Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaec6766-78db-3d39-a04b-abdc2bd96ae3.roa
File:                     eaec6766-78db-3d39-a04b-abdc2bd96ae3.roa (raw, json)
Hash identifier:          b68AqkhpHIIC+BygZ4NJ7NX9QhSJgRI2N20worOedpc=
Subject key identifier:   37:40:83:21:E5:11:ED:9A:DE:A6:F5:75:2F:42:E5:77:26:0C:AE:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F9BCDBB2AD257E804C620B228
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaec6766-78db-3d39-a04b-abdc2bd96ae3.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     49770
IP address blocks:        50.114.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:bb:2a:d2:57:e8:04:c6:20:b2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=a6bff6ce-3da4-44a3-9371-c2c04b885a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:90:13:a4:a2:db:6e:12:5c:20:9e:48:be:
                    9a:4d:a5:eb:ff:28:1b:e2:cc:44:47:f2:61:f7:65:
                    b8:57:2b:a6:a1:f5:87:19:a6:45:7c:28:38:9b:4d:
                    83:bc:83:3f:07:0f:43:e9:ab:a0:1e:3e:e8:c9:d9:
                    08:5f:4b:6e:dc:26:fc:be:42:9f:80:16:9f:f8:cf:
                    7c:7a:b4:3c:88:4b:45:88:7c:85:be:93:58:5e:cc:
                    1d:d0:62:60:08:a8:55:6a:74:79:ac:cc:8d:17:73:
                    8b:e4:c1:11:c7:be:7b:0d:4f:c7:80:ac:0a:d7:d3:
                    ab:8d:49:0a:f5:e6:47:f3:72:03:4d:25:99:75:6a:
                    51:03:4c:2b:d0:6c:ca:44:20:5a:8e:36:d0:a0:d4:
                    40:c0:2f:bc:e5:ba:79:a8:7b:6b:f7:14:49:f7:7f:
                    d2:4d:b2:73:5e:0c:96:d8:5b:ec:eb:a5:4a:71:25:
                    0d:9d:72:06:29:6b:1a:cf:fd:0b:1a:ad:12:75:20:
                    c0:87:06:ec:41:8d:e5:e7:56:bb:42:af:86:a0:66:
                    18:51:f5:ab:89:ed:aa:27:df:cd:ef:a8:cf:a9:f9:
                    b6:10:4d:6b:2c:94:f1:b2:bc:00:62:fc:5f:3e:3e:
                    78:5a:ad:b0:1c:26:37:ad:f0:14:f5:f2:17:00:ea:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:83:21:E5:11:ED:9A:DE:A6:F5:75:2F:42:E5:77:26:0C:AE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaec6766-78db-3d39-a04b-abdc2bd96ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:44:94:a2:a2:2e:ca:33:08:fe:18:25:37:bf:6e:28:99:a2:
         7a:a1:54:a8:a8:85:82:cf:2a:80:ca:fa:6a:17:3a:73:93:7e:
         60:d8:dc:13:63:f0:c2:4a:43:c4:60:f8:b8:2b:21:76:1a:90:
         48:f0:a5:36:87:22:08:d3:62:fb:17:1c:ef:e2:25:34:bf:66:
         3c:63:b4:6e:16:3f:00:bf:fb:c8:c1:3a:bf:3f:ff:70:3a:65:
         38:ef:18:52:fa:79:b8:11:4b:61:ee:01:9b:2c:ba:90:26:67:
         2a:ca:3b:99:6a:0a:de:49:27:ff:c7:4c:ca:af:ff:0e:3c:23:
         d4:5f:43:12:59:dc:cc:6a:f2:41:8f:b5:95:84:3a:2f:5d:93:
         5e:86:66:62:5a:8e:42:e8:eb:ba:2a:f1:ed:cc:d6:6a:64:be:
         40:93:0e:cf:53:95:3e:a3:0d:ed:13:2b:ff:fe:b7:69:90:94:
         2b:e8:cd:b8:ff:6e:04:2a:e9:f6:46:cf:75:56:9a:81:af:46:
         e5:4d:b4:33:96:88:b3:92:44:ce:35:a7:22:07:8b:65:5b:ed:
         06:38:23:8c:de:37:26:b6:49:82:e6:01:be:53:21:b3:ab:32:
         48:5f:98:8d:ae:99:70:5c:f8:3e:5e:c7:0d:f3:4a:35:c9:a8:
         91:bd:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:46:38 2026 by rpki-client