Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d7dcff0-bb30-3c36-9ded-c9d80d3db90e.roa
File:                     9d7dcff0-bb30-3c36-9ded-c9d80d3db90e.roa (raw, json)
Hash identifier:          fpc3yBJYZJqLdnAFR9ByxdFUJVAiqP4ZeACaUupS8Ik=
Subject key identifier:   81:CB:7C:9E:9A:91:C3:53:EC:C9:6A:60:00:4A:8D:89:E4:6A:07:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CFBDF361A0D5E4C4F99141F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d7dcff0-bb30-3c36-9ded-c9d80d3db90e.roa
Signing time:             Wed 25 Feb 2026 20:32:17 +0000
ROA not before:           Wed 25 Feb 2026 20:32:17 +0000
ROA not after:            Tue 26 May 2026 19:32:17 +0000
asID:                     7385
IP address blocks:        50.114.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:df:36:1a:0d:5e:4c:4f:99:14:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 25 20:32:17 2026 GMT
            Not After : May 26 19:32:17 2026 GMT
        Subject: CN=68d07b8e-5279-4062-9fdc-95d2459cd7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:c8:8c:c8:43:89:2e:36:a4:b7:d7:88:83:
                    db:a2:fb:9c:0b:96:79:80:68:cf:f6:d2:a5:26:f0:
                    24:51:d4:6b:7c:7b:09:fa:19:46:0c:d3:57:5b:15:
                    7d:8f:71:79:ee:d0:1a:00:cb:57:04:8d:ec:1a:16:
                    12:bb:12:9b:3c:42:f9:70:9f:ff:b5:ea:4c:73:57:
                    c9:b4:37:89:88:d3:d6:83:48:fa:fa:43:ac:ab:6c:
                    f9:67:4b:48:08:5a:1e:cb:d0:0a:ae:56:b2:80:31:
                    b8:a7:5c:b5:10:f2:02:b0:f9:79:00:f0:13:36:b2:
                    ef:65:68:49:73:a2:88:be:54:1c:a8:16:ab:eb:53:
                    7b:fe:32:84:74:bb:81:31:86:a2:f9:3a:92:f9:05:
                    5c:5c:ef:7c:26:c8:1e:52:ad:0b:fa:2a:62:ad:e7:
                    87:89:9f:37:22:0a:c0:a8:8a:db:26:a4:62:57:58:
                    1f:39:4b:b5:ba:5f:63:6b:c1:ea:17:e6:c7:53:58:
                    a4:1b:16:a0:9d:93:1f:52:28:c1:fa:87:2e:39:4e:
                    5b:d7:f1:01:2a:63:13:a3:b4:67:56:11:89:10:80:
                    ed:c2:8e:20:e6:da:69:ba:66:44:e6:1a:a8:5a:bf:
                    65:b6:a6:0e:bd:97:f6:ac:08:ae:15:07:54:bb:f2:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:7C:9E:9A:91:C3:53:EC:C9:6A:60:00:4A:8D:89:E4:6A:07:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d7dcff0-bb30-3c36-9ded-c9d80d3db90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:a2:ab:6d:61:eb:cf:ea:59:71:7c:e6:17:06:e9:25:6b:
         72:c1:17:36:63:08:c2:4a:6e:b6:4e:5e:9e:65:33:5a:8a:24:
         82:c5:66:9d:f1:02:5a:fe:3c:4c:74:12:65:20:ac:20:a4:9f:
         50:67:97:9f:4c:5b:4e:63:16:40:c3:80:c7:62:91:e6:4e:33:
         9d:b8:1b:68:c4:0b:a9:a0:20:bf:56:81:0c:00:56:58:88:4d:
         74:0b:48:71:f4:fc:ff:c6:0f:bb:bc:a0:c0:14:0c:62:10:14:
         69:cc:59:93:00:ae:be:5d:f2:1f:fe:4a:e1:e2:af:32:da:4f:
         85:d5:7b:3a:cb:52:45:f2:d7:43:7c:80:8c:8e:5f:dd:84:38:
         42:bd:0a:de:7a:1f:98:e4:db:37:e0:8b:a7:20:21:4f:78:a0:
         d6:d7:c2:d8:63:20:20:3a:0c:0c:d0:61:af:54:b0:d9:f1:31:
         08:ef:e2:e0:51:96:26:05:0f:51:12:09:d3:42:d8:a2:9d:ba:
         85:af:59:27:4e:4c:2a:37:18:b9:48:9f:78:ed:86:9e:d5:6b:
         f1:cc:ac:f6:3b:2d:e8:de:96:89:8e:ad:96:a2:46:65:b8:f5:
         73:43:54:c7:83:96:49:69:27:3b:b6:e2:e1:dd:03:67:e1:b0:
         34:dd:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 08:09:42 2026 by rpki-client