Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe64bd64-6c1b-3507-b06e-eafb1a90b695.roa
File:                     fe64bd64-6c1b-3507-b06e-eafb1a90b695.roa (raw, json)
Hash identifier:          pjcvkps6uICGYcaMPj1bog0d3tFCXLdSvLCisqNo+M0=
Subject key identifier:   3F:DC:87:2B:08:4B:96:23:A8:AA:F7:17:03:D8:DB:75:81:7D:DD:56
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1496E14DCDE203A79B040F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe64bd64-6c1b-3507-b06e-eafb1a90b695.roa
Signing time:             Fri 06 Mar 2026 17:01:45 +0000
ROA not before:           Fri 06 Mar 2026 17:01:45 +0000
ROA not after:            Thu 04 Jun 2026 16:01:45 +0000
asID:                     401152
IP address blocks:        50.114.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:96:e1:4d:cd:e2:03:a7:9b:04:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  6 17:01:45 2026 GMT
            Not After : Jun  4 16:01:45 2026 GMT
        Subject: CN=1862cd5f-6fcb-4e60-85f9-ca898a1a0b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:7b:6a:32:26:d4:7a:c7:4f:2e:39:9a:f1:
                    7b:1b:01:df:ad:b8:a8:18:e3:5f:5d:4f:9b:51:bd:
                    a5:78:cd:4b:70:c7:fc:27:5e:eb:4d:d2:c0:4a:78:
                    81:31:4c:6d:e3:54:e3:9d:8c:71:65:f1:bb:7a:0d:
                    50:08:69:53:ff:35:81:b3:52:81:d7:3e:69:56:c9:
                    3a:dc:8d:5c:0c:a4:7d:bf:07:68:a7:21:29:49:b4:
                    1d:af:ca:0a:46:7f:20:f1:00:30:89:b0:64:b5:b7:
                    f2:a0:4e:5c:2f:fd:b7:89:90:e7:b4:db:53:24:91:
                    59:62:b8:b5:33:e6:30:fc:d5:1c:9d:bd:d0:ad:b9:
                    8c:93:31:dd:0a:ef:85:3b:a0:7e:89:61:6b:98:d8:
                    22:e9:15:bb:a2:6a:01:63:a9:44:de:7d:69:ea:e7:
                    fc:ea:68:65:ce:0d:ea:2e:f2:63:91:eb:08:06:fe:
                    80:a4:96:13:69:14:df:71:ad:35:b0:bb:8e:86:27:
                    83:3e:f8:0f:ff:c7:3f:46:e7:18:28:c9:74:aa:34:
                    56:59:09:07:80:1c:c9:e6:38:27:4a:d9:78:1c:84:
                    e4:e8:ea:33:9b:ce:b1:d1:d9:1b:e5:44:76:cd:12:
                    67:e5:0b:7a:c8:e3:bf:ae:7a:c3:b1:4d:9d:91:ca:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:87:2B:08:4B:96:23:A8:AA:F7:17:03:D8:DB:75:81:7D:DD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe64bd64-6c1b-3507-b06e-eafb1a90b695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d5:c0:2d:c2:db:f7:1b:06:68:4c:65:05:5a:0c:a1:33:f6:
         ed:5d:0d:d0:79:b1:90:4e:67:df:e2:02:57:7b:b5:6a:88:ac:
         29:97:b8:7e:e4:82:b5:a8:1d:11:7b:83:95:04:fd:ce:ab:36:
         28:50:51:a8:2b:20:34:f8:9f:79:18:cf:9f:60:63:9e:f2:d6:
         b0:a0:33:2f:d0:73:03:9a:02:4a:d6:11:fc:4e:30:94:85:8e:
         03:36:3b:56:3c:2c:46:af:2b:65:78:23:f3:06:e1:46:bc:f2:
         de:17:91:c8:f9:91:ac:76:52:3b:2a:c6:86:aa:96:6d:9f:8f:
         96:0e:2e:64:dc:5c:b8:f5:c5:84:8a:b4:89:8d:67:9e:f4:e6:
         11:57:40:75:e2:07:11:a3:aa:2b:bf:77:77:6f:d0:f5:56:83:
         0b:34:f8:c9:0b:1a:52:04:dd:48:84:df:31:ab:57:c4:12:56:
         a5:51:aa:aa:2c:66:b8:db:65:25:be:4f:51:31:3e:c3:27:ba:
         90:74:4e:ae:c0:d6:bb:6f:0c:4a:56:14:70:23:e1:ef:23:35:
         fb:54:c8:e9:8a:b7:e9:f2:5d:ef:fa:be:a1:a2:47:73:d9:ef:
         2f:4f:0c:f6:c2:aa:5b:a6:4f:d5:82:b7:f2:2b:aa:26:5b:80:
         f2:fa:13:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UluFNzeIDp5sED4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMwNjE3MDE0NVoXDTI2MDYwNDE2MDE0NVowLzEtMCsGA1UEAxMk
MTg2MmNkNWYtNmZjYi00ZTYwLTg1ZjktY2E4OThhMWEwYjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMV7ajIm1HrHTy45mvF7GwHfrbioGONfXU+b
Ub2leM1LcMf8J17rTdLASniBMUxt41TjnYxxZfG7eg1QCGlT/zWBs1KB1z5pVsk6
3I1cDKR9vwdopyEpSbQdr8oKRn8g8QAwibBktbfyoE5cL/23iZDntNtTJJFZYri1
M+Yw/NUcnb3QrbmMkzHdCu+FO6B+iWFrmNgi6RW7omoBY6lE3n1p6uf86mhlzg3q
LvJjkesIBv6ApJYTaRTfca01sLuOhieDPvgP/8c/RucYKMl0qjRWWQkHgBzJ5jgn
Stl4HITk6Oozm86x0dkb5UR2zRJn5Qt6yOO/rnrDsU2dkcpnQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/chysIS5YjqKr3FwPY23WBfd1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmU2NGJkNjQtNmMxYi0z
NTA3LWIwNmUtZWFmYjFhOTBiNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXVwC3C2/cbBmhMZQVaDKEz9u1dDdB5sZBOZ9/iAld7tWqIrCmXuH7k
grWoHRF7g5UE/c6rNihQUagrIDT4n3kYz59gY57y1rCgMy/QcwOaAkrWEfxOMJSF
jgM2O1Y8LEavK2V4I/MG4Ua88t4Xkcj5kax2Ujsqxoaqlm2fj5YOLmTcXLj1xYSK
tImNZ5705hFXQHXiBxGjqiu/d3dv0PVWgws0+MkLGlIE3UiE3zGrV8QSVqVRqqos
ZrjbZSW+T1ExPsMnupB0Tq7A1rtvDEpWFHAj4e8jNftUyOmKt+nyXe/6vqGiR3PZ
7y9PDPbCqlumT9WCt/IrqiZbgPL6E/8=
-----END CERTIFICATE-----
Generated at Tue Mar 10 11:26:15 2026 by rpki-client