Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e038a2fd-022e-3fee-9efe-d28c7bc5666d.roa
File:                     e038a2fd-022e-3fee-9efe-d28c7bc5666d.roa (raw, json)
Hash identifier:          BB9kVk3sEQqJ3gsr+1YSQXEGJuj+br7NgS7zmQ3ELt0=
Subject key identifier:   9B:D2:2B:D7:8F:84:AF:CF:9B:90:5C:8A:65:41:C6:13:71:21:8D:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D25DE17360E54C119B0A99E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e038a2fd-022e-3fee-9efe-d28c7bc5666d.roa
Signing time:             Thu 12 Mar 2026 21:33:58 +0000
ROA not before:           Thu 12 Mar 2026 21:33:58 +0000
ROA not after:            Wed 10 Jun 2026 21:33:58 +0000
asID:                     401152
IP address blocks:        50.114.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:de:17:36:0e:54:c1:19:b0:a9:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 12 21:33:58 2026 GMT
            Not After : Jun 10 21:33:58 2026 GMT
        Subject: CN=9d137b4f-3c7b-4149-aca8-82e4330a66e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:ab:5b:e5:60:ac:c5:7e:57:ba:f5:5d:13:
                    bf:24:07:a7:7e:0d:be:53:98:36:87:7e:10:fb:71:
                    c1:f2:47:34:2f:d1:f9:0b:76:50:fd:c9:53:ca:c1:
                    e7:83:75:60:05:c0:aa:33:a7:5c:b9:d3:a3:1c:49:
                    49:c7:18:60:70:7a:dc:e6:59:42:40:f8:87:01:5d:
                    50:17:4e:38:ab:ce:d5:68:cb:ba:48:70:97:50:2f:
                    87:a6:3a:b5:c5:77:71:e3:9d:9c:b6:41:e2:98:6b:
                    ee:31:76:88:e5:ac:ee:22:b0:71:04:6f:db:60:d6:
                    43:94:78:b8:23:93:e7:37:f5:15:09:e5:e0:94:59:
                    e6:2d:99:2e:84:e9:3f:15:d0:da:da:b2:4f:46:36:
                    6d:a7:f1:f4:9a:95:9d:77:ed:d4:63:84:f2:e5:d5:
                    41:7a:6e:c7:ec:44:7e:fe:20:64:83:24:3f:95:37:
                    56:0e:c0:2a:9c:3c:e1:38:50:01:2b:17:56:cd:c0:
                    e2:86:63:59:58:d8:61:79:63:f0:d6:a5:4d:b2:d6:
                    5c:9a:be:6e:96:9c:2c:35:5b:5a:68:ad:4e:2b:3d:
                    5a:6b:f7:4d:6a:3e:d3:5f:22:3b:4c:09:7c:b8:cc:
                    e5:35:a6:29:f5:0a:80:4b:16:8b:9c:45:05:7d:14:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:2B:D7:8F:84:AF:CF:9B:90:5C:8A:65:41:C6:13:71:21:8D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e038a2fd-022e-3fee-9efe-d28c7bc5666d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:f3:0d:e3:7d:d7:70:59:2d:22:fa:d4:0c:e7:9b:8a:b5:
         c8:28:49:d2:da:e5:90:c4:06:85:a9:a6:68:ad:b3:51:88:2e:
         b4:ea:80:89:a8:86:54:cc:a6:1c:92:00:4f:48:4c:d6:2f:1b:
         34:9f:6d:f2:aa:61:99:e5:ba:c8:34:1f:80:1c:e7:a3:57:dc:
         83:e9:01:c7:a8:f3:77:10:8c:ff:77:32:bc:74:94:0d:0f:57:
         54:46:05:af:44:18:b6:be:5d:8a:d3:c4:5d:d5:0d:90:13:09:
         0a:f3:75:26:d5:3e:e0:2f:4b:52:30:fe:f7:14:0c:ea:b0:53:
         1a:d2:d3:64:64:ae:57:61:16:69:ae:a9:16:d3:9f:81:5d:b5:
         8a:4f:2f:ee:95:3a:83:c0:bd:5a:6f:64:d5:e8:2a:3d:84:28:
         65:8a:af:a0:f4:e4:40:25:0c:6f:1d:f0:5f:d6:1f:dc:3f:c2:
         14:b7:8e:90:aa:77:14:0a:50:61:a5:1e:93:89:3c:6d:07:e2:
         93:79:b3:51:8e:23:d9:ea:5b:23:05:e7:29:f1:7f:62:1b:a4:
         a3:8d:76:8a:6b:37:cd:58:21:e8:e6:cc:a5:54:51:49:43:cc:
         c7:d0:ce:76:3f:49:d0:68:d5:71:2b:30:30:68:be:c1:cd:72:
         26:3c:b5:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0l3hc2DlTBGbCpnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxMjIxMzM1OFoXDTI2MDYxMDIxMzM1OFowLzEtMCsGA1UEAxMk
OWQxMzdiNGYtM2M3Yi00MTQ5LWFjYTgtODJlNDMzMGE2NmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGrW+VgrMV+V7r1XRO/JAenfg2+U5g2h34Q
+3HB8kc0L9H5C3ZQ/clTysHng3VgBcCqM6dcudOjHElJxxhgcHrc5llCQPiHAV1Q
F044q87VaMu6SHCXUC+Hpjq1xXdx452ctkHimGvuMXaI5azuIrBxBG/bYNZDlHi4
I5PnN/UVCeXglFnmLZkuhOk/FdDa2rJPRjZtp/H0mpWdd+3UY4Ty5dVBem7H7ER+
/iBkgyQ/lTdWDsAqnDzhOFABKxdWzcDihmNZWNhheWPw1qVNstZcmr5ulpwsNVta
aK1OKz1aa/dNaj7TXyI7TAl8uMzlNaYp9QqASxaLnEUFfRQhKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvSK9ePhK/Pm5BcimVBxhNxIY0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTAzOGEyZmQtMDIyZS0z
ZmVlLTllZmUtZDI4YzdiYzU2NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlP8w3jfddwWS0i+tQM55uKtcgoSdLa5ZDEBoWppmits1GILrTqgImo
hlTMphySAE9ITNYvGzSfbfKqYZnlusg0H4Ac56NX3IPpAceo83cQjP93Mrx0lA0P
V1RGBa9EGLa+XYrTxF3VDZATCQrzdSbVPuAvS1Iw/vcUDOqwUxrS02RkrldhFmmu
qRbTn4FdtYpPL+6VOoPAvVpvZNXoKj2EKGWKr6D05EAlDG8d8F/WH9w/whS3jpCq
dxQKUGGlHpOJPG0H4pN5s1GOI9nqWyMF5ynxf2IbpKONdoprN81YIejmzKVUUUlD
zMfQznY/SdBo1XErMDBovsHNciY8tXk=
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:55:16 2026 by rpki-client