Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa
File:                     c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa (raw, json)
Hash identifier:          Ua6BFt+7EIr8FQqJsYhpE4pbquCJ+aeBTchDT7E6ljI=
Subject key identifier:   C8:F6:55:51:67:32:43:5F:4A:92:5F:E8:AB:D2:D8:18:7E:C6:88:1B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D8EB770A4EB71B242680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa
Signing time:             Mon 23 Mar 2026 19:53:42 +0000
ROA not before:           Mon 23 Mar 2026 19:53:42 +0000
ROA not after:            Sun 21 Jun 2026 19:53:42 +0000
asID:                     11798
IP address blocks:        50.114.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d8:eb:77:0a:4e:b7:1b:24:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:42 2026 GMT
            Not After : Jun 21 19:53:42 2026 GMT
        Subject: CN=8de42695-ca9d-4582-8c31-ce55c0569f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:cc:14:f1:18:ab:f8:22:2e:1e:1b:08:3b:
                    64:88:25:1a:6f:8f:d2:e7:a8:94:fe:51:e5:00:42:
                    d7:d7:6c:f4:2c:17:52:9f:92:57:d5:ae:a9:37:a5:
                    e1:86:b2:76:1b:34:51:e3:6a:07:6f:ca:22:14:bd:
                    ce:b2:bc:b7:ad:13:f6:d6:40:7b:00:cb:6b:87:10:
                    21:57:c9:c7:07:19:b1:c3:33:90:f7:8a:08:8c:fd:
                    01:0c:9b:cf:8b:d3:4f:83:de:f8:e7:ec:8c:b7:29:
                    39:f1:8e:9a:b8:87:ca:43:cd:16:ec:32:12:89:bb:
                    8e:b8:22:29:0e:09:0e:19:6d:3d:0a:4f:74:fb:06:
                    67:d7:1a:b7:ab:f9:29:2f:ef:15:37:3b:e1:09:0a:
                    38:e4:b1:18:3c:cf:fc:8c:78:c2:6d:b4:de:87:0c:
                    99:1a:b9:30:82:e9:67:07:4e:91:65:ff:37:03:ef:
                    be:7a:b7:02:72:e4:c9:c1:d0:d5:26:53:11:44:2e:
                    ba:b9:21:d2:aa:6d:48:04:2b:64:4c:07:d4:e2:16:
                    39:6c:4c:f3:7a:3c:c9:00:0e:e1:c5:67:7e:d5:10:
                    4d:d9:39:6d:de:6b:13:09:78:21:56:c3:c4:a9:3b:
                    ec:d6:2a:f9:42:13:9f:7a:a8:3a:86:4e:17:e6:dc:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F6:55:51:67:32:43:5F:4A:92:5F:E8:AB:D2:D8:18:7E:C6:88:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3834690-e9b6-3cf9-97a9-0ae0c2b950cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:9d:09:bb:97:d8:07:f2:c1:4e:e9:51:d8:e3:a1:70:23:
         65:ea:9e:c7:62:71:f1:85:3f:73:33:30:6f:90:07:4e:2f:4b:
         16:12:1d:c6:e3:fd:27:bd:d8:91:24:91:5d:99:71:13:0d:73:
         ab:53:2e:55:60:ce:31:bb:cc:a1:71:9e:3d:b1:a6:96:a1:ef:
         c4:1a:a4:ea:42:fb:07:46:22:62:a6:55:2a:80:ac:3d:46:a5:
         82:08:85:7a:9b:98:4c:94:f4:7f:9f:b2:fe:21:7c:8c:e9:45:
         7f:80:1e:af:23:78:90:38:e2:7c:66:43:2a:3b:f2:c5:ac:85:
         31:9b:f6:eb:62:42:45:f6:c1:91:7f:92:8e:83:10:50:69:bb:
         36:b8:3c:96:34:57:b2:25:87:e8:a6:22:22:fd:44:14:38:3c:
         78:ca:f4:a8:67:c7:d5:79:47:72:14:94:12:9a:a6:79:d0:cd:
         79:a1:ac:2b:bb:2c:58:67:9d:e9:18:62:93:d6:bc:39:6d:e7:
         d9:22:5b:68:40:37:5f:ae:a0:55:af:61:67:36:88:bf:91:34:
         54:ae:68:0b:fe:be:8f:b0:f6:0b:62:3e:34:c9:dd:7a:f4:c6:
         a8:25:29:e7:c5:61:af:58:98:0e:ff:cb:9b:c1:f1:4e:02:85:
         7c:29:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:35:04 2026 by rpki-client