Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe5b6b23-6e3b-328e-b9be-67d1964f88d7.roa
File:                     fe5b6b23-6e3b-328e-b9be-67d1964f88d7.roa (raw, json)
Hash identifier:          0VloWmlkaHhzRO2h36PSDPrvWpkcGuPWAnOEweynAlc=
Subject key identifier:   1E:BE:0F:22:BE:4F:09:A5:D8:8E:CB:7A:6C:EB:4B:7B:18:CE:8F:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D6AAA7E769CCA67526E888880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe5b6b23-6e3b-328e-b9be-67d1964f88d7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     401152
IP address blocks:        50.114.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7e:76:9c:ca:67:52:6e:88:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=cedb5a12-1cd4-4655-9775-b2aa2568c889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:eb:88:2e:a6:a3:36:34:75:d4:9a:48:b0:
                    64:fe:a4:a7:0d:f5:45:b6:67:db:c3:ea:9f:bb:3c:
                    0a:ef:2a:b0:b2:c5:c9:f4:55:b4:bc:0f:9f:30:39:
                    46:9c:a9:e9:76:9d:32:5d:23:85:ed:22:00:a2:69:
                    06:35:f1:13:5b:4a:5e:60:82:7d:58:47:74:f1:0f:
                    d6:22:da:52:f3:39:82:e7:31:07:83:b1:cd:2f:b1:
                    92:9a:43:52:93:db:f7:be:87:b1:38:2e:ab:68:f9:
                    93:72:7e:98:a2:e9:60:8b:79:25:41:07:7a:31:4a:
                    a8:f1:98:3d:84:48:ab:38:34:1b:df:24:b1:9a:44:
                    42:12:df:77:10:5c:2b:d6:40:56:95:b5:ef:43:04:
                    50:8a:21:6f:82:82:3a:2c:7c:70:8c:20:77:eb:0c:
                    ba:02:74:2e:19:0b:8d:73:13:3f:25:e3:e7:2b:d1:
                    8e:60:b8:f3:fb:4a:5c:84:ac:57:c6:dd:83:51:39:
                    cb:0b:64:82:7d:35:af:c4:fa:36:6d:e8:13:56:b0:
                    d7:05:a7:8f:3a:ee:67:a9:02:2f:0f:4c:47:95:f5:
                    d7:c0:3e:55:66:c0:05:34:2b:82:c3:5a:11:65:a8:
                    69:7f:96:42:71:20:d3:d2:fb:e4:af:6c:4b:22:c2:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BE:0F:22:BE:4F:09:A5:D8:8E:CB:7A:6C:EB:4B:7B:18:CE:8F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe5b6b23-6e3b-328e-b9be-67d1964f88d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:b6:a3:f9:dd:0e:59:1a:cc:61:a8:d8:4e:e6:65:23:f8:
         bd:af:da:47:b1:7f:dc:35:db:90:f8:0a:ef:47:87:78:0d:bf:
         45:fb:70:4f:f3:c2:41:4e:a4:a1:af:1f:18:59:16:4d:5f:14:
         db:57:68:70:98:b6:00:07:f0:79:c9:47:df:39:41:9c:43:68:
         ee:83:2e:2e:6d:87:99:72:6d:51:92:a3:91:97:80:2a:4d:97:
         7c:87:85:74:31:ec:07:e0:e5:89:27:22:87:50:d3:ea:75:06:
         e2:62:b3:b9:93:05:3d:d0:49:b6:df:ce:b3:c4:74:af:59:ce:
         0c:2d:34:8c:ca:bf:4a:1e:dd:95:e3:a6:bf:9b:06:67:1e:df:
         20:b8:4f:6d:78:6f:79:ab:19:b9:a2:ff:97:9a:3e:f6:29:4f:
         b6:8a:ac:46:3f:57:01:96:9e:a9:5b:38:f9:87:a3:1f:a0:ee:
         be:a9:84:10:7f:3d:e9:8c:ce:29:92:ca:f0:d0:2e:4b:dc:37:
         10:76:bd:fb:cd:19:55:bc:60:26:31:70:de:62:bb:9a:81:a8:
         92:dc:da:46:65:8e:8c:87:d3:30:f5:5e:cd:c3:ac:e3:ad:58:
         e7:54:39:a2:80:8a:d1:70:92:47:c1:3a:17:49:62:1c:ce:a3:
         b5:c8:66:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn52nMpnUm6IiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
Y2VkYjVhMTItMWNkNC00NjU1LTk3NzUtYjJhYTI1NjhjODg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGTriC6mozY0ddSaSLBk/qSnDfVFtmfbw+qf
uzwK7yqwssXJ9FW0vA+fMDlGnKnpdp0yXSOF7SIAomkGNfETW0peYIJ9WEd08Q/W
ItpS8zmC5zEHg7HNL7GSmkNSk9v3voexOC6raPmTcn6Youlgi3klQQd6MUqo8Zg9
hEirODQb3ySxmkRCEt93EFwr1kBWlbXvQwRQiiFvgoI6LHxwjCB36wy6AnQuGQuN
cxM/JePnK9GOYLjz+0pchKxXxt2DUTnLC2SCfTWvxPo2begTVrDXBaePOu5nqQIv
D0xHlfXXwD5VZsAFNCuCw1oRZahpf5ZCcSDT0vvkr2xLIsIG7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6+DyK+Twml2I7LemzrS3sYzo+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmU1YjZiMjMtNmUzYi0z
MjhlLWI5YmUtNjdkMTk2NGY4OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnItqP53Q5ZGsxhqNhO5mUj+L2v2kexf9w125D4Cu9Hh3gNv0X7cE/z
wkFOpKGvHxhZFk1fFNtXaHCYtgAH8HnJR985QZxDaO6DLi5th5lybVGSo5GXgCpN
l3yHhXQx7Afg5YknIodQ0+p1BuJis7mTBT3QSbbfzrPEdK9ZzgwtNIzKv0oe3ZXj
pr+bBmce3yC4T214b3mrGbmi/5eaPvYpT7aKrEY/VwGWnqlbOPmHox+g7r6phBB/
PemMzimSyvDQLkvcNxB2vfvNGVW8YCYxcN5iu5qBqJLc2kZljoyH0zD1Xs3DrOOt
WOdUOaKAitFwkkfBOhdJYhzOo7XIZrg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:59:56 2026 by rpki-client