Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1f51b8-a4f6-31f2-89cc-a1da8013a916.roa
File:                     5d1f51b8-a4f6-31f2-89cc-a1da8013a916.roa (raw, json)
Hash identifier:          p8DddUpj3ZoI0amfNB9qDZKBHbGeqXWtEF3sUVIu8gU=
Subject key identifier:   87:B7:6D:86:C5:1D:9F:99:09:82:DB:43:B2:1E:E2:6F:FA:1F:0B:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C715A9AB53FEE11491C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1f51b8-a4f6-31f2-89cc-a1da8013a916.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        50.114.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:71:5a:9a:b5:3f:ee:11:49:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=83f6d4c4-c687-46c4-b756-674813eef98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:d3:c6:bf:cb:3b:f9:97:7f:6b:24:54:ca:
                    28:6e:af:44:79:f4:16:d2:c3:d8:d7:ea:49:e7:16:
                    64:06:72:7f:a8:85:77:38:7a:4e:06:e9:46:de:05:
                    70:5d:d2:8e:13:0e:ed:92:27:b2:19:a6:f3:24:c1:
                    db:8d:a7:56:36:db:26:2e:cc:2d:18:34:4f:ed:b1:
                    8d:be:1b:9b:ba:e2:57:3e:b8:fd:78:00:e0:f0:d7:
                    cf:90:55:1a:19:86:a8:c0:6b:b4:24:00:b7:3c:2a:
                    7b:24:b1:50:9c:4f:3c:34:ab:30:90:e2:44:9e:ab:
                    a5:49:82:a7:0f:ad:5b:08:e6:3f:9c:37:ac:af:e0:
                    23:00:36:f2:f6:34:6e:29:2b:81:57:58:f7:e1:32:
                    1a:1b:07:f8:24:ef:95:66:fc:87:3f:34:d3:f7:4a:
                    7d:05:cf:c0:04:5a:44:13:96:4d:d2:80:39:a3:a9:
                    fb:46:bd:10:6a:bf:0b:94:62:e1:86:4e:aa:d4:d8:
                    f8:6b:4a:70:fd:be:9e:a4:b5:2c:f7:db:36:09:53:
                    95:77:03:c5:bb:45:dd:ba:ea:16:38:3c:4b:24:a9:
                    b6:12:d6:14:17:ca:84:5b:fa:23:e1:7b:d3:3c:ea:
                    ab:9f:6e:80:e2:2a:03:f1:c7:ee:c5:b8:46:ff:03:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:6D:86:C5:1D:9F:99:09:82:DB:43:B2:1E:E2:6F:FA:1F:0B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1f51b8-a4f6-31f2-89cc-a1da8013a916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:cd:be:ac:35:f8:da:e0:f1:9f:8f:8a:23:2c:e4:22:cd:
         3a:2a:43:49:d3:68:ef:2c:11:c6:d9:45:5f:52:b7:fa:69:bb:
         d3:7c:67:fb:46:f1:b1:68:60:47:11:b5:03:6a:ac:84:ea:b0:
         cc:71:92:08:b7:ed:64:96:b9:77:7b:6c:61:84:a4:00:fa:4c:
         27:80:2a:7e:6f:4c:2b:c4:bf:81:76:ac:da:95:27:6f:6d:c3:
         79:8e:d0:10:4c:41:7f:b0:c3:49:2e:83:8e:91:7c:7d:8c:44:
         d6:7a:f5:05:1c:52:0c:a0:c8:a6:19:00:a4:2d:bb:1c:02:0e:
         1c:12:6b:f0:b7:b4:72:f2:16:4c:4c:e7:9c:71:ed:a1:4d:bb:
         b9:fd:64:8b:6f:2c:df:b4:8a:fe:a9:c8:c9:cb:90:7f:09:76:
         3d:74:c3:7f:2b:5e:3a:bb:df:5b:ac:87:4b:c2:54:ba:3a:fd:
         20:13:71:a2:d5:5f:dd:ce:37:ee:e2:74:3e:ba:cd:7b:9e:19:
         4d:01:fc:b2:55:33:e6:75:37:a2:b1:23:94:ea:84:7a:49:c3:
         0b:df:b5:1b:e9:7e:42:89:2f:d0:1f:16:cf:4d:0e:42:d2:dc:
         f9:98:dc:fc:2f:2a:32:5a:85:24:d2:4b:7f:7a:6f:70:0d:6b:
         14:09:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:39:53 2026 by rpki-client