Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa
File:                     21e46425-c59c-3409-b31a-36048098fbfd.roa (raw, json)
Hash identifier:          WAvKLdqR2toxsqVPUhV2JxhYVoCWrHJpyWrzePo+p0Q=
Subject key identifier:   B3:E4:8F:C3:C8:45:BF:01:E2:E1:E6:C1:03:BB:8B:72:4C:7D:D7:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA793453C5759546CE3697C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395839
IP address blocks:        50.114.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:45:3c:57:59:54:6c:e3:69:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3f75808f-3b93-4470-b2cb-bd17595d6ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:90:e2:9c:b0:9c:a4:a1:64:e1:e5:d3:df:
                    0a:91:4b:30:cb:a0:b9:4d:f3:6d:c2:70:56:03:ab:
                    c3:73:5e:35:ef:ff:8a:51:90:3e:6a:91:33:ef:7d:
                    06:70:3b:79:b5:f7:77:24:18:fc:64:ad:1a:35:f3:
                    81:13:b3:f2:f1:7e:00:79:ab:27:1f:93:d9:06:34:
                    d9:02:b0:6c:df:25:8c:0d:3a:87:a7:5e:ee:cf:1c:
                    82:f2:49:e3:18:5a:b3:18:03:a8:41:77:9a:4c:68:
                    ab:d9:a4:b9:d6:03:a4:ba:0b:0c:0f:6b:3c:15:f7:
                    ec:dc:aa:fb:b7:92:a2:ec:5b:c3:71:96:a0:d3:f0:
                    27:92:6e:7c:16:c3:dd:fe:3e:43:f7:d4:44:3c:6e:
                    79:8d:6a:a3:25:f4:25:52:db:f7:b5:3c:df:11:9b:
                    cc:ce:f3:32:be:b8:00:bf:b9:6f:0a:8a:51:f1:57:
                    56:5d:1e:ed:8c:fb:22:dd:79:68:f2:46:89:03:dd:
                    3a:f2:cf:a0:19:6a:04:94:18:4f:e2:68:c2:95:2c:
                    ca:28:b0:b9:06:41:ab:92:9c:97:d1:f1:bd:36:6a:
                    3e:73:a2:15:f5:54:83:7a:9d:9b:e1:ab:66:58:62:
                    3c:3d:5c:ab:9b:d8:8b:d1:76:84:1d:f3:97:fb:99:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:8F:C3:C8:45:BF:01:E2:E1:E6:C1:03:BB:8B:72:4C:7D:D7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:29:3d:17:a5:83:83:85:de:a0:12:96:82:e7:7b:40:47:05:
         eb:ce:43:05:fa:71:1c:22:39:16:c6:60:29:e0:10:01:ea:b5:
         7f:3a:89:83:db:2c:23:31:5e:6f:a2:7f:5b:83:fd:f3:7a:cc:
         67:ad:b2:fa:4b:7b:ac:6d:37:cf:33:31:1b:6a:8f:3a:81:fd:
         23:51:59:9b:0c:ba:12:5e:4f:bd:85:e6:dc:d4:b6:5b:1f:78:
         33:d9:5c:46:8d:ab:83:f8:ad:5c:96:ff:1e:49:0e:a8:97:d8:
         53:71:d2:7e:68:74:79:5a:c1:f5:bf:91:22:83:3b:5e:86:6b:
         61:b8:ff:c1:98:c0:31:b3:9a:2f:60:11:aa:5c:73:f6:d5:c7:
         d3:7e:47:0a:ec:3b:f6:de:d7:e3:fd:0a:e6:9b:5a:db:e0:8a:
         58:67:dd:2f:88:be:f5:69:5b:b7:b1:dc:78:e6:53:7c:c5:93:
         0c:c9:eb:e1:66:8c:08:0c:c4:15:cc:0e:60:40:62:da:a8:59:
         46:fa:76:82:00:0f:f8:52:6e:15:a6:78:f6:57:e8:6c:db:48:
         e0:32:4c:06:9e:4b:16:c2:d0:14:09:80:a7:d5:75:73:f5:ae:
         12:f7:e3:f0:59:ff:3f:24:27:4f:f7:13:e7:a7:dd:c9:f6:f2:
         d6:74:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:08 2026 by rpki-client