Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/890cb307-bb4f-33a7-af99-5140954888ab.roa
File:                     890cb307-bb4f-33a7-af99-5140954888ab.roa (raw, json)
Hash identifier:          oBGfngOEEUFczPfUwukJLlmyo64HOzavDmVi6uLJnoc=
Subject key identifier:   69:F6:01:46:C7:AF:62:32:91:F3:CF:75:B3:B4:1D:02:8A:C6:2B:2E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D69450026B829E074A592E780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/890cb307-bb4f-33a7-af99-5140954888ab.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     215728
IP address blocks:        50.114.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:45:00:26:b8:29:e0:74:a5:92:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=d0889c81-8c57-4f41-b1b0-37492efd095a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:f0:59:ac:f5:e7:3e:73:65:f9:01:ae:27:
                    c6:a9:f6:0f:24:96:1f:0c:a4:28:92:c7:40:23:0b:
                    6e:a3:2a:38:1e:5e:c7:f8:59:22:ca:34:75:23:8b:
                    91:64:8e:a3:57:a0:c1:20:a2:b5:bf:f2:ef:43:7c:
                    3b:42:f9:ca:29:2f:1f:71:d3:1e:93:07:14:f5:15:
                    89:65:07:09:7a:52:75:9f:6c:7e:5d:13:f2:bd:68:
                    b7:53:f9:f5:0c:0b:87:d4:49:c0:37:c7:06:bd:1e:
                    40:b1:ab:08:5a:a6:4f:dc:39:0d:97:12:80:6b:6f:
                    0e:a9:c5:de:f8:d3:96:19:51:ff:8a:3e:ef:35:ea:
                    8a:ae:26:d8:3b:c4:b3:9c:e5:bf:2f:10:ea:51:72:
                    d1:7d:7f:0c:f2:60:b7:c7:a2:17:fa:8b:17:cc:40:
                    89:78:00:aa:f6:aa:ea:58:e5:c8:7b:2b:30:43:06:
                    7e:6f:ac:2b:88:01:68:aa:3b:cb:f1:95:3b:d7:98:
                    a0:e2:7c:f0:ec:81:07:dc:4e:ca:24:5d:f1:76:c6:
                    35:2a:83:8c:c6:92:0a:cb:57:47:a7:14:06:7f:ac:
                    85:cc:c7:ec:46:7c:7f:d2:44:af:78:e6:68:12:45:
                    de:1f:18:ce:2f:7e:5a:cc:b4:52:e6:c3:86:fa:8d:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:01:46:C7:AF:62:32:91:F3:CF:75:B3:B4:1D:02:8A:C6:2B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/890cb307-bb4f-33a7-af99-5140954888ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:77:66:c0:b8:2c:96:77:4e:e5:18:b3:0e:52:65:fa:26:
         ac:b2:16:6e:7c:8d:45:aa:90:6b:80:eb:76:94:de:f6:89:5f:
         04:37:23:0e:bd:ad:db:10:55:57:6d:18:bd:a5:56:9b:b8:aa:
         b9:2f:4f:b2:4d:76:8f:64:80:c5:3f:bc:a8:88:9e:64:1d:b1:
         fc:ed:d7:01:20:0f:68:12:d8:52:05:e3:28:7e:f5:66:25:93:
         58:09:4c:fd:9a:c9:87:18:bd:fe:38:76:59:90:1d:7d:99:83:
         c4:6e:c4:9b:85:52:61:aa:ef:75:c6:21:82:64:1b:b4:d6:79:
         41:29:ab:e1:d8:0f:94:c3:75:2f:d8:7e:c5:fd:d6:d6:c3:e7:
         21:46:68:28:6c:01:57:b5:55:fa:64:80:91:84:bd:a0:61:ca:
         01:4d:55:60:b6:ed:ba:f4:06:63:1a:c3:a7:ee:57:15:34:55:
         e5:e1:01:9c:ee:2e:e8:0c:f0:2e:d6:8f:7c:c5:26:95:37:87:
         a5:26:f8:97:70:5d:e1:8e:9d:ea:0f:c7:87:02:b5:61:76:ae:
         03:6d:ad:a6:f0:b9:e7:76:fb:14:34:ca:2e:68:e2:5e:79:8c:
         c2:4e:44:80:f3:c3:73:5d:69:27:66:83:85:c0:1b:fc:1f:1e:
         40:ad:72:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRQAmuCngdKWS54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk
ZDA4ODljODEtOGM1Ny00ZjQxLWIxYjAtMzc0OTJlZmQwOTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5XwWaz15z5zZfkBrifGqfYPJJYfDKQoksdA
Iwtuoyo4Hl7H+FkiyjR1I4uRZI6jV6DBIKK1v/LvQ3w7QvnKKS8fcdMekwcU9RWJ
ZQcJelJ1n2x+XRPyvWi3U/n1DAuH1EnAN8cGvR5AsasIWqZP3DkNlxKAa28OqcXe
+NOWGVH/ij7vNeqKribYO8SznOW/LxDqUXLRfX8M8mC3x6IX+osXzECJeACq9qrq
WOXIeyswQwZ+b6wriAFoqjvL8ZU715ig4nzw7IEH3E7KJF3xdsY1KoOMxpIKy1dH
pxQGf6yFzMfsRnx/0kSveOZoEkXeHxjOL35azLRS5sOG+o0HXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGn2AUbHr2IykfPPdbO0HQKKxisuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODkwY2IzMDctYmI0Zi0z
M2E3LWFmOTktNTE0MDk1NDg4OGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtSd2bAuCyWd07lGLMOUmX6JqyyFm58jUWqkGuA63aU3vaJXwQ3Iw69
rdsQVVdtGL2lVpu4qrkvT7JNdo9kgMU/vKiInmQdsfzt1wEgD2gS2FIF4yh+9WYl
k1gJTP2ayYcYvf44dlmQHX2Zg8RuxJuFUmGq73XGIYJkG7TWeUEpq+HYD5TDdS/Y
fsX91tbD5yFGaChsAVe1VfpkgJGEvaBhygFNVWC27br0BmMaw6fuVxU0VeXhAZzu
LugM8C7Wj3zFJpU3h6Um+JdwXeGOneoPx4cCtWF2rgNtrabwued2+xQ0yi5o4l55
jMJORIDzw3NdaSdmg4XAG/wfHkCtctU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:45 2026 by rpki-client