4e:19:10:c2:cd:49:02:75:
         45:41:c2:c5:e4:3f:21:d8:ed:97:24:e2:be:59:bf:bf:d8:9e:
         c5:b4:ff:36:6e:84:d3:e0:a3:2c:5c:1e:4d:63:c0:ba:54:73:
         5c:db:e7:e1:0c:53:61:39:5b:ab:ec:b0:14:f3:19:bf:63:0b:
         33:ff:74:ec:7d:26:b6:cf:be:ae:af:dc:0c:77:53:4c:cc:db:
         8c:a3:27:3e:11:07:43:f0:a0:d3:6f:31:4a:de:1a:27:26:72:
         be:0b:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:30:14 2026 by rpki-client