Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28c5a764-3d07-35c0-8d66-909c614c84ef.roa
File:                     28c5a764-3d07-35c0-8d66-909c614c84ef.roa (raw, json)
Hash identifier:          KOdFaEWg3J8yivMTMtyar5vjxyO9NvNPFmhZylICk/c=
Subject key identifier:   16:CF:9B:7D:EA:60:E9:28:AD:49:49:E5:3E:6B:59:D6:8F:85:E9:0F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E5A49F7A91E5B8A4FA2732A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28c5a764-3d07-35c0-8d66-909c614c84ef.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     20012
IP address blocks:        50.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f7:a9:1e:5b:8a:4f:a2:73:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=1ed24197-9146-470a-a6a0-ae06be058c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:4d:fd:65:72:c4:51:1f:c5:76:af:d4:d0:
                    b2:eb:98:1e:e8:7a:1b:43:a8:00:f1:af:92:27:ce:
                    df:3b:88:31:1b:1f:a2:60:b6:a8:ba:73:65:7d:bf:
                    27:06:51:e0:97:c3:2a:c3:8d:cf:ec:ea:66:24:9b:
                    64:74:dd:cc:19:56:3f:cc:85:ec:5d:3b:b7:7b:24:
                    3c:c6:21:b2:1c:3d:8e:2b:a0:1f:27:ff:8a:7a:5d:
                    58:a3:1c:56:0b:c0:58:d3:9f:23:98:3f:c6:be:9e:
                    10:0e:af:48:9e:cb:97:87:f6:8d:ec:47:79:d4:ee:
                    b7:ed:af:53:3f:28:71:9a:84:a6:be:30:82:f6:4e:
                    15:93:3d:32:08:33:b2:a0:b1:10:09:c6:a0:2a:ce:
                    71:0d:55:92:3d:e5:9d:56:e5:17:37:4c:b8:2e:a1:
                    4b:c3:f1:6a:37:91:1c:61:22:4e:2e:9d:4c:b9:05:
                    64:17:42:48:28:14:2c:1c:69:26:d3:cc:38:2a:5f:
                    6b:9e:45:1a:4f:f9:48:d8:0a:84:80:b0:f8:38:1c:
                    c0:8e:42:74:1b:b2:de:74:62:43:e1:3b:33:0f:f1:
                    c9:d7:6a:2c:01:e4:de:16:29:b5:86:af:af:5c:4a:
                    ba:c8:69:9c:74:80:f4:d4:f2:e9:f7:87:1f:03:69:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:9B:7D:EA:60:E9:28:AD:49:49:E5:3E:6B:59:D6:8F:85:E9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28c5a764-3d07-35c0-8d66-909c614c84ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:63:06:4c:c0:65:6c:34:35:d0:d2:44:0c:e3:6a:3f:16:b1:
         f2:ae:2d:af:1c:e3:d3:7f:ee:f1:78:28:da:61:90:9a:67:3b:
         63:4b:40:f3:cf:64:1a:6c:67:c3:e9:8b:ca:ba:3a:1e:9a:7a:
         f4:01:d4:a0:c6:cb:b4:56:63:49:b8:c7:89:9d:20:6a:22:d6:
         f1:c1:ca:11:32:fb:a8:dd:9d:10:6f:0d:98:94:ca:4a:2c:27:
         b3:d0:db:71:39:69:9d:59:3f:74:a7:f2:f5:fa:eb:39:e7:4d:
         88:ea:85:4f:22:f2:78:d6:60:7c:a5:b3:d5:e0:f7:0d:71:02:
         23:6a:fc:14:1d:05:e1:54:b2:fb:31:f2:5a:1a:df:cb:92:0d:
         9a:6c:e6:0d:5f:11:72:2c:08:3d:3a:43:0a:47:1e:ab:1c:54:
         d2:6e:e3:9e:60:d3:b3:bc:8f:cf:25:70:62:86:93:c0:88:50:
         31:4c:25:27:f4:8c:db:e9:b1:34:b4:9f:3c:72:37:cd:f3:cd:
         ec:21:fa:67:cd:2c:df:ee:c7:b4:be:20:7f:01:12:01:88:c8:
         a8:50:48:97:ea:4d:8e:fd:19:38:63:3a:6d:1c:35:10:8a:d2:
         2b:0d:66:bc:51:a5:dc:90:cb:ee:a9:6f:89:4a:0c:6b:bf:43:
         60:98:25:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfepHluKT6JzKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
MWVkMjQxOTctOTE0Ni00NzBhLWE2YTAtYWUwNmJlMDU4YzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5FN/WVyxFEfxXav1NCy65ge6HobQ6gA8a+S
J87fO4gxGx+iYLaounNlfb8nBlHgl8Mqw43P7OpmJJtkdN3MGVY/zIXsXTu3eyQ8
xiGyHD2OK6AfJ/+Kel1YoxxWC8BY058jmD/Gvp4QDq9InsuXh/aN7Ed51O637a9T
PyhxmoSmvjCC9k4Vkz0yCDOyoLEQCcagKs5xDVWSPeWdVuUXN0y4LqFLw/FqN5Ec
YSJOLp1MuQVkF0JIKBQsHGkm08w4Kl9rnkUaT/lI2AqEgLD4OBzAjkJ0G7LedGJD
4TszD/HJ12osAeTeFim1hq+vXEq6yGmcdID01PLp94cfA2mLswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbPm33qYOkorUlJ5T5rWdaPhekPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjhjNWE3NjQtM2QwNy0z
NWMwLThkNjYtOTA5YzYxNGM4NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxjBkzAZWw0NdDSRAzjaj8WsfKuLa8c49N/7vF4KNphkJpnO2NLQPPP
ZBpsZ8Ppi8q6Oh6aevQB1KDGy7RWY0m4x4mdIGoi1vHByhEy+6jdnRBvDZiUykos
J7PQ23E5aZ1ZP3Sn8vX66znnTYjqhU8i8njWYHyls9Xg9w1xAiNq/BQdBeFUsvsx
8loa38uSDZps5g1fEXIsCD06QwpHHqscVNJu455g07O8j88lcGKGk8CIUDFMJSf0
jNvpsTS0nzxyN83zzewh+mfNLN/ux7S+IH8BEgGIyKhQSJfqTY79GThjOm0cNRCK
0isNZrxRpdyQy+6pb4lKDGu/Q2CYJYU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:23 2026 by rpki-client