Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa
File:                     a7072d42-1130-341a-bff6-148187a70494.roa (raw, json)
Hash identifier:          9Pfx1KIp2nIgYIbtBsO8YIuegmKL7ebTczHsGeWjgOs=
Subject key identifier:   15:30:18:27:51:C8:4D:FD:45:F6:D1:E7:C0:B7:F5:D4:FE:32:14:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F119CF6F74AA392C1C2F13980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     25369
IP address blocks:        50.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:f7:4a:a3:92:c1:c2:f1:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=bfc8a812-8762-485b-9bec-f2592253c086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6d:be:3a:ff:83:65:c9:59:c0:64:97:d0:56:
                    df:2b:b8:e7:bd:24:f5:dd:14:e7:3f:a8:07:1e:76:
                    c5:01:80:d2:b1:82:fb:60:73:b4:bf:de:51:b5:76:
                    3d:b5:f2:79:e7:8c:b4:2b:f9:67:d3:06:1e:5f:09:
                    3b:0d:42:83:38:12:c2:bf:53:16:3a:fb:ee:14:04:
                    f1:f5:47:43:7c:54:0b:31:72:86:96:4e:2d:c2:b0:
                    8b:63:2a:f7:48:cb:f2:9c:52:92:6e:8e:09:1f:34:
                    45:67:a9:6d:cc:27:25:3e:64:b6:fa:55:3e:c7:a3:
                    e3:d3:fd:95:b3:dc:40:02:73:d4:87:fd:57:96:7a:
                    49:55:7c:d7:dd:76:2d:a2:dd:7d:f6:fd:e5:b8:fd:
                    bd:36:98:f3:fc:18:bc:db:4f:da:8d:54:39:e8:1a:
                    8c:46:50:48:3d:cc:60:56:fb:5a:c0:57:b3:df:3c:
                    3e:48:35:31:1e:76:e0:34:e0:36:d2:7b:c0:46:96:
                    19:49:3e:3b:02:87:a8:9a:35:e7:b7:12:b5:82:b0:
                    89:1a:c2:f8:b5:12:9f:0b:46:ab:24:a9:a1:76:80:
                    ea:d0:db:44:99:22:79:45:e9:5d:f8:97:0e:11:c0:
                    96:28:9b:1c:0a:6d:c8:ce:10:31:c5:7c:af:d0:50:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:30:18:27:51:C8:4D:FD:45:F6:D1:E7:C0:B7:F5:D4:FE:32:14:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:df:85:1a:e9:71:f3:c1:ff:d3:19:6a:1f:8e:54:67:ee:d9:
         93:b8:be:f0:e8:29:8c:14:7f:18:71:65:95:13:e1:a8:fd:09:
         d1:81:d3:1e:b8:dc:09:4b:e6:3b:95:cd:ff:2c:f5:2e:c9:c5:
         5b:ec:ef:03:60:d3:41:f9:cf:80:1f:6e:83:55:ad:78:4f:e7:
         75:de:b3:47:75:e9:d3:a9:f0:52:0e:43:af:cb:4c:76:c9:d6:
         9c:81:a8:d8:96:10:c9:ad:4b:1d:7e:18:e4:43:4a:8c:0f:5c:
         77:80:8e:d0:43:fa:ac:8b:43:e5:15:df:6a:00:3d:39:9f:ac:
         f0:f3:0a:7c:6e:41:4f:d8:db:c7:d5:15:bb:1f:6e:23:ec:d8:
         cd:df:22:e5:97:a4:5c:db:90:dc:28:6c:4b:e5:0d:e5:e2:7d:
         c0:85:b6:f9:97:89:8a:02:e7:99:21:ed:61:7e:70:39:0c:34:
         6d:94:ef:e7:32:01:31:09:47:e8:78:46:e5:3d:1e:64:fa:75:
         c9:46:8e:ca:81:79:0f:54:9b:ec:4f:7c:7f:f8:e6:80:c7:a3:
         d8:ce:31:70:1f:43:e4:79:dd:1e:4d:22:da:7c:88:29:b4:69:
         b8:d1:fc:45:7e:ff:52:00:ec:81:db:81:bb:05:83:93:da:91:
         34:03:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:01 2026 by rpki-client