Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea834181-c7c5-3f26-ba87-58081e218b8a.roa
File:                     ea834181-c7c5-3f26-ba87-58081e218b8a.roa (raw, json)
Hash identifier:          Ti2MsFRNLaUTyv3GGCWEa0uA2eozs+cA1B0ULaeXj+w=
Subject key identifier:   2A:F3:0E:52:15:05:CA:F2:D1:B1:34:4F:6C:7E:A2:0A:F2:38:0D:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F35E7C58C39590D0CC5BCFAAC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea834181-c7c5-3f26-ba87-58081e218b8a.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        50.114.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c5:8c:39:59:0d:0c:c5:bc:fa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=63b3430c-4691-4df1-821b-587b9c0e8c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:49:9a:b1:ae:fb:55:11:4d:ee:ae:28:45:
                    74:8c:40:1b:4c:00:fc:1e:2d:e8:18:6e:37:74:51:
                    74:b9:e9:be:d6:35:4e:c8:1a:b3:1f:7c:2b:4b:8d:
                    7c:a5:31:82:77:74:99:f1:01:1a:a8:2a:91:c3:79:
                    06:e1:3e:93:47:21:ca:f5:c7:9e:8d:f5:ec:de:cd:
                    0d:f8:b4:df:da:7d:a8:28:ec:8c:61:50:11:e2:22:
                    3c:3b:fa:61:30:ce:98:67:a4:ae:e6:fc:42:44:4d:
                    ed:1f:7a:86:ad:b9:92:82:f4:31:1a:de:32:5f:45:
                    64:90:c3:5b:ee:54:84:88:df:2e:b4:1e:44:30:68:
                    fb:be:72:55:af:81:60:e4:90:e6:eb:73:14:5d:c3:
                    d6:ca:dd:f9:88:08:94:1d:57:7a:f8:8c:0f:0c:63:
                    8c:fc:3b:a9:56:29:ad:3e:17:7f:d4:77:3e:97:53:
                    7e:79:41:70:45:74:e6:78:00:97:25:37:b3:18:53:
                    97:43:68:0d:15:3e:d7:b6:7d:e6:c6:7a:60:0e:c8:
                    8b:34:6a:56:77:e0:43:38:4d:5e:61:6b:76:20:9a:
                    35:d7:b3:e5:0e:64:7a:68:1f:4e:d9:04:77:de:2a:
                    95:9f:3b:36:ae:a5:e4:89:a5:85:a1:e0:31:08:7c:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:0E:52:15:05:CA:F2:D1:B1:34:4F:6C:7E:A2:0A:F2:38:0D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea834181-c7c5-3f26-ba87-58081e218b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:d8:bb:e0:2e:e6:1e:fb:4c:c3:fe:65:26:a9:39:f1:28:
         90:3b:8a:4d:2c:d9:fb:79:9d:41:34:1f:47:e2:0d:6c:82:42:
         cd:2f:3a:5a:7c:66:6c:7c:fd:1b:61:99:75:c2:43:40:e4:50:
         99:d3:26:37:ea:98:11:06:ab:e6:63:f9:a6:4d:86:36:a6:7e:
         12:99:97:bc:ec:8e:03:68:60:f2:bf:af:d5:f1:92:70:a5:eb:
         f9:4a:ef:57:87:be:21:97:86:90:31:be:cf:66:a6:b8:c8:5c:
         f8:7f:19:fb:7e:c1:75:43:7d:06:68:79:49:23:4e:ac:04:2c:
         71:83:97:bc:d1:45:6f:f2:26:b1:6d:10:9b:15:83:cb:11:3c:
         44:17:fd:93:54:eb:0f:d5:ea:bf:5e:b5:39:a2:36:65:5b:1b:
         dc:4d:be:93:eb:b5:c2:cd:71:b8:78:09:f7:cd:38:34:0c:c8:
         9b:6d:f8:2a:aa:18:21:58:85:99:ed:9b:ac:ef:74:01:15:4e:
         15:f5:fb:2c:e3:7d:f0:81:f3:21:ba:5c:a9:44:0d:13:89:3e:
         c0:4b:9a:93:48:5d:45:a6:fc:0d:a7:05:9b:4a:ab:f0:88:3a:
         fc:8d:36:20:3c:2b:e8:cb:f1:5c:55:0a:4e:28:cd:d3:91:04:
         31:a6:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:43:27 2026 by rpki-client