Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7b39ae9-d640-3c78-a0cb-1f59716fa2fb.roa
File:                     a7b39ae9-d640-3c78-a0cb-1f59716fa2fb.roa (raw, json)
Hash identifier:          5Hfsq2GETi/umkEQKHvfPykTsBRpC9PPujYd0gBzUes=
Subject key identifier:   B9:C2:5C:ED:6C:0F:54:0E:A1:70:6A:1C:45:F8:0D:FB:4C:A1:18:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB846FF743D4034410FBEBC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7b39ae9-d640-3c78-a0cb-1f59716fa2fb.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        50.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:46:ff:74:3d:40:34:41:0f:be:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9053a43f-a0b1-46f8-b9ee-0a93f5bd68f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:44:09:23:cb:22:c1:44:7f:89:f5:1e:22:
                    28:2c:7c:24:01:79:9d:77:58:f2:93:5a:c6:20:6b:
                    87:34:95:f9:e1:45:15:9e:fb:aa:14:be:d6:07:82:
                    ba:f7:18:13:11:18:08:7d:d5:46:33:28:d0:7d:07:
                    b3:70:f6:ee:cc:83:27:42:3f:18:ac:00:eb:11:b5:
                    5e:55:e0:a7:a7:bc:1a:56:7f:ec:1a:dd:e3:d8:ad:
                    75:45:4e:60:dc:58:1e:92:97:1c:f4:63:bc:dd:8d:
                    e6:d7:e8:1e:d6:0f:5d:94:d0:5a:40:68:28:d5:d4:
                    a3:37:ad:aa:7c:94:f5:81:e5:49:58:84:01:01:d5:
                    ce:de:9f:57:8c:1a:3e:67:73:c5:47:84:f3:b0:b9:
                    d6:93:a4:f8:82:07:88:da:79:8e:c3:b5:0a:ca:93:
                    9c:08:91:9d:ef:36:ac:08:44:9b:c6:af:2b:68:d5:
                    15:a5:1d:5e:61:85:ec:a4:54:ee:cc:70:f3:d7:39:
                    58:63:b2:93:4c:e1:b2:dc:09:ba:1c:1b:9d:33:6a:
                    29:c5:7c:8d:c0:4a:2b:c2:a9:34:9a:26:de:ca:64:
                    8b:73:66:87:24:94:0b:4f:19:0e:f7:2e:50:46:b6:
                    19:b8:8d:79:75:a9:3e:52:18:50:83:38:bd:c6:29:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:5C:ED:6C:0F:54:0E:A1:70:6A:1C:45:F8:0D:FB:4C:A1:18:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7b39ae9-d640-3c78-a0cb-1f59716fa2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:56:c2:62:90:85:cd:2a:a9:a8:63:3d:d8:6a:cd:be:1e:
         a3:24:71:8e:42:d5:ea:cb:0a:a7:16:a7:7d:90:fe:f0:27:88:
         f3:8a:a3:f1:b9:ca:fa:6e:76:0c:36:fd:10:ff:62:df:35:55:
         73:f8:1e:34:8d:f9:fc:ac:b6:b4:67:d4:fb:72:4b:b0:07:79:
         99:3f:7c:42:1d:4a:10:92:47:f0:21:77:ca:62:6f:d0:23:26:
         16:b3:dd:07:d2:a6:f6:b3:ff:76:99:cb:0f:db:a2:d4:46:0f:
         e7:c4:02:bc:e1:64:95:60:a5:96:8f:51:26:84:bf:f2:95:d2:
         b6:65:9c:41:a9:5c:2c:12:50:62:49:6b:d2:d1:1a:75:d4:da:
         1d:d5:bb:ee:6c:7c:15:d2:75:97:d3:36:d1:c5:5d:fb:04:ec:
         59:4d:7f:72:fe:2f:58:97:bc:32:77:61:e1:22:6b:b4:11:22:
         f5:88:89:b3:51:90:6e:c0:30:9d:22:19:ab:d2:5d:02:a5:55:
         4e:8c:39:99:05:10:80:d1:2c:8a:f9:e9:81:68:1a:5b:ef:4d:
         29:18:7c:8e:85:df:23:4e:86:c8:64:2a:c1:e3:a2:d9:ff:58:
         0d:d1:f1:8a:b5:1a:d6:0f:dd:ff:a8:d5:94:73:81:fc:e6:03:
         af:5b:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:02:23 2026 by rpki-client