Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa
File:                     c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa (raw, json)
Hash identifier:          uZkQkyUPHgaob+ehgmgAciBG3RdJOVUUs92xsgeZudQ=
Subject key identifier:   C1:2E:0E:CE:83:41:85:BB:87:64:43:29:A9:DE:4F:DE:63:AD:9D:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C756008057CEF97E764A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        50.114.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:75:60:08:05:7c:ef:97:e7:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=548952c1-81b1-4162-8c75-7ca6ddae3ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:0c:80:d6:fd:3b:e9:76:33:d0:b8:2f:96:
                    74:84:b8:05:36:dd:11:af:b5:b6:95:06:26:f0:01:
                    a0:05:40:f8:49:81:5a:d5:5c:bc:0f:6d:ad:07:58:
                    7c:38:5a:1c:9e:fd:06:5c:e1:1b:d5:a0:0e:70:9f:
                    9d:68:3e:eb:e7:bf:73:48:e4:d3:38:9c:61:c0:28:
                    50:3d:07:16:6d:01:b9:11:e9:d8:56:21:55:af:12:
                    bf:ec:a7:64:44:87:8a:2d:6b:60:49:4b:4a:fe:e8:
                    ba:2c:cd:16:b1:8d:2d:ba:65:d9:5c:7d:b4:b4:a3:
                    87:49:f2:92:36:57:a1:2b:44:04:a2:a7:99:a5:fb:
                    e2:95:21:a3:ca:fb:9f:e9:fa:a7:9a:fb:48:2c:62:
                    90:13:81:0c:76:dd:40:8d:61:a0:21:bc:8a:f0:67:
                    33:89:0b:fe:9b:02:8d:ba:35:89:96:dd:59:43:52:
                    88:61:29:cb:fd:5d:2d:27:1b:d3:7e:26:b2:b9:61:
                    69:33:66:fe:2f:80:d5:8e:0a:d5:c3:5d:34:f8:7f:
                    dc:36:a2:3b:62:16:b4:f8:46:b3:a6:5f:ac:c4:9b:
                    93:23:39:b2:0f:3b:20:09:97:ca:e4:c0:84:d7:76:
                    fc:a1:53:58:de:83:e9:3d:26:97:46:d6:52:4c:d5:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:0E:CE:83:41:85:BB:87:64:43:29:A9:DE:4F:DE:63:AD:9D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:e0:eb:21:dd:4d:07:19:96:57:0b:67:b8:c8:b6:5c:87:
         b3:e8:87:56:9a:fd:91:56:79:ba:af:ad:a9:32:c6:46:c9:d5:
         45:23:38:26:b5:56:10:31:0c:45:de:16:fa:f2:c7:9b:9c:64:
         9a:f0:92:73:c4:7f:ba:ab:02:4f:e9:77:99:bb:45:c4:8f:cb:
         25:bb:58:52:11:0e:6b:13:43:52:36:c9:cd:14:77:8c:69:72:
         4a:5b:e3:8c:b6:bb:1f:a6:f9:df:a9:a1:26:c1:46:8e:f2:ec:
         a7:25:e4:2a:99:3e:7f:df:9d:61:d0:f1:81:05:12:f3:dd:0e:
         ab:68:bb:bc:89:47:5b:d8:2c:9d:ae:d0:9e:ff:9a:73:01:83:
         8f:92:8c:80:7f:67:57:4f:a9:74:2b:62:d9:96:d7:7f:1a:dc:
         a3:3e:fd:de:7f:e7:73:86:5a:7e:2b:e1:4d:2b:01:1e:89:63:
         cd:e6:2b:0b:89:26:0b:8a:cc:84:98:4f:14:7d:26:44:6b:6a:
         f2:1f:1d:0a:99:be:2d:07:e9:fc:d8:d0:f5:c3:d2:c0:e7:b8:
         86:53:25:21:75:f5:fb:34:40:df:71:c9:ff:7a:9a:be:f9:28:
         29:70:cc:91:d0:d0:7d:a6:29:ca:a4:f1:ef:de:9f:3e:4f:fe:
         03:d0:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:08 2026 by rpki-client