Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe0dfa3-b985-3c5a-b0f3-5e975b123526.roa
File:                     dfe0dfa3-b985-3c5a-b0f3-5e975b123526.roa (raw, json)
Hash identifier:          AyIlQng8KyxpOC/7x09+51MCPQgpSkyIl8FkchmxU4U=
Subject key identifier:   24:71:D9:F2:7B:29:47:33:A4:4E:CA:E0:7B:E8:1F:64:0A:09:AC:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D62B231F40D7944A4D4766CE8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe0dfa3-b985-3c5a-b0f3-5e975b123526.roa
Signing time:             Fri 03 Apr 2026 16:29:50 +0000
ROA not before:           Fri 03 Apr 2026 16:29:50 +0000
ROA not after:            Thu 02 Jul 2026 16:29:50 +0000
asID:                     10753
IP address blocks:        50.114.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:b2:31:f4:0d:79:44:a4:d4:76:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 16:29:50 2026 GMT
            Not After : Jul  2 16:29:50 2026 GMT
        Subject: CN=411bc5d1-3640-467a-a36f-3dea2d26c7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:4b:f3:3f:7d:19:19:f5:ec:da:ca:47:d0:
                    52:cd:59:0e:54:95:ff:a2:4f:34:45:1d:6b:70:bd:
                    eb:f3:c1:f6:67:ba:99:6b:3e:cc:0b:af:4a:46:68:
                    72:22:99:6a:58:b3:f5:30:09:58:15:2c:dc:e5:6a:
                    54:3e:ad:04:e1:33:8e:c0:0b:b9:45:ce:cc:60:33:
                    e7:dd:2c:f8:5f:bb:32:43:37:79:39:0a:80:a9:df:
                    d1:28:63:cd:0c:f3:af:02:8b:73:b8:1b:8e:75:da:
                    49:68:69:f1:ff:08:4c:3f:6b:13:4d:16:cc:fd:e3:
                    0d:f9:a4:a1:95:27:35:d7:a2:39:f3:1f:03:92:57:
                    be:14:b2:6a:63:1a:e3:53:a3:7e:60:26:ce:34:4e:
                    11:59:a1:8f:b1:9c:bb:94:d9:b8:db:19:11:32:7b:
                    d7:d3:5f:11:38:7b:fb:ef:35:f8:9a:d5:43:b1:32:
                    54:dc:f6:74:55:be:38:30:88:32:02:9a:13:27:ce:
                    7b:24:48:10:7d:f2:02:77:24:d5:49:ac:5b:0b:37:
                    79:bf:4f:df:e2:09:a7:5b:d7:cd:2f:50:c8:f4:cf:
                    6d:fa:81:e2:30:03:16:04:60:ab:5d:96:90:e6:95:
                    8c:b3:09:c4:88:75:fe:39:ce:31:8b:d0:03:f5:8f:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:71:D9:F2:7B:29:47:33:A4:4E:CA:E0:7B:E8:1F:64:0A:09:AC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe0dfa3-b985-3c5a-b0f3-5e975b123526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:f7:1f:fc:33:c6:f0:dc:26:6b:13:09:6e:31:94:38:7a:
         eb:8c:bf:3b:14:9e:07:07:f0:c8:82:ac:42:cb:9b:1e:93:09:
         74:69:1b:3c:51:c2:c8:04:0d:e0:6f:d7:76:41:98:df:b5:2e:
         73:bc:8a:28:8e:9a:2c:76:68:e5:06:56:b9:33:4a:94:97:51:
         f7:e0:43:37:71:80:d9:82:c9:b7:a0:75:e0:0c:da:41:2f:6b:
         f8:41:8a:99:39:b2:5b:fa:c5:ac:e2:57:0c:2f:c5:5b:36:bf:
         98:a8:c6:05:c3:af:68:03:a9:9b:b3:0d:f8:62:f4:21:f7:07:
         f1:ce:66:93:62:e4:aa:2c:8f:82:7d:9d:9a:93:eb:24:a7:51:
         28:0b:cc:46:35:70:31:2e:94:7d:8d:15:89:e6:6a:68:5a:6d:
         17:4a:78:1d:a3:b9:9e:77:d3:16:10:69:79:2f:33:56:93:0c:
         81:5d:58:d1:5c:73:60:88:ac:1b:f3:70:13:14:e7:8a:d4:60:
         3c:24:0b:9c:fd:c7:97:e5:34:e9:31:20:49:bb:b9:d2:51:af:
         73:33:9d:d3:54:8c:93:1a:c9:a9:92:d1:38:ac:1c:33:f8:90:
         72:29:11:53:46:e3:6e:05:3c:28:45:0b:61:fe:6a:02:91:94:
         0c:ac:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 15:28:45 2026 by rpki-client