Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffc99063-eb85-3ad0-a620-154e43cf21c8.roa
File:                     ffc99063-eb85-3ad0-a620-154e43cf21c8.roa (raw, json)
Hash identifier:          tuayPKKY1LHrRDhNjwXhMjpy00eXExTewVxWjSiuCN0=
Subject key identifier:   9C:8F:6B:BB:4A:31:36:7C:3F:47:BC:CF:F2:7C:A3:9C:A2:06:B4:D8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F96E38441AD48A17FAB0B6C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffc99063-eb85-3ad0-a620-154e43cf21c8.roa
Signing time:             Thu 22 Oct 2026 18:45:07 +0000
ROA not before:           Thu 22 Oct 2026 18:45:07 +0000
ROA not after:            Wed 20 Jan 2027 19:45:07 +0000
asID:                     215197
IP address blocks:        50.114.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:e3:84:41:ad:48:a1:7f:ab:0b:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 18:45:07 2026 GMT
            Not After : Jan 20 19:45:07 2027 GMT
        Subject: CN=7e9a8930-8222-486f-b5cb-cacd65d423a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:65:7a:58:d8:4d:5a:69:84:1f:0b:a7:fb:
                    5a:d3:2c:90:fe:07:c2:43:6d:54:79:c5:98:ff:c9:
                    f1:e3:ed:ab:36:cc:a6:06:7c:93:5a:ef:d4:3f:f5:
                    94:7e:bc:8d:7c:5e:93:41:ae:dc:3c:e3:40:76:0f:
                    fe:35:c4:4d:20:8e:00:04:40:19:23:a2:15:4e:c5:
                    9e:28:f9:61:32:d4:ca:c4:2f:7b:66:79:8b:83:95:
                    eb:c7:66:a5:b0:7d:2e:df:12:c9:8e:a5:1f:5e:ed:
                    55:52:e4:e5:af:4a:1e:f8:9b:ad:d8:ba:76:67:f3:
                    2c:ac:01:16:d0:66:62:67:a9:35:d3:45:17:f5:1c:
                    75:12:23:70:01:9f:ba:f2:1d:d6:ef:8a:f4:5d:85:
                    cb:d2:05:42:90:d3:1a:bb:ab:82:d0:89:85:c0:14:
                    35:93:9b:87:b4:0b:7d:a9:dc:5b:69:6f:87:c3:db:
                    d8:89:de:7b:47:62:1b:8a:43:be:4c:f7:86:bb:d6:
                    ea:bc:15:b3:5b:9f:2c:a1:74:d6:d7:6c:3e:3d:62:
                    5a:52:86:31:4f:8e:ce:1a:f8:13:b0:ed:b3:ce:28:
                    cc:9b:25:6a:3b:10:65:f5:d6:89:dc:dd:8f:9c:ab:
                    44:b1:69:7a:4b:91:22:a7:60:0b:f7:9b:3d:61:61:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:6B:BB:4A:31:36:7C:3F:47:BC:CF:F2:7C:A3:9C:A2:06:B4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffc99063-eb85-3ad0-a620-154e43cf21c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:8a:4e:fe:d0:97:7e:23:58:0f:15:1b:a6:f3:fb:42:2d:
         a4:a8:1d:1e:30:8c:11:d0:14:06:21:a3:65:7d:6e:ba:35:3c:
         5f:8b:b7:cb:c1:12:40:59:0b:cb:03:67:e1:d8:65:29:cc:46:
         f8:3c:5e:b2:63:a8:94:9c:a0:09:6f:94:56:d0:8e:e4:3e:25:
         0c:1a:96:e3:e2:51:15:66:6a:ac:7f:5f:73:d6:f9:0b:0f:e8:
         b9:5f:45:8d:1b:65:28:d8:b8:9d:d4:60:3b:68:0e:fe:fc:0b:
         aa:35:19:e9:31:dc:b2:9e:da:d4:3e:1f:96:09:72:03:90:e7:
         52:63:81:07:db:f3:58:2a:d3:37:34:b7:c1:4c:4a:f5:22:97:
         25:b1:71:5b:4e:ee:51:50:75:bf:17:91:6e:2a:95:0c:bb:0f:
         96:93:19:a6:5a:9c:0b:08:a6:a2:35:38:a2:0f:84:a0:8e:be:
         cc:cb:8f:57:4c:88:e1:96:d1:03:b7:60:ce:bd:5f:bc:76:84:
         06:a3:ac:63:56:25:32:c1:1d:47:6d:7a:03:3d:d7:8d:d2:02:
         40:a9:42:27:1d:67:79:1f:19:f6:fb:d8:fe:20:7c:4d:e5:2d:
         95:4d:a8:f0:39:da:08:bb:d3:aa:c7:e2:0f:88:a5:8f:c1:84:
         f5:b2:68:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+W44RBrUihf6sLbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MTAyMjE4NDUwN1oXDTI3MDEyMDE5NDUwN1owLzEtMCsGA1UEAxMk
N2U5YTg5MzAtODIyMi00ODZmLWI1Y2ItY2FjZDY1ZDQyM2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfVleljYTVpphB8Lp/ta0yyQ/gfCQ21UecWY
/8nx4+2rNsymBnyTWu/UP/WUfryNfF6TQa7cPONAdg/+NcRNII4ABEAZI6IVTsWe
KPlhMtTKxC97ZnmLg5Xrx2alsH0u3xLJjqUfXu1VUuTlr0oe+Jut2Lp2Z/MsrAEW
0GZiZ6k100UX9Rx1EiNwAZ+68h3W74r0XYXL0gVCkNMau6uC0ImFwBQ1k5uHtAt9
qdxbaW+Hw9vYid57R2IbikO+TPeGu9bqvBWzW58soXTW12w+PWJaUoYxT47OGvgT
sO2zzijMmyVqOxBl9daJ3N2PnKtEsWl6S5Eip2AL95s9YWHOvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyPa7tKMTZ8P0e8z/J8o5yiBrTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmZjOTkwNjMtZWI4NS0z
YWQwLWE2MjAtMTU0ZTQzY2YyMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnK+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTSik7+0Jd+I1gPFRum8/tCLaSoHR4wjBHQFAYho2V9bro1PF+Lt8vB
EkBZC8sDZ+HYZSnMRvg8XrJjqJScoAlvlFbQjuQ+JQwaluPiURVmaqx/X3PW+QsP
6LlfRY0bZSjYuJ3UYDtoDv78C6o1Gekx3LKe2tQ+H5YJcgOQ51JjgQfb81gq0zc0
t8FMSvUilyWxcVtO7lFQdb8XkW4qlQy7D5aTGaZanAsIpqI1OKIPhKCOvszLj1dM
iOGW0QO3YM69X7x2hAajrGNWJTLBHUdtegM9143SAkCpQicdZ3kfGfb72P4gfE3l
LZVNqPA52gi706rH4g+IpY/BhPWyaD4=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:30 2026 by rpki-client