Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1ee2ef2-7e91-3110-946a-25a6cbe5627a.roa
File:                     f1ee2ef2-7e91-3110-946a-25a6cbe5627a.roa (raw, json)
Hash identifier:          VVUyA3eFjmp1zfCr069IbXTNtaoYAh/4mjx7Jthcw+k=
Subject key identifier:   43:16:B7:E6:72:DD:99:15:BE:7F:61:67:DD:37:47:54:33:67:06:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D9505E51C5398F7B7141AC780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1ee2ef2-7e91-3110-946a-25a6cbe5627a.roa
Signing time:             Tue 21 Apr 2026 17:08:54 +0000
ROA not before:           Tue 21 Apr 2026 17:08:54 +0000
ROA not after:            Mon 20 Jul 2026 17:08:54 +0000
asID:                     42831
IP address blocks:        50.114.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:05:e5:1c:53:98:f7:b7:14:1a:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 21 17:08:54 2026 GMT
            Not After : Jul 20 17:08:54 2026 GMT
        Subject: CN=814284aa-8161-4ab1-95cc-acb7db2ae8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:c9:dd:71:a8:8e:7c:b1:b3:9c:f8:61:2a:
                    7a:7f:f3:8d:46:05:ec:81:26:13:da:86:e7:10:39:
                    f9:60:bd:4b:38:4a:11:7d:69:fa:f2:f4:18:d4:52:
                    22:85:f9:f4:d4:a9:2a:7e:9a:ae:66:19:a2:a9:22:
                    3b:c5:c1:63:dd:0a:aa:43:f0:94:b3:91:31:57:95:
                    dc:81:64:e0:86:7a:5b:21:8e:87:45:e6:4a:5a:d3:
                    18:85:01:bd:6e:94:28:94:24:7c:d1:59:44:07:1d:
                    3c:8f:4c:be:e1:9b:3e:3e:60:a0:d6:e5:04:2e:90:
                    2b:0b:21:c0:b3:4a:87:68:0b:b7:0f:0b:e3:13:09:
                    a4:20:8f:c6:80:3d:7d:48:8b:26:48:8e:04:e8:99:
                    b4:d6:03:bb:67:7b:b9:4f:83:8e:93:cb:78:52:ef:
                    9f:59:ea:80:f0:b1:3a:d8:f5:ca:4c:66:bb:0c:06:
                    54:22:c2:e6:d5:47:0f:51:3a:20:2c:55:c1:d3:5b:
                    8b:d0:92:48:60:4a:e4:7f:79:ea:1e:03:8f:f3:6c:
                    d1:e6:1e:ee:53:79:4b:9a:47:c5:38:e7:4b:bb:c0:
                    ba:03:e0:f4:c8:24:59:39:f9:ef:a9:8c:09:10:c3:
                    06:41:d6:f0:c0:70:5a:03:f4:ef:29:68:13:0c:37:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:B7:E6:72:DD:99:15:BE:7F:61:67:DD:37:47:54:33:67:06:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1ee2ef2-7e91-3110-946a-25a6cbe5627a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:e6:c3:37:b0:10:94:ab:9a:0d:28:56:87:c3:b5:4f:b5:
         8f:a4:96:aa:8e:c4:d4:02:c7:57:11:d3:41:94:7c:69:bd:95:
         e4:d4:4a:8f:4f:48:a5:47:08:c9:a6:20:77:b1:00:b4:f2:da:
         46:e3:c9:32:02:18:e5:c8:22:c6:90:8c:1c:14:c5:ec:60:56:
         11:f8:03:8e:13:98:0a:ca:5d:2b:05:45:71:2f:fc:2f:ef:43:
         9f:90:d0:a6:4d:b3:3c:1e:7c:85:64:d7:a8:ac:93:c9:dd:fd:
         c6:02:de:60:2d:12:09:c0:d9:e7:33:cb:24:92:3a:f2:3a:2c:
         bf:bf:7d:ac:9a:47:01:93:4c:13:ae:f5:e3:76:cb:64:6b:1a:
         25:25:ee:11:a2:a7:bd:65:06:08:57:aa:43:06:3a:a7:b1:2e:
         ea:15:8f:af:92:7f:94:53:8a:81:7f:c1:a9:d6:65:75:60:91:
         8a:02:67:13:5e:2e:e1:f2:c4:88:a7:17:d2:09:21:aa:11:62:
         4b:21:d2:a7:df:96:54:d9:71:07:d0:a2:23:ee:e8:cf:0f:94:
         b4:60:6e:7e:36:1d:e2:a8:7d:db:04:d4:25:91:ab:f0:18:1d:
         6f:cf:74:ae:72:03:25:55:0f:c2:7d:a9:a1:05:fe:bd:7c:80:
         de:a8:ac:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VBeUcU5j3txQax4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQyMTE3MDg1NFoXDTI2MDcyMDE3MDg1NFowLzEtMCsGA1UEAxMk
ODE0Mjg0YWEtODE2MS00YWIxLTk1Y2MtYWNiN2RiMmFlOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAvJ3XGojnyxs5z4YSp6f/ONRgXsgSYT2obn
EDn5YL1LOEoRfWn68vQY1FIihfn01KkqfpquZhmiqSI7xcFj3QqqQ/CUs5ExV5Xc
gWTghnpbIY6HReZKWtMYhQG9bpQolCR80VlEBx08j0y+4Zs+PmCg1uUELpArCyHA
s0qHaAu3DwvjEwmkII/GgD19SIsmSI4E6Jm01gO7Z3u5T4OOk8t4Uu+fWeqA8LE6
2PXKTGa7DAZUIsLm1UcPUTogLFXB01uL0JJIYErkf3nqHgOP82zR5h7uU3lLmkfF
OOdLu8C6A+D0yCRZOfnvqYwJEMMGQdbwwHBaA/TvKWgTDDeAdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMWt+Zy3ZkVvn9hZ903R1QzZwbmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjFlZTJlZjItN2U5MS0z
MTEwLTk0NmEtMjVhNmNiZTU2MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnL8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRf5sM3sBCUq5oNKFaHw7VPtY+klqqOxNQCx1cR00GUfGm9leTUSo9P
SKVHCMmmIHexALTy2kbjyTICGOXIIsaQjBwUxexgVhH4A44TmArKXSsFRXEv/C/v
Q5+Q0KZNszwefIVk16isk8nd/cYC3mAtEgnA2eczyySSOvI6LL+/fayaRwGTTBOu
9eN2y2RrGiUl7hGip71lBghXqkMGOqexLuoVj6+Sf5RTioF/wanWZXVgkYoCZxNe
LuHyxIinF9IJIaoRYksh0qffllTZcQfQoiPu6M8PlLRgbn42HeKofdsE1CWRq/AY
HW/PdK5yAyVVD8J9qaEF/r18gN6orDE=
-----END CERTIFICATE-----
Generated at Thu Apr 23 21:41:02 2026 by rpki-client