Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa
File:                     b8516ea7-4696-3792-8d88-1f7cad0147be.roa (raw, json)
Hash identifier:          6GL3vCtQfGZd/RAwhxs7TTmEuNPYiCg6O7HtL88UOKk=
Subject key identifier:   30:EB:11:1A:DE:50:C4:B9:12:B7:B8:36:ED:E7:A7:6E:D2:AD:4E:3E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CCBA77E0CDCB2900BFA467480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     29802
IP address blocks:        50.114.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7e:0c:dc:b2:90:0b:fa:46:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=45a63614-a65c-4c85-b06e-62680edf7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:75:45:23:4a:2f:f7:4a:ac:7b:46:33:e2:
                    1b:dc:29:42:85:63:58:04:d3:45:de:a1:71:91:bb:
                    90:39:fc:55:b3:88:d2:37:14:14:d1:03:df:66:c9:
                    68:c9:0e:ce:9d:1d:68:23:d4:97:ba:0a:9f:4c:bc:
                    0c:6e:ba:11:60:85:d5:d0:4a:9c:09:c1:4c:53:d0:
                    c8:36:22:e4:65:33:76:89:bf:ed:0b:c9:d8:37:63:
                    76:fb:c1:ac:64:b1:9e:c3:f0:f6:1c:08:e9:13:c9:
                    cd:a0:f0:5f:34:e6:dd:26:ba:06:54:bd:c2:35:e0:
                    04:82:e8:30:b7:1b:f8:58:63:eb:5a:d4:62:7b:11:
                    3f:9d:26:8a:71:f9:f8:b8:f7:0e:69:f9:a5:bc:c0:
                    15:9c:9d:7f:5b:50:13:38:fb:86:27:8f:ea:d7:6f:
                    c3:61:6c:bd:fb:9c:2e:1f:e1:7a:cc:94:55:a2:01:
                    e5:86:0e:79:99:24:43:3e:09:23:90:de:33:c1:1e:
                    d3:3b:8a:e7:f8:8e:52:44:c6:6b:96:6b:ee:d7:15:
                    a7:04:d0:07:52:87:9b:4d:7a:74:d8:91:9d:c9:8c:
                    42:8d:83:0a:2c:ce:87:71:25:28:2c:9d:84:ed:20:
                    59:66:7c:2f:3b:6f:e6:a9:5c:fb:de:75:c0:10:d8:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:11:1A:DE:50:C4:B9:12:B7:B8:36:ED:E7:A7:6E:D2:AD:4E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:6e:7e:d3:bf:30:65:87:9c:3e:89:a8:6f:12:3e:45:27:
         5d:23:eb:96:14:54:ef:16:81:e5:52:b5:24:b0:ed:d2:3f:ab:
         1c:74:d0:9c:34:4c:79:e2:74:5d:f5:03:2d:f2:a5:c2:89:75:
         6a:c5:71:1e:47:9b:e5:29:97:17:b6:55:6d:ac:2c:c4:79:5b:
         2c:da:8d:d5:c9:72:3c:90:7d:ce:84:0e:57:aa:8e:66:25:6f:
         0f:bb:6a:51:8f:e0:8a:eb:1c:9c:0e:0d:b7:d9:d6:c9:f0:2d:
         a2:96:ae:47:7d:99:8d:72:a6:55:96:43:1b:08:ee:40:1c:6e:
         dd:72:51:d1:49:49:bb:5f:64:9d:bc:f9:7b:7b:a0:87:77:18:
         8b:de:7e:95:3a:8c:4d:d5:1d:a8:59:00:72:c4:e2:2c:a6:08:
         3a:6d:9f:16:c4:70:bf:e4:eb:14:1a:32:88:08:c7:e6:d9:e8:
         d2:73:4f:04:4d:f6:4a:15:29:7d:d4:6f:01:da:ae:cb:7d:7b:
         47:71:3e:76:35:11:14:4d:df:33:f1:bd:b1:36:17:c5:80:9c:
         30:10:b2:59:7e:b0:9a:15:55:36:d7:c2:14:d7:64:88:58:03:
         d5:11:82:f5:c8:e1:ba:d8:59:e7:ae:a7:05:be:1e:2a:7a:cb:
         41:11:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:10 2026 by rpki-client