Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
File:                     fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa (raw, json)
Hash identifier:          UxrSLPazKJ3eOA5+XmA0++jGwAp1+8nlp8LhANm7fvk=
Subject key identifier:   78:65:C9:AC:69:C2:56:5D:B7:87:95:09:FE:32:5F:15:79:31:6B:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D8AC54D8D167BA30DC18715C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     22168
IP address blocks:        50.114.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:4d:8d:16:7b:a3:0d:c1:87:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=607124fd-772b-47f4-9c03-a8b963b9acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:eb:e5:c3:a7:95:29:6c:3d:15:c5:19:af:
                    f2:97:b2:c0:0e:ef:0d:d5:d0:4b:51:61:29:76:7a:
                    ec:92:b3:86:54:1a:cf:a9:0f:cc:f0:8f:90:53:0d:
                    87:0e:a3:1e:82:54:a5:5f:77:f7:e9:4a:af:2b:59:
                    f0:ab:62:51:8b:7c:bb:6b:48:b9:79:71:62:98:1e:
                    de:2f:e0:19:5e:9c:f6:c8:38:9d:f3:3a:40:6e:f7:
                    9a:79:94:17:44:dd:4c:e5:ee:87:9b:3b:47:95:d6:
                    9f:dd:68:98:0a:82:c1:5f:a0:bc:89:50:79:38:f3:
                    76:85:aa:ef:bb:87:d3:40:d1:0f:5f:26:f2:d7:07:
                    d1:3e:c7:9e:4f:73:b0:c1:13:5a:d8:79:af:cd:65:
                    38:86:bd:d0:7c:be:95:3f:ac:92:66:22:de:81:85:
                    a1:38:39:48:c2:47:7c:12:8b:18:6c:51:21:8f:b8:
                    93:86:da:1f:02:d7:43:48:eb:68:90:1d:b8:a1:2c:
                    ee:6c:bc:31:81:14:16:27:42:10:b7:7e:64:46:f7:
                    a9:19:73:b8:1e:66:b2:ed:14:ba:b9:5e:b9:54:82:
                    e1:14:9c:09:41:82:57:74:8c:73:a6:c7:68:52:3a:
                    73:bb:e2:d4:d7:b2:67:2f:4d:73:f7:a8:99:27:b2:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:65:C9:AC:69:C2:56:5D:B7:87:95:09:FE:32:5F:15:79:31:6B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:9c:a6:f1:45:c3:93:5b:7f:8f:1f:63:cd:12:2d:ed:5d:
         88:19:e8:28:56:ca:68:b1:d2:5b:92:ef:05:bc:20:76:2e:a7:
         d8:84:de:6a:39:a2:f6:2c:d6:fc:aa:be:c1:18:d4:f1:0a:a9:
         14:6b:46:69:14:f0:9c:2c:5e:35:4a:f3:2a:82:1d:83:53:ed:
         8e:b3:33:7c:f4:f5:8f:52:de:89:fd:1e:5c:2b:31:09:e3:5f:
         40:cb:06:e0:fc:f9:bd:04:61:58:e6:9f:26:20:11:9b:03:9b:
         d8:2c:a5:71:39:f0:16:82:91:14:fe:21:cc:29:43:00:d7:82:
         8b:c9:69:be:34:5b:9a:3a:db:a0:40:17:5a:b3:a8:c9:24:33:
         0f:8e:d0:9b:ae:2f:10:d3:8a:05:ae:97:4e:ba:f2:02:78:f6:
         97:f0:6d:5e:76:85:31:a7:67:13:32:af:0c:fc:d8:39:73:73:
         c1:26:b7:c9:6d:c9:4d:52:90:11:c3:36:cb:d6:31:e7:95:d4:
         b0:cf:8a:b7:28:5d:6b:58:81:77:68:e1:e4:70:9f:dd:34:a9:
         1b:f7:20:b8:e0:5a:47:fa:b6:85:5f:d9:f5:40:98:7a:7e:d7:
         35:a5:b3:13:ca:2c:28:05:b6:37:e0:2e:42:6d:c5:73:dd:12:
         9f:5f:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 23:11:07 2026 by rpki-client