Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa
File:                     50fe0b16-021d-3334-a6fd-60df50be8524.roa (raw, json)
Hash identifier:          jivXR8LWeUt9JbiH6BMJOSK0Zy6cza+osRykMRiHtfg=
Subject key identifier:   B1:2F:E7:9B:3D:07:69:AB:D3:F4:E6:EF:A1:ED:0C:B3:1E:98:D4:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024EAADDE8E4B8EF3D22838
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ea:ad:de:8e:4b:8e:f3:d2:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=4d0fd2df-c59c-4738-a893-28a20a7a8e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:61:91:63:6c:cd:bb:1f:26:0a:0b:1b:a2:
                    90:00:f2:28:38:d4:f9:49:5c:e4:ce:81:df:58:06:
                    5a:28:1e:bd:6a:81:64:cb:cf:ab:b5:08:82:79:17:
                    1f:4f:f3:89:c8:84:95:a5:69:d6:58:0f:3b:33:89:
                    cc:f4:f4:a1:99:9b:38:aa:74:84:df:af:37:ed:94:
                    88:40:e8:3e:56:e5:79:4b:a6:ea:3e:14:b2:5d:c2:
                    00:10:83:58:e9:7c:15:fc:65:7a:4f:3d:50:e4:eb:
                    c9:a1:90:8f:b8:c4:ac:c6:d7:b8:72:b6:cf:e2:16:
                    ea:02:76:ce:a9:d1:7c:cf:44:57:cf:68:88:49:6f:
                    3a:3e:27:6a:7e:ed:9d:56:1b:64:b4:71:4f:92:76:
                    aa:cc:71:4c:0a:6a:7d:47:34:09:55:e8:04:f7:f1:
                    4c:98:fe:c8:59:13:38:ea:a7:15:f7:39:54:92:ce:
                    91:e5:9f:7a:5f:81:3c:99:06:a2:17:be:2a:db:23:
                    7f:32:ab:91:1a:b1:67:d6:99:5a:0b:50:b0:43:16:
                    88:47:be:ab:c1:fa:0d:b9:94:01:51:b1:61:d1:38:
                    f2:4d:5b:3a:25:3f:c6:fc:20:d4:88:7c:d7:f5:5e:
                    f3:44:da:a8:a9:71:ba:78:fb:dd:cc:79:77:a1:cc:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:E7:9B:3D:07:69:AB:D3:F4:E6:EF:A1:ED:0C:B3:1E:98:D4:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/50fe0b16-021d-3334-a6fd-60df50be8524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:59:e5:8c:f3:b1:22:65:27:ed:02:66:96:1b:d6:3c:4d:73:
         e6:2b:7a:e5:08:f8:3c:d2:09:c9:00:71:d9:bd:f8:3b:b3:29:
         b3:90:8e:f7:77:46:7b:8c:c2:07:da:55:43:7b:bf:2d:ea:b0:
         cc:6d:db:17:a7:2f:f7:c1:c4:0c:a6:fc:d5:99:28:fc:83:27:
         8c:6b:af:66:33:35:7d:4f:31:a9:ca:dd:e9:34:19:da:12:82:
         db:33:41:80:6c:fa:59:b4:42:95:d7:d3:cc:5d:dc:24:02:89:
         a5:6c:ae:92:b2:5e:55:59:f1:15:3c:46:1f:2f:f7:fd:a7:ba:
         20:69:c1:f8:7d:41:df:e6:f8:96:12:62:df:08:55:e2:a0:ce:
         5a:7e:17:e1:67:97:e9:1d:dc:42:78:a4:65:7e:f7:cc:77:41:
         2e:78:bb:93:7b:2c:0c:bb:9f:58:ca:85:4a:9f:bf:eb:ce:11:
         55:93:21:c2:1a:19:ec:aa:34:bc:0f:e8:02:ad:37:60:5f:2e:
         38:d4:bd:bc:1e:64:30:3e:0b:43:31:bc:be:e5:86:e5:d6:d2:
         63:21:80:09:b7:a1:f1:bd:53:9c:0a:43:c9:44:af:e1:67:12:
         a4:f7:f2:29:c8:27:b6:96:1a:c8:c6:b3:53:10:b4:55:63:88:
         ff:bc:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:13 2026 by rpki-client