Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6c01e0f-7a1a-3dbb-bbef-5293ba7957e3.roa
File:                     c6c01e0f-7a1a-3dbb-bbef-5293ba7957e3.roa (raw, json)
Hash identifier:          +EGH/qTttseFtQPig8shGdBmgyCdqEyTTNDiI5GoDXw=
Subject key identifier:   26:B5:3A:D5:5F:A8:0B:5A:B0:84:26:0E:7C:37:7A:44:48:C1:04:3A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E043615B021EA732032EF2E40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6c01e0f-7a1a-3dbb-bbef-5293ba7957e3.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     197450
IP address blocks:        50.114.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:15:b0:21:ea:73:20:32:ef:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d0f21bb6-a315-4ce2-adc5-30e0652bdd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6b:a1:47:42:c8:bb:77:be:62:a2:6b:2a:42:
                    7b:2e:cd:ce:b0:c3:2f:76:23:ea:77:70:d3:d2:98:
                    a1:16:3b:4b:35:2f:e4:64:4b:bf:9a:c0:d1:01:5b:
                    34:af:40:19:d6:e9:6f:22:1d:3e:95:8d:5a:c2:2f:
                    64:0e:75:6a:50:d6:72:4d:ec:cd:20:13:56:12:f1:
                    9c:e8:af:aa:02:12:72:06:e2:8e:99:d2:da:cc:b6:
                    0d:b2:ea:da:9e:50:70:e2:13:be:b6:5d:46:96:25:
                    be:e0:77:0d:52:1e:c9:c5:46:52:39:1a:e4:24:92:
                    9e:24:e5:f3:10:18:c2:fe:00:19:c1:0e:c0:8c:7c:
                    3a:70:ae:a6:f5:a3:05:90:ec:b9:7d:ff:29:58:bf:
                    70:20:48:f2:34:b4:73:f7:55:3a:51:cf:87:0b:27:
                    83:f1:7e:9b:db:5a:89:fb:19:a9:3b:b8:06:62:f1:
                    0d:61:93:25:c7:e5:b4:d1:44:d1:17:4b:da:72:87:
                    d8:73:bb:2a:5e:03:09:d4:bd:6a:e0:4b:75:2a:84:
                    b7:6f:18:44:b9:48:97:03:45:ac:70:1e:98:94:fa:
                    f6:9f:2b:e4:53:01:71:3c:db:3d:0b:50:85:c2:11:
                    9d:d5:26:bb:b2:fb:4c:af:4c:8d:82:7e:ae:6e:e2:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:3A:D5:5F:A8:0B:5A:B0:84:26:0E:7C:37:7A:44:48:C1:04:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6c01e0f-7a1a-3dbb-bbef-5293ba7957e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:12:c0:f4:b1:00:84:e2:56:30:4b:4d:3f:1a:d4:cf:06:
         ae:de:08:48:eb:c1:e4:76:eb:67:89:00:25:a0:e0:5e:6e:b0:
         9a:c3:a3:46:30:65:07:de:03:6b:fa:4c:47:3c:2a:7e:43:07:
         b6:2b:d2:3d:9d:5a:f9:eb:a0:9d:b1:15:90:e2:d9:4f:d5:61:
         6b:ae:0d:be:d7:80:14:93:e0:08:fa:d9:dd:29:71:a8:68:3b:
         55:a1:22:f9:70:7d:ec:b5:9e:22:15:03:85:40:46:94:01:64:
         e7:fa:33:21:51:f7:c6:39:e2:5e:5c:d7:5f:5a:a6:20:83:95:
         04:46:e0:29:3c:a9:87:24:96:9c:39:5d:bd:8d:aa:90:6b:9d:
         12:e9:31:2d:24:16:51:22:e8:87:48:7b:a3:09:57:b1:6b:80:
         db:e5:4c:1e:21:06:a2:e3:34:c1:b9:62:20:9a:0a:62:c1:a7:
         0d:55:59:56:2c:c5:d0:60:82:c2:fe:c2:05:f4:81:2e:f3:82:
         ab:3d:ce:4e:a4:3e:42:4c:0f:f8:5f:c5:8e:d5:f5:07:59:c6:
         31:1d:21:6a:84:fd:f8:fb:67:e4:c4:56:8b:fd:fd:dd:e0:e8:
         db:dc:2f:f6:d0:22:f3:f0:42:cf:30:0e:24:d8:80:06:17:5e:
         34:a8:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:45:49 2026 by rpki-client