Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
File:                     d33868cc-aaa1-37b3-b510-97181288e62a.roa (raw, json)
Hash identifier:          OLv5633s9+QIS0Mp9B1Ix7VJN608WNbIq2lOGez6meA=
Subject key identifier:   F4:0E:8F:76:AB:1C:AF:FF:D0:9E:0B:9E:58:DB:D4:FD:26:FD:6B:C4
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584EA79B38898BB3047E3D803288
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8100
IP address blocks:        66.232.101.0/24 maxlen: 24
                          66.232.102.0/24 maxlen: 24
                          66.232.103.0/24 maxlen: 24
                          66.232.109.0/24 maxlen: 24
                          66.232.113.0/24 maxlen: 24
                          66.232.116.0/24 maxlen: 24
                          66.232.117.0/24 maxlen: 24
                          66.232.120.0/24 maxlen: 24
                          66.232.121.0/24 maxlen: 24
                          66.232.122.0/24 maxlen: 24
                          66.232.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:38:89:8b:b3:04:7e:3d:80:32:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3c999ac9-2f5b-4b7b-8e83-abb100102746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:32:b6:8f:d7:31:f3:11:48:6f:27:7c:66:
                    0f:d3:b5:a1:99:8d:17:ce:b8:15:cb:9e:ed:9a:e5:
                    ce:80:fb:84:bd:6a:72:36:0d:d9:c7:33:ca:49:f0:
                    78:98:dd:a0:96:c6:af:a2:b3:a2:3e:b2:b3:62:55:
                    17:20:a4:09:5b:de:2d:f6:8c:f6:5f:e8:35:e6:5c:
                    26:82:a7:d3:b2:bf:4f:89:39:8a:07:cb:10:bc:dc:
                    13:33:a8:d5:40:4f:76:7e:7e:ee:40:fd:10:20:ad:
                    00:6e:8d:7d:fd:b7:5a:70:f1:f3:7d:af:70:8f:ca:
                    6c:68:03:06:46:75:7b:58:e8:81:83:9b:df:fc:63:
                    e9:ef:dd:87:5b:7f:82:cf:57:49:ac:21:61:e0:ec:
                    b5:c1:4f:3c:9b:dd:e1:d0:9e:d1:54:b9:31:91:05:
                    84:cd:1d:13:2c:50:2f:59:1a:1f:cc:97:56:ba:1a:
                    9f:d5:44:c4:dc:23:e9:5d:26:1c:36:d6:76:a3:7d:
                    31:64:1e:3b:9d:f5:57:45:bb:7b:0d:3c:63:31:a0:
                    43:49:44:bf:03:77:08:0e:01:21:5f:39:d2:2a:b9:
                    70:8f:e3:00:5f:30:89:f3:95:47:a5:0b:86:88:02:
                    f8:90:6f:3e:fb:d7:6a:91:76:d2:8e:05:93:dc:03:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:8F:76:AB:1C:AF:FF:D0:9E:0B:9E:58:DB:D4:FD:26:FD:6B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.101.0-66.232.103.255
                  66.232.109.0/24
                  66.232.113.0/24
                  66.232.116.0/23
                  66.232.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:0f:0d:51:eb:46:9a:75:a5:4b:a7:59:5b:9a:9a:59:f7:
         24:1c:bf:73:cf:92:22:e0:ee:f5:b5:0b:2a:3e:37:86:1a:83:
         b4:b7:7c:6c:d5:0c:f8:09:31:b6:78:8c:f4:a5:54:53:64:fd:
         72:76:2a:5d:40:85:a0:54:32:0f:a3:ea:e7:e9:95:6f:39:c1:
         f3:13:cc:7c:7f:95:4d:12:91:32:6a:29:eb:b7:21:3a:56:d6:
         88:86:ce:87:e4:dc:44:cd:bc:b2:2c:17:bd:20:5e:da:fd:a5:
         c2:d9:ba:8b:4f:e3:51:ee:23:7c:53:9f:49:27:d1:ad:a0:b1:
         37:44:6e:62:cf:47:8a:6a:0f:b9:9c:95:74:75:d6:52:34:36:
         78:93:12:8a:5c:2b:59:5b:8d:14:67:d7:0b:93:c2:26:01:7d:
         f5:5b:16:e8:27:30:b2:85:fe:9f:e6:a9:30:be:c6:e1:83:aa:
         de:ad:44:31:b4:3e:2c:81:86:a8:a5:84:f1:b2:e1:a9:7d:7e:
         b3:1f:62:74:4b:76:c9:2c:c2:e6:04:eb:c5:fc:52:a2:2c:46:
         fa:e6:da:4e:2e:49:9f:fb:0d:b7:b1:0c:3b:1d:ea:4d:3a:1a:
         d4:31:70:de:ee:77:fa:3a:27:11:a6:83:c7:c1:0c:29:0e:1d:
         b3:18:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:42 2026 by rpki-client