Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dea9d1b-6ddd-35ee-b274-f499041f322e.roa
File:                     3dea9d1b-6ddd-35ee-b274-f499041f322e.roa (raw, json)
Hash identifier:          bgdOr+N0PN04PgsU9cqiDkVmVokpgaNGMkvwgESiWzY=
Subject key identifier:   6A:5D:3A:41:B3:FF:3B:7F:78:54:0E:A1:97:43:9B:56:68:BA:D6:4C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CD2A1E18C5CDBF9FD6EEDF700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dea9d1b-6ddd-35ee-b274-f499041f322e.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        50.114.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:e1:8c:5c:db:f9:fd:6e:ed:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=0ce79d79-d8af-4acf-b9a3-08fd61d7715f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:0f:31:8c:0d:2a:28:21:16:f7:b9:fa:9f:
                    36:d1:30:2d:7b:b4:dc:5f:01:5f:7e:88:9d:58:76:
                    73:c8:08:da:88:3f:6a:36:6b:83:2f:02:c5:f5:f9:
                    4f:7e:c2:b2:47:fe:f6:8c:ad:e2:44:a5:bf:e4:6d:
                    b1:00:1c:43:63:3f:a3:ba:35:5f:18:d8:1b:b5:f0:
                    27:d4:c8:8e:1e:ff:f5:66:74:6f:2a:27:7e:8b:dd:
                    50:53:0c:cd:1a:6c:c7:3a:d9:0a:34:9a:3f:9c:96:
                    e1:97:11:b2:7f:33:e5:13:98:9c:9c:d4:f0:67:1a:
                    01:1e:4f:5d:b6:58:b0:02:e3:e5:50:b4:c6:b0:db:
                    d1:3b:7d:3f:fb:c1:aa:a1:55:09:f8:90:6e:7c:c7:
                    f8:19:51:81:91:a8:7a:b2:0a:89:06:f7:32:c4:8c:
                    86:00:46:12:8d:31:90:a5:c6:04:59:6b:26:a7:46:
                    5a:4c:fc:70:c8:4d:f4:57:c7:3f:79:56:3d:95:87:
                    aa:48:41:7f:6d:d2:5a:08:09:71:41:06:34:85:9f:
                    69:e1:9f:cf:24:e4:d2:87:c5:17:50:05:39:7e:07:
                    f1:e6:4f:b8:2f:8d:f7:18:ea:40:c0:9b:d4:50:3a:
                    27:01:0f:f2:a3:fe:64:5c:59:7b:20:9e:ff:4c:8b:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:3A:41:B3:FF:3B:7F:78:54:0E:A1:97:43:9B:56:68:BA:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3dea9d1b-6ddd-35ee-b274-f499041f322e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:76:25:6e:5c:05:d9:7d:64:4c:5a:58:cb:ee:c6:39:21:
         ff:33:ab:1c:12:5e:ae:6a:37:83:b9:d7:40:c8:f9:90:6c:29:
         5a:b6:6a:da:e0:1b:33:c1:6b:81:7b:67:da:c1:ab:4d:cf:9f:
         dd:1a:b6:bf:52:6f:a5:0e:a2:db:91:b1:15:40:fa:f2:70:ee:
         7d:92:b8:93:99:f9:c5:a7:a6:60:9e:f7:1d:0a:b1:2b:a8:30:
         8c:5a:73:4b:ce:b6:93:ed:96:82:fd:be:82:4a:51:d7:f2:d3:
         4f:c4:62:82:36:6a:fb:a2:de:44:aa:f2:82:83:d6:d6:b5:ce:
         6d:0a:ea:6b:bd:e7:f2:0b:a8:87:05:00:07:38:be:02:73:e1:
         fd:50:12:33:63:f2:eb:5f:23:b7:a9:5a:fa:4a:f9:cc:bc:c8:
         60:a8:f6:b6:33:1e:a1:29:d8:dc:2a:04:81:c8:ca:46:29:c7:
         a4:4a:cb:29:7a:f7:df:ee:bc:a8:83:4d:b8:36:1a:9c:90:0c:
         d5:ab:bd:03:9f:7e:ff:23:43:69:da:f0:f8:96:8f:4b:aa:b0:
         88:4c:09:31:b7:a7:38:44:9f:34:32:37:8a:6f:1e:f8:6b:75:
         9d:70:f3:97:b0:2d:4c:96:b4:d5:36:f4:ce:16:ad:59:27:b7:
         0f:60:dc:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoeGMXNv5/W7t9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
MGNlNzlkNzktZDhhZi00YWNmLWI5YTMtMDhmZDYxZDc3MTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwkPMYwNKighFve5+p820TAte7TcXwFffoid
WHZzyAjaiD9qNmuDLwLF9flPfsKyR/72jK3iRKW/5G2xABxDYz+jujVfGNgbtfAn
1MiOHv/1ZnRvKid+i91QUwzNGmzHOtkKNJo/nJbhlxGyfzPlE5icnNTwZxoBHk9d
tliwAuPlULTGsNvRO30/+8GqoVUJ+JBufMf4GVGBkah6sgqJBvcyxIyGAEYSjTGQ
pcYEWWsmp0ZaTPxwyE30V8c/eVY9lYeqSEF/bdJaCAlxQQY0hZ9p4Z/PJOTSh8UX
UAU5fgfx5k+4L433GOpAwJvUUDonAQ/yo/5kXFl7IJ7/TIuA2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpdOkGz/zt/eFQOoZdDm1ZoutZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2RlYTlkMWItNmRkZC0z
NWVlLWIyNzQtZjQ5OTA0MWYzMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGowdiVuXAXZfWRMWljL7sY5If8zqxwSXq5qN4O510DI+ZBsKVq2atrg
GzPBa4F7Z9rBq03Pn90atr9Sb6UOotuRsRVA+vJw7n2SuJOZ+cWnpmCe9x0KsSuo
MIxac0vOtpPtloL9voJKUdfy00/EYoI2avui3kSq8oKD1ta1zm0K6mu95/ILqIcF
AAc4vgJz4f1QEjNj8utfI7epWvpK+cy8yGCo9rYzHqEp2NwqBIHIykYpx6RKyyl6
99/uvKiDTbg2GpyQDNWrvQOffv8jQ2na8PiWj0uqsIhMCTG3pzhEnzQyN4pvHvhr
dZ1w85ewLUyWtNU29M4WrVkntw9g3Ms=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:26 2026 by rpki-client