Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa
File:                     eaa9968a-04da-3321-bae3-6e45c1621bf4.roa (raw, json)
Hash identifier:          bD7PNkaPaqEKn9D4zGPhe9u3P/6LiquWH48tx9yOAx8=
Subject key identifier:   39:FC:1D:5E:6D:00:E6:49:4E:8E:B1:0E:2E:5B:EF:16:17:AB:CC:F0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EE38CA913F7C839F35089FD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     47516
IP address blocks:        50.114.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a9:13:f7:c8:39:f3:50:89:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=409eae8a-8c68-4302-be93-a5b1113f6de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:06:17:ca:93:41:1b:1c:c9:7b:a1:a9:eb:
                    09:f4:b8:d2:ff:d8:97:2d:fc:bd:e4:cc:cc:d2:f7:
                    5d:11:f9:b6:6f:dc:94:66:65:f3:53:66:5b:59:b2:
                    16:b4:78:45:1c:72:6b:db:93:b8:ff:77:6b:a4:46:
                    63:5c:ff:b2:c6:ae:de:eb:54:f0:e2:27:90:98:0b:
                    23:68:22:cb:a3:ca:0c:0a:46:60:bf:77:06:79:3b:
                    3e:d0:d9:89:b0:da:3a:8d:97:4b:49:b5:8b:75:8a:
                    dd:84:a9:98:a6:93:35:b5:8c:0a:d1:dc:8f:04:cd:
                    7e:bb:f5:da:f8:77:5a:86:30:e5:12:5d:61:9d:75:
                    b7:2e:b7:24:87:1d:f4:00:d2:65:ac:cb:17:f3:c3:
                    f4:11:c9:a8:3d:b7:a9:00:90:c9:86:9c:06:d3:36:
                    27:aa:8c:0a:69:39:6e:f6:32:c9:6f:8c:23:4a:1b:
                    5c:75:96:8e:81:d5:5d:58:04:65:9d:58:7f:1b:d2:
                    5f:8a:49:2a:42:5d:0d:cd:21:bb:09:0a:a9:77:3a:
                    14:8d:8e:48:33:d4:19:a8:47:14:31:66:05:01:c6:
                    94:63:89:3d:bb:2d:46:c6:0c:c9:09:e4:00:78:4a:
                    7c:95:97:21:56:fb:1a:8a:ee:d5:a3:c1:59:93:5c:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FC:1D:5E:6D:00:E6:49:4E:8E:B1:0E:2E:5B:EF:16:17:AB:CC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1c:46:ee:3c:bc:b1:e5:43:a2:fd:72:fa:ba:ac:18:f3:a6:
         c3:91:88:ea:e9:38:47:67:22:e0:c9:da:eb:27:fa:88:03:85:
         8c:1d:a6:82:e6:78:31:84:48:44:10:9e:63:4b:1a:78:9f:e8:
         d5:d2:3f:39:17:73:8b:f8:49:0c:f1:8a:e7:eb:aa:58:ce:b7:
         c7:7d:54:bc:75:58:35:0f:e3:39:7e:7c:da:e7:b8:b8:1d:ab:
         ed:b6:0c:e8:0a:1a:3c:80:ba:e6:eb:7e:2a:72:79:36:35:b6:
         8f:ca:55:dd:72:2d:dd:5d:cb:ec:33:b3:f9:b7:13:08:3f:87:
         46:f0:fd:ec:aa:06:31:9d:f8:0c:4d:03:5f:c5:fb:bd:7d:8e:
         21:0f:ca:96:22:ae:f3:b2:25:8b:a5:a6:1b:18:6a:36:7d:b1:
         1c:03:30:30:b6:42:6d:cd:80:ab:76:2d:cb:c6:ab:ab:a6:c8:
         6c:0c:39:db:73:ab:f1:b6:07:7a:ea:24:3c:42:ee:58:4e:78:
         8d:6b:75:86:bd:b7:e2:8c:23:f3:dd:7d:44:a2:ca:45:2f:46:
         e6:a6:44:c5:e0:59:cd:99:5a:7a:b7:d2:85:7e:ff:cd:84:0f:
         b2:e2:22:28:c3:33:2d:63:29:94:89:85:ff:54:93:5b:95:76:
         33:08:42:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKkT98g581CJ/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
NDA5ZWFlOGEtOGM2OC00MzAyLWJlOTMtYTViMTExM2Y2ZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUgGF8qTQRscyXuhqesJ9LjS/9iXLfy95MzM
0vddEfm2b9yUZmXzU2ZbWbIWtHhFHHJr25O4/3drpEZjXP+yxq7e61Tw4ieQmAsj
aCLLo8oMCkZgv3cGeTs+0NmJsNo6jZdLSbWLdYrdhKmYppM1tYwK0dyPBM1+u/Xa
+HdahjDlEl1hnXW3Lrckhx30ANJlrMsX88P0EcmoPbepAJDJhpwG0zYnqowKaTlu
9jLJb4wjShtcdZaOgdVdWARlnVh/G9JfikkqQl0NzSG7CQqpdzoUjY5IM9QZqEcU
MWYFAcaUY4k9uy1GxgzJCeQAeEp8lZchVvsaiu7Vo8FZk1xCRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDn8HV5tAOZJTo6xDi5b7xYXq8zwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWFhOTk2OGEtMDRkYS0z
MzIxLWJhZTMtNmU0NWMxNjIxYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnK5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJocRu48vLHlQ6L9cvq6rBjzpsORiOrpOEdnIuDJ2usn+ogDhYwdpoLm
eDGESEQQnmNLGnif6NXSPzkXc4v4SQzxiufrqljOt8d9VLx1WDUP4zl+fNrnuLgd
q+22DOgKGjyAuubrfipyeTY1to/KVd1yLd1dy+wzs/m3Ewg/h0bw/eyqBjGd+AxN
A1/F+719jiEPypYirvOyJYulphsYajZ9sRwDMDC2Qm3NgKt2LcvGq6umyGwMOdtz
q/G2B3rqJDxC7lhOeI1rdYa9t+KMI/PdfUSiykUvRuamRMXgWc2ZWnq30oV+/82E
D7LiIijDMy1jKZSJhf9Uk1uVdjMIQvg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:00:12 2026 by rpki-client