Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c196c3b8-fada-3a38-bff5-9944c825ca56.roa
File:                     c196c3b8-fada-3a38-bff5-9944c825ca56.roa (raw, json)
Hash identifier:          LVfh4+G8Lcy3lh5Tda2lfARm2gJm6vXFHJKazt+80t0=
Subject key identifier:   81:4A:C9:F5:A7:30:E9:4A:6B:12:CB:51:92:6E:5A:B4:1C:51:BD:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB6E1AFF51BF76D5DB3E54900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c196c3b8-fada-3a38-bff5-9944c825ca56.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     211192
IP address blocks:        50.114.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:af:f5:1b:f7:6d:5d:b3:e5:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=f4627e08-6fa6-4843-b9b9-09b95e61a5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:51:9c:4f:30:8a:a0:97:b2:d9:3f:5c:99:
                    10:53:f4:81:a2:f8:b6:9a:04:01:02:44:28:82:43:
                    16:2c:a7:76:be:4b:a4:8e:13:53:38:13:e6:b5:00:
                    85:85:de:c7:74:9b:b2:1f:f2:91:43:3b:c3:f8:75:
                    66:b7:23:74:ec:70:bb:62:fe:6d:54:a9:73:4b:fa:
                    73:8c:13:ee:a5:3d:27:9f:45:43:bd:73:dc:d9:37:
                    fa:4e:8c:c3:33:5c:09:7a:bb:25:1d:ee:d6:63:eb:
                    48:00:64:bc:35:93:e7:78:fb:01:ed:14:b0:05:66:
                    b4:5a:63:c7:62:51:88:fd:ec:44:2c:0f:1a:4b:0f:
                    f3:22:66:ce:b3:1b:89:fe:3d:37:96:65:bd:9d:fc:
                    e0:a1:af:49:60:d2:1d:5d:8e:0b:af:bf:cd:35:59:
                    3e:ee:7c:bb:b8:f3:fe:0f:cb:22:5e:9d:f1:9d:4a:
                    62:1f:d1:49:7d:9a:5e:6e:df:3b:d1:97:37:f0:5e:
                    12:5b:84:d0:92:dd:8c:e7:53:c4:ce:df:f6:e3:fa:
                    bc:f0:58:56:4f:99:d2:81:34:d1:bf:5a:c1:65:cc:
                    eb:29:05:22:4e:86:a8:cf:b6:e0:16:35:63:2e:d6:
                    37:08:b4:64:ec:6c:0f:19:e5:f5:b4:d1:10:a7:38:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4A:C9:F5:A7:30:E9:4A:6B:12:CB:51:92:6E:5A:B4:1C:51:BD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c196c3b8-fada-3a38-bff5-9944c825ca56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:35:4e:30:29:f8:44:c3:15:90:46:76:2a:ff:af:c7:1f:1a:
         1b:9c:02:3b:26:04:5f:ed:9a:4a:3c:6f:33:ee:c4:50:d7:24:
         21:08:72:fe:59:e7:a6:80:11:f0:58:a0:8c:b5:89:c1:bc:fe:
         82:9c:ca:76:65:f7:48:9b:33:24:02:64:d4:68:17:a3:68:6d:
         95:6b:a9:ef:3d:34:d6:e9:0d:07:c6:cd:fc:14:96:8f:8a:76:
         d2:ff:09:af:dc:90:ec:a5:1c:41:0c:89:c7:f3:d3:35:99:10:
         16:58:03:47:97:0b:f5:51:fd:72:04:3d:57:6d:a1:84:ae:3b:
         d6:1a:b2:18:49:48:43:5f:16:ad:fa:c2:33:35:7d:3f:98:1c:
         ba:ec:32:19:39:0a:df:2b:f8:81:12:58:8b:16:6f:c0:26:5e:
         d6:7d:a2:d9:c6:26:96:d8:e2:51:bf:0c:1c:40:01:f2:68:65:
         0c:fa:99:77:51:26:b4:1b:ed:48:bb:30:2f:fd:fd:02:93:21:
         7c:2a:0d:b9:05:4d:f8:e5:17:e4:66:44:e2:8b:5a:f5:91:01:
         d3:2a:6d:80:74:42:77:0d:aa:7b:63:a8:08:ef:5a:ae:8d:f6:
         dd:d6:af:46:ff:c0:54:1c:9c:1c:05:cd:2b:91:c5:e0:f7:29:
         92:68:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:01:26 2026 by rpki-client