Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f18eb1b7-bc1c-3e7a-97fc-2b27f686f046.roa
File:                     f18eb1b7-bc1c-3e7a-97fc-2b27f686f046.roa (raw, json)
Hash identifier:          bX6nAF+n4Mc0/uVJ7SccYROcge1bdExm02g3sk5WmUs=
Subject key identifier:   1A:3C:EA:66:09:CE:29:F1:C3:77:EA:07:FF:6B:BA:3F:20:99:44:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4A80C8F2A217233280E40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f18eb1b7-bc1c-3e7a-97fc-2b27f686f046.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        50.114.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a8:0c:8f:2a:21:72:33:28:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=244eefa8-b9b9-4a58-bf8a-2777148ec449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:58:7e:62:ec:72:07:94:20:78:3a:4f:cd:
                    96:61:f7:a7:9d:c6:27:cc:2e:7c:f9:41:0c:1d:1d:
                    ce:06:f4:90:1d:c4:24:c9:62:31:8e:91:27:70:26:
                    62:04:9d:98:07:93:b3:45:5d:a3:73:33:f4:05:ad:
                    66:2a:e6:d2:f6:4d:05:00:9d:f6:3a:2b:3d:0e:58:
                    15:04:21:27:13:92:72:15:68:0a:6f:43:78:3b:63:
                    7a:27:eb:79:91:f9:3a:cf:f8:19:63:26:91:57:39:
                    b8:1f:31:fc:77:a8:89:06:c3:a7:67:9b:af:3b:39:
                    2d:fe:33:3e:d1:b6:1a:dc:65:5a:da:e3:f9:af:a8:
                    61:66:3a:f6:f4:e4:83:e4:b1:a3:95:c5:4b:08:6f:
                    c2:97:fa:d1:c3:36:67:1e:d5:d9:e7:da:c6:a1:d6:
                    41:28:f9:91:80:c4:9b:9d:54:3a:04:0f:40:d9:1a:
                    da:4e:1b:13:92:29:b6:ef:e7:4c:8e:e2:5c:0d:9c:
                    85:7c:7c:01:fd:ac:33:8a:01:34:6c:ed:87:4a:cf:
                    1e:0b:62:4c:79:3f:a5:76:a8:2b:d5:42:d9:10:9d:
                    46:d0:df:ff:ff:8d:4f:56:df:f3:42:29:f4:94:77:
                    de:3a:5f:10:4f:b8:0a:cc:34:b9:e9:ae:72:d6:a0:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3C:EA:66:09:CE:29:F1:C3:77:EA:07:FF:6B:BA:3F:20:99:44:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f18eb1b7-bc1c-3e7a-97fc-2b27f686f046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:66:75:3f:b8:93:fe:ce:9b:40:91:1e:83:a2:93:cd:7e:
         6e:68:14:dc:27:cc:5c:fc:04:b8:19:31:a7:b1:66:03:d2:ab:
         32:a9:68:82:0c:5d:c8:a1:04:4c:a4:3d:a6:fa:8b:36:a3:d0:
         36:dd:3a:f1:f7:c2:97:bc:ea:e8:80:ce:03:d4:84:f3:94:12:
         3b:6b:66:35:50:54:58:ae:23:0f:22:26:82:45:49:0f:6c:41:
         9b:75:e2:23:7a:50:ec:79:63:bf:0c:d9:99:49:9d:a2:a3:56:
         60:4c:7d:7f:00:95:d4:0e:84:af:7b:93:c8:d9:44:71:08:46:
         a9:64:1c:6f:1b:33:a9:9c:22:f7:6e:9d:f8:7b:22:8f:30:ae:
         68:2a:5e:06:f1:8e:f9:35:65:5f:c9:95:02:b5:3b:69:aa:a8:
         79:eb:48:16:ff:2a:ef:f4:74:17:5a:59:b2:30:6b:be:ae:0c:
         8f:bf:3f:17:c0:ad:e6:5a:51:e9:b0:dd:ca:91:d1:e9:d5:5b:
         88:86:2f:04:91:94:bc:46:5e:a1:be:17:b2:90:c8:68:7c:de:
         be:55:eb:c2:6f:1b:c0:7d:3c:de:23:d9:2f:87:eb:de:bf:b3:
         54:5a:58:4e:66:72:d8:64:10:eb:b5:16:51:68:09:63:59:96:
         34:8f:43:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5KgMjyohcjMoDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
MjQ0ZWVmYTgtYjliOS00YTU4LWJmOGEtMjc3NzE0OGVjNDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRdYfmLscgeUIHg6T82WYfenncYnzC58+UEM
HR3OBvSQHcQkyWIxjpEncCZiBJ2YB5OzRV2jczP0Ba1mKubS9k0FAJ32Ois9DlgV
BCEnE5JyFWgKb0N4O2N6J+t5kfk6z/gZYyaRVzm4HzH8d6iJBsOnZ5uvOzkt/jM+
0bYa3GVa2uP5r6hhZjr29OSD5LGjlcVLCG/Cl/rRwzZnHtXZ59rGodZBKPmRgMSb
nVQ6BA9A2RraThsTkim27+dMjuJcDZyFfHwB/awzigE0bO2HSs8eC2JMeT+ldqgr
1ULZEJ1G0N///41PVt/zQin0lHfeOl8QT7gKzDS56a5y1qANoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBo86mYJzinxw3fqB/9ruj8gmURFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjE4ZWIxYjctYmMxYy0z
ZTdhLTk3ZmMtMmIyN2Y2ODZmMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQyZnU/uJP+zptAkR6DopPNfm5oFNwnzFz8BLgZMaexZgPSqzKpaIIM
XcihBEykPab6izaj0DbdOvH3wpe86uiAzgPUhPOUEjtrZjVQVFiuIw8iJoJFSQ9s
QZt14iN6UOx5Y78M2ZlJnaKjVmBMfX8AldQOhK97k8jZRHEIRqlkHG8bM6mcIvdu
nfh7Io8wrmgqXgbxjvk1ZV/JlQK1O2mqqHnrSBb/Ku/0dBdaWbIwa76uDI+/PxfA
reZaUemw3cqR0enVW4iGLwSRlLxGXqG+F7KQyGh83r5V68JvG8B9PN4j2S+H696/
s1RaWE5mcthkEOu1FlFoCWNZljSPQ38=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:23 2026 by rpki-client