Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5536b71-a3f1-3f7a-9fca-41b908763fd1.roa
File:                     e5536b71-a3f1-3f7a-9fca-41b908763fd1.roa (raw, json)
Hash identifier:          2vH6/RxhY9dg49BFJdfhEuDoB2wQAUFjbSjlNmhKoOI=
Subject key identifier:   3C:27:22:71:D3:8A:63:1B:8B:62:75:65:F9:99:C0:81:E7:A1:C1:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D75D52DB40CDDEF7229ADE960
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5536b71-a3f1-3f7a-9fca-41b908763fd1.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     49770
IP address blocks:        50.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:2d:b4:0c:dd:ef:72:29:ad:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=ab583f53-9215-4240-af19-b24462b44a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:a0:0d:f7:73:12:74:d1:91:ce:85:a0:23:
                    e7:55:06:3f:8c:a5:95:2b:e6:69:fe:ca:da:f1:50:
                    e6:23:1e:ab:07:3e:ec:43:95:d9:a8:b3:18:f5:5b:
                    4c:34:6e:17:75:ad:a4:81:be:2f:08:f5:18:f8:55:
                    de:b5:bc:31:1b:09:d6:a6:0e:22:4f:13:fc:af:c7:
                    92:3c:b3:04:5c:05:d3:2a:28:63:f3:97:8d:0d:3e:
                    e7:21:61:f9:2d:22:d3:5b:4b:47:9b:26:83:1d:d9:
                    cb:d0:5a:de:13:bc:72:26:b1:4e:15:1d:82:e1:c4:
                    52:7b:a1:f0:9e:df:e4:76:a7:44:23:e3:95:52:d7:
                    81:80:0b:fe:c9:86:20:a2:ef:52:14:60:ae:9f:45:
                    7c:9d:f1:24:97:48:08:12:f2:a7:b4:46:00:63:a8:
                    9d:2c:4a:37:49:85:f0:f4:33:a1:e1:1a:b2:51:76:
                    a1:11:6a:1a:3e:e3:4b:68:1b:e8:34:f3:89:90:08:
                    fa:bf:e1:1d:de:5f:b3:34:c1:6a:90:94:fd:91:b4:
                    ef:eb:e6:b0:29:2c:34:f7:84:e4:8a:33:d3:92:0b:
                    08:1f:0c:9a:e5:18:66:cb:76:f2:ae:43:a3:06:66:
                    42:73:23:75:0c:66:0e:32:21:70:6c:14:03:db:33:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:22:71:D3:8A:63:1B:8B:62:75:65:F9:99:C0:81:E7:A1:C1:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5536b71-a3f1-3f7a-9fca-41b908763fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:a0:86:4f:24:68:8d:25:bd:ac:1f:29:d9:e4:77:a3:9c:
         ba:0f:dd:9e:84:1e:40:26:fe:b2:80:84:fa:a1:54:2c:e1:1d:
         a1:ab:05:9b:6f:30:1c:ff:4e:da:5f:2b:63:e9:49:4b:41:38:
         51:04:74:6c:24:58:3c:5e:2c:04:6a:aa:b2:cd:d5:92:71:db:
         ba:d7:aa:6a:11:98:db:0d:44:e2:3c:58:2b:ce:5f:49:e6:35:
         a5:a5:6f:f7:b9:92:8d:f3:72:d1:c5:2e:80:6a:16:d6:b2:df:
         e9:fa:5e:1a:c6:21:f8:8b:14:40:df:4a:c3:fa:e5:12:56:80:
         aa:6d:98:36:59:e3:c2:09:79:cd:68:41:fd:ab:7e:b2:e3:06:
         75:aa:dd:3e:c5:ef:ba:94:40:d0:87:4d:ff:bc:35:6a:81:cf:
         a4:58:9b:a1:8a:c0:f0:5d:ba:32:2f:a7:ce:91:95:1a:b0:15:
         79:55:46:cf:10:37:df:8e:8c:10:ed:18:bf:62:3a:f6:43:d0:
         1c:44:5d:de:9c:7f:6d:9c:d5:56:6e:2d:a4:09:08:f6:b5:11:
         a3:db:b7:c9:e5:c9:eb:25:96:33:8f:51:24:cc:e5:4a:ac:f4:
         70:0f:27:7c:64:8c:09:4c:4c:dd:d1:98:bd:da:d9:09:7a:b0:
         23:1c:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:07 2026 by rpki-client