Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e67afbe1-bfd8-3443-8000-3b26957cf753.roa
File:                     e67afbe1-bfd8-3443-8000-3b26957cf753.roa (raw, json)
Hash identifier:          y6Ck0O/yinyTYqwS2zZkqFyYFGcD6Ek8kwVZUjxblpY=
Subject key identifier:   4B:B7:B3:6D:7C:B1:2D:65:B2:C7:87:FB:40:D0:DE:91:77:83:98:0A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4A82D1AF1BD8BDE4F7980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e67afbe1-bfd8-3443-8000-3b26957cf753.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        50.114.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a8:2d:1a:f1:bd:8b:de:4f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0c0b785c-ba0a-42a6-81de-471ba8f5dae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:11:02:63:1f:fd:d2:75:ff:98:14:84:78:
                    ad:4d:a0:f9:63:f4:7a:35:be:f7:56:58:8d:78:df:
                    49:a9:27:c9:46:89:8d:42:24:90:c5:a3:f7:13:a9:
                    c2:2f:f2:7d:d8:5e:b9:15:f1:44:9c:fe:f6:a1:fa:
                    8c:c4:5a:17:a4:70:05:a2:2a:f8:94:76:87:6c:6a:
                    0e:30:78:fc:c7:a6:05:c9:4d:5a:39:47:42:1e:91:
                    5b:6a:d3:d2:d7:6a:4d:26:f1:fa:cf:44:d6:d4:fb:
                    15:1a:ec:98:82:7c:e2:a6:64:dc:cc:49:15:fc:04:
                    0b:36:00:c5:cb:4b:4c:fe:31:62:f2:dd:55:ac:4b:
                    16:c2:ff:d6:4e:0c:e7:9b:d8:67:68:59:dc:10:1b:
                    95:a4:1a:26:01:48:f4:d4:00:c2:03:76:0c:98:05:
                    a3:a8:50:25:4b:f2:30:b4:dd:bd:34:44:d2:f6:c2:
                    b7:91:19:6e:ac:bd:14:0a:34:fe:6e:08:c2:47:15:
                    8a:ba:78:e7:57:3b:72:64:cb:fe:32:3c:53:93:b9:
                    d0:91:92:c7:38:06:f0:5a:ee:32:a1:ec:aa:6d:88:
                    5f:73:48:f5:c6:1c:e1:b6:a2:55:31:02:a6:00:bb:
                    51:4d:81:71:2b:4c:b7:6e:25:92:33:f0:c3:39:0c:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:B3:6D:7C:B1:2D:65:B2:C7:87:FB:40:D0:DE:91:77:83:98:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e67afbe1-bfd8-3443-8000-3b26957cf753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:01:57:01:c3:d8:28:cf:ff:68:45:13:ee:ab:f0:c1:c7:38:
         87:de:79:31:a0:fd:e4:8b:1d:48:85:0c:17:24:86:c2:a1:89:
         1d:5f:c1:9e:41:69:ba:89:0f:7d:30:27:e4:cc:e2:f8:b1:2b:
         f2:c2:74:fc:1b:4e:a7:34:f5:7d:8d:93:30:e3:2c:36:1a:92:
         91:b6:a4:f3:ae:ff:b6:9a:d2:48:37:5c:07:af:13:1a:f0:35:
         29:ce:6f:72:25:f2:3c:ac:bd:8d:3a:67:ff:a4:82:0c:b1:d7:
         07:19:37:0d:e4:bc:3c:c2:2e:48:ff:3c:e5:89:f6:ff:92:02:
         b7:b9:cd:68:24:5f:4d:14:9b:f5:07:90:1c:40:ff:76:18:72:
         f6:cc:08:b9:49:db:9f:4c:b9:2b:70:93:ed:3e:16:02:31:e3:
         01:e1:74:1f:99:9c:9a:e7:9a:b4:96:eb:25:46:5e:36:ba:57:
         c6:14:3a:8b:ff:2b:6b:2f:b8:eb:b9:67:7f:95:f6:4a:b5:67:
         8a:f7:9a:8f:0c:18:c8:1d:eb:8f:a5:28:3c:38:5e:22:45:c9:
         be:39:9a:cb:e8:6f:a3:ac:96:3b:f2:78:8b:9a:15:17:73:b9:
         ee:0e:79:25:1f:f1:2b:8d:a5:ad:52:b0:c9:7e:95:56:f2:ee:
         0d:f2:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:47 2026 by rpki-client