Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
File:                     081fbf4c-8605-3e5f-8491-88cc243610ad.roa (raw, json)
Hash identifier:          Bb/cSmMdTF7ON1nNgk8qk5g6rL+TSUw5OtfYuwGlo9A=
Subject key identifier:   27:8C:A3:B1:7C:13:B5:B0:E4:C7:BF:D2:89:F3:1A:DF:EE:68:63:2E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E31CF4C8EF2BE740BC4E8F380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     58061
IP address blocks:        50.114.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:4c:8e:f2:be:74:0b:c4:e8:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=ca9a67d0-8f02-46c8-b955-e11d3c30538e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:ad:e8:2d:56:4a:ce:66:82:dc:49:2f:ea:
                    09:91:6c:32:c9:df:ed:c5:45:eb:4f:b8:0c:f9:66:
                    6a:af:1d:10:a4:b1:ea:fd:52:3d:06:00:d1:0a:9f:
                    08:c6:d5:fd:89:9f:8e:7b:b9:74:ff:29:a0:33:b3:
                    91:d4:eb:a8:3b:c0:28:a0:f3:3c:c9:3c:d0:3d:58:
                    8c:99:b4:3d:8e:99:65:5d:b5:8e:a6:99:e6:7d:54:
                    e9:7b:5d:81:be:8b:5f:2f:d7:73:2b:40:cb:8c:16:
                    73:02:52:84:a3:6f:f6:bf:c4:e7:5e:5c:bb:6f:3c:
                    31:d5:fa:ad:58:4d:44:90:fd:74:87:31:0d:27:d0:
                    c5:a4:d4:29:28:c5:ad:01:09:6c:37:23:52:a4:74:
                    09:41:44:d5:e5:6b:d1:16:9a:bb:b7:96:d0:81:ee:
                    d0:03:e4:85:b2:9e:32:7b:89:eb:1b:0c:6c:78:25:
                    65:79:72:d5:e6:4e:fe:49:30:c0:d7:45:49:fb:f5:
                    2a:d9:8e:23:25:5d:a2:7b:c7:05:0e:63:b5:4f:34:
                    c7:f0:50:b4:f5:e2:df:c1:bb:2c:68:d9:59:52:d9:
                    2f:27:0e:d8:7b:e9:e8:3c:e0:72:a9:92:8e:00:ce:
                    c4:9a:10:f0:ca:0c:c6:d6:c9:ef:36:12:ca:2b:2b:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8C:A3:B1:7C:13:B5:B0:E4:C7:BF:D2:89:F3:1A:DF:EE:68:63:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:c2:8a:8e:fa:ec:73:81:b6:66:f1:2b:16:12:fb:0a:f5:
         7c:28:86:d7:bc:1b:97:9d:63:cb:17:04:5f:81:98:3c:ea:0e:
         2e:b1:59:e4:64:0f:28:14:19:0f:27:62:dd:5a:01:29:51:83:
         a7:43:55:66:ea:bf:f5:4b:3f:7a:33:50:91:ce:fa:8a:d9:be:
         6e:12:85:29:ea:90:c0:91:17:43:7b:d2:00:de:10:f4:ac:9e:
         b3:6c:37:79:e7:37:49:a7:d4:fb:e4:d4:fa:79:84:bb:bb:dd:
         55:cf:0f:cd:8b:d5:e9:5b:97:00:2c:a6:95:8e:43:99:e9:38:
         36:46:d3:94:5d:5e:77:65:e6:de:77:03:42:96:53:ea:41:53:
         d4:ba:37:3c:b4:5e:1a:6b:df:9a:c4:dc:c8:27:3c:ed:a9:10:
         53:bc:5f:51:5c:13:70:5e:8e:40:21:0a:db:2a:7f:1c:c3:aa:
         67:0b:e3:90:a7:d7:85:38:03:eb:79:e8:d4:b4:f0:68:ab:6f:
         d8:b7:25:10:93:89:58:6c:78:33:27:f4:a8:ec:5c:bc:74:d2:
         93:80:78:9e:74:bb:e5:9d:82:2c:54:a3:e7:59:7e:25:32:0c:
         22:ba:40:28:91:78:75:16:46:12:33:d2:7f:66:26:40:65:0d:
         5f:e6:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:10 2026 by rpki-client