Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db20eb25-3349-3cfd-bd03-0364ceadfd1d.roa
File:                     db20eb25-3349-3cfd-bd03-0364ceadfd1d.roa (raw, json)
Hash identifier:          +uWOQ97OlqoJnpweY0TdnVD2+D9CbQQ73RuESMSlsac=
Subject key identifier:   F8:76:44:E3:BE:12:D5:5D:2F:E5:B1:6B:54:35:12:7D:1A:C4:A1:63
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C735C7D8D7188965A8430
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db20eb25-3349-3cfd-bd03-0364ceadfd1d.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        50.114.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:73:5c:7d:8d:71:88:96:5a:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=4bac8c2a-bd26-4f74-b178-4cb7d65120eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:95:15:a5:89:75:93:9d:27:b8:8b:29:b6:
                    bb:8c:6f:23:e9:18:3a:62:75:5c:dd:de:01:f4:ff:
                    cb:bc:96:69:fc:ff:8b:62:48:3c:da:bb:25:59:b9:
                    a3:2b:df:7c:65:80:5a:b4:26:48:50:92:bc:c1:be:
                    8b:25:0b:d2:9f:53:4e:9b:01:89:ec:cc:29:46:5e:
                    6b:42:c5:2b:63:3e:bf:a9:7d:6a:0d:17:0a:cd:29:
                    0c:77:64:62:27:b3:d2:2e:de:ca:33:74:4d:ea:88:
                    77:cc:5a:63:dc:9a:ad:b7:28:83:e8:5a:ec:83:ae:
                    51:64:41:06:49:3a:72:21:1f:b0:f1:d8:db:61:49:
                    a8:f3:6f:6d:c8:0f:87:22:4c:5a:df:4e:14:dd:43:
                    0e:70:f1:52:39:fb:8e:6d:84:4b:d9:ac:7d:dd:0d:
                    e3:5f:65:ec:79:ef:c9:9a:4e:5f:4b:f7:fe:ca:16:
                    7b:c7:d0:03:85:70:66:56:72:07:d9:51:6e:69:e4:
                    fd:6d:8e:91:03:b6:33:8b:2e:1b:af:f0:02:30:a9:
                    1a:b0:f2:6b:3d:32:b1:84:bf:fb:87:a1:2f:b1:28:
                    2d:99:9e:a2:1b:c6:6d:cd:da:f4:02:03:1e:47:88:
                    26:7d:2e:66:4d:03:82:78:74:ce:ac:14:64:7e:79:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:44:E3:BE:12:D5:5D:2F:E5:B1:6B:54:35:12:7D:1A:C4:A1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db20eb25-3349-3cfd-bd03-0364ceadfd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:69:5a:bd:0b:d0:7a:f0:b0:84:ad:ec:a1:79:0b:45:b7:
         12:05:ff:1f:37:78:89:65:b7:8b:52:8d:06:ca:8e:f9:4f:a6:
         f1:c3:17:e8:af:82:c3:9f:78:6e:b1:94:9f:c7:89:fb:fb:37:
         4c:78:aa:66:15:36:ef:fe:d4:e2:ab:08:73:f6:f0:28:7e:38:
         9c:7d:db:7e:2f:b6:f6:4b:81:b2:3f:7a:d3:9c:ce:ef:91:f6:
         a0:20:ca:25:c3:bd:14:31:ff:ca:50:14:dc:20:60:4c:a0:a3:
         84:31:34:8e:d6:ab:a4:89:a9:fe:c0:7e:1e:dd:64:a2:b5:10:
         60:b1:f8:82:22:84:b8:fa:12:a9:94:a7:df:90:19:c0:ef:e5:
         c3:36:02:79:6c:b8:ea:86:eb:76:9a:91:55:60:0a:a5:65:d5:
         97:6e:e8:ed:c0:6a:50:8e:98:cb:af:90:cd:3f:bb:6e:2d:7b:
         83:b5:a9:00:a1:42:7d:67:37:d5:ff:c8:ec:3a:4c:28:21:14:
         85:2a:53:7b:62:79:1a:b3:70:bf:c3:b7:f6:cf:db:cb:f5:b5:
         bc:c7:f7:dd:9c:54:52:a3:08:5f:8b:60:9e:85:5f:c9:fc:46:
         d2:b0:53:1c:84:dd:34:47:14:68:f9:7b:9b:93:9e:16:56:de:
         df:f0:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:16:33 2026 by rpki-client