Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5da12f6-8009-3e1f-b7e2-bde8982cc71b.roa
File:                     a5da12f6-8009-3e1f-b7e2-bde8982cc71b.roa (raw, json)
Hash identifier:          sx0slPvgzD9FMlpCxztBnGVE3TSAiDV54hVRBhY8eKg=
Subject key identifier:   5A:1D:04:28:C0:7C:F0:1B:CB:08:BC:7D:20:CE:17:C6:92:C4:0B:B6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D883E633C310D91D7E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5da12f6-8009-3e1f-b7e2-bde8982cc71b.roa
Signing time:             Mon 23 Mar 2026 19:53:41 +0000
ROA not before:           Mon 23 Mar 2026 19:53:41 +0000
ROA not after:            Sun 21 Jun 2026 19:53:41 +0000
asID:                     11798
IP address blocks:        50.114.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d8:83:e6:33:c3:10:d9:1d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:41 2026 GMT
            Not After : Jun 21 19:53:41 2026 GMT
        Subject: CN=fd42e767-2c2b-454b-b279-32d0e14e3d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:c0:71:e8:41:cb:1e:9d:73:36:bf:6e:81:
                    02:6b:25:07:37:26:cd:db:aa:a5:7c:2e:ac:06:65:
                    14:bf:7a:57:70:b5:e0:4b:90:51:d1:51:dd:e5:7b:
                    8f:6a:9c:5e:56:92:18:70:71:1c:89:ce:81:71:6e:
                    55:d5:c9:b3:70:03:de:c9:6b:7e:3b:57:df:33:d1:
                    ca:90:bc:c8:0d:43:c3:7b:16:bc:79:23:26:b6:89:
                    c9:0e:e1:f9:51:37:4a:9e:bd:da:de:0b:ae:d1:c4:
                    da:a0:62:96:fa:a1:c5:dc:d0:4c:c5:d3:ab:8d:3f:
                    b5:3a:70:c4:ec:2d:da:fe:ab:08:31:05:6c:cf:a1:
                    68:76:f7:f9:5e:4a:19:4c:ea:03:bb:6d:e9:bd:35:
                    02:f8:01:f5:d4:62:33:5c:f6:36:52:15:df:2f:97:
                    6c:9c:3d:57:42:2e:9c:8e:8d:c6:1d:23:18:0d:22:
                    8a:51:e3:95:e1:af:57:00:ad:f3:d0:b4:23:47:c5:
                    df:93:5a:cb:65:f5:82:e2:a0:5f:3e:18:ba:8b:ca:
                    d3:2e:7c:be:3a:23:9b:75:78:ef:57:07:5a:16:4f:
                    ee:4a:56:7e:4c:04:83:fa:60:04:1c:2c:16:da:49:
                    c6:14:2a:0f:4d:a2:bb:44:00:fb:de:0e:e8:53:ac:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1D:04:28:C0:7C:F0:1B:CB:08:BC:7D:20:CE:17:C6:92:C4:0B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5da12f6-8009-3e1f-b7e2-bde8982cc71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:af:b4:52:c2:5e:d9:37:14:03:fc:1f:67:aa:05:d3:15:
         78:8c:fe:62:0c:d8:e9:ce:1f:d1:cc:c6:fc:a1:f5:49:68:53:
         40:52:39:3e:bc:ed:aa:cc:a6:51:37:fb:51:6a:a4:64:4a:44:
         fd:44:ea:48:73:5e:95:50:14:9a:95:83:5d:14:31:a1:45:ca:
         23:b4:1c:f9:6d:1d:3d:1c:8c:29:53:90:31:1a:d5:42:7f:78:
         5b:7f:10:a1:8c:5c:5a:a8:20:72:f9:3d:7e:b5:71:45:49:82:
         2b:f9:44:e3:88:44:a8:8c:87:8d:8a:bd:af:7d:03:cd:96:7e:
         5c:b7:c1:83:82:68:bc:11:2e:7e:76:4f:09:d9:78:b0:24:f4:
         c1:3f:3d:c5:0c:35:8d:c6:21:e6:61:a1:d8:72:55:5a:b2:3b:
         d7:37:04:66:05:5f:cc:de:0a:15:a2:11:81:4b:74:47:d6:ea:
         da:37:33:39:f1:69:1f:ad:90:9e:88:de:6b:72:5e:ea:f9:df:
         30:f8:80:e9:dd:03:e2:ee:ab:f7:34:c6:97:d5:2c:e1:12:1b:
         eb:5f:b6:67:99:93:cc:4a:2c:dd:c9:2f:2d:89:e2:97:93:b6:
         a8:32:bc:35:68:02:b1:92:c5:72:8e:fc:36:d7:3d:b6:19:6e:
         56:a8:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:09 2026 by rpki-client