Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/344c12e6-ac18-3378-9bc5-41fa3fdf584a.roa
File:                     344c12e6-ac18-3378-9bc5-41fa3fdf584a.roa (raw, json)
Hash identifier:          q/7h0Pa8a9gi+/SAhsN3Te4bOByBImCKfYqkY1o7jpI=
Subject key identifier:   23:09:D2:CA:6B:4D:2B:4C:4D:78:CE:55:5D:C2:19:5E:29:BF:1A:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EED5246A2B64CE8E98E54F0A8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/344c12e6-ac18-3378-9bc5-41fa3fdf584a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     400402
IP address blocks:        50.114.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:46:a2:b6:4c:e8:e9:8e:54:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f3769301-c93c-4145-bc93-802bdaac8eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:32:1b:78:65:eb:71:1d:fe:55:87:c5:d2:
                    d7:14:62:d4:ee:d4:2d:c9:98:97:dd:ee:8a:a2:d4:
                    93:82:59:ba:c7:36:d9:9c:00:64:38:5c:51:b0:9d:
                    19:8b:29:d4:c7:ea:80:69:97:f0:d0:42:de:2a:8f:
                    ef:dc:bf:a7:47:6c:8e:9f:32:c1:9f:be:ae:ab:69:
                    d1:4d:67:1d:e3:14:85:88:06:7d:ca:e1:a4:ae:bb:
                    fd:21:e4:51:5a:70:4c:a3:64:c9:75:8e:a7:82:9e:
                    31:19:c4:4f:fd:dc:a7:58:f0:52:f6:4d:f1:89:9e:
                    2b:68:db:b4:bf:e2:2d:7d:6e:90:af:fa:a2:e0:f1:
                    5b:46:a3:01:bb:d5:0e:17:52:32:01:79:21:1d:96:
                    8e:1e:f5:cd:ab:ff:c1:64:c8:27:6c:19:46:d6:c7:
                    b8:c6:81:53:37:70:b8:ea:2b:b6:31:4b:b2:9b:b4:
                    7e:58:d9:a0:5e:37:2b:ec:3b:c1:6f:d4:42:47:7c:
                    ec:0d:86:8f:e3:9f:f0:fc:a6:05:c2:c4:c1:92:7e:
                    2c:ee:50:c3:16:99:ff:ac:cb:55:77:69:72:ab:7d:
                    6d:66:53:c5:4f:96:63:62:dd:51:ad:86:16:e2:c9:
                    dd:21:30:ed:09:84:08:ba:cb:d9:fa:f4:63:49:75:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:09:D2:CA:6B:4D:2B:4C:4D:78:CE:55:5D:C2:19:5E:29:BF:1A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/344c12e6-ac18-3378-9bc5-41fa3fdf584a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:2f:58:b2:34:e7:22:5d:58:03:05:49:ea:7b:02:7d:68:
         27:8e:e2:39:0a:f3:3b:92:63:7c:cf:e6:ff:24:1a:b1:a5:2b:
         95:0a:4c:1c:95:b5:a2:e4:e2:ac:19:d3:cd:e7:75:e3:8a:b4:
         51:94:5d:be:da:83:dd:f4:39:6e:12:2d:c9:56:22:63:8c:a8:
         ed:ff:ac:78:6e:32:8b:d2:af:4d:8e:c5:11:d2:a2:d9:77:52:
         d8:6e:7c:a2:2d:ed:74:7f:bb:54:39:4a:1d:a4:67:26:94:58:
         db:13:62:7a:45:1e:71:20:00:fb:33:d8:46:15:94:b6:79:29:
         86:20:55:0d:27:df:04:a6:8a:4d:1b:d1:12:8e:1f:83:e1:37:
         2a:6e:0c:52:4a:c4:24:67:a6:dd:a8:49:ec:8c:89:4a:55:79:
         9d:11:29:58:d8:f0:38:e7:6d:5d:51:9c:f2:74:3c:10:ca:e7:
         3a:df:c3:83:3a:5c:31:1b:81:3d:08:41:84:d8:79:44:14:23:
         01:83:6d:81:e4:7d:81:45:98:a8:8a:42:6b:14:a6:fb:88:aa:
         94:4b:d4:15:07:e1:67:c9:bd:db:6e:ae:da:8e:ba:73:b7:3e:
         f2:92:4c:20:6b:75:5f:89:06:3e:90:e8:02:e7:dc:95:d4:6e:
         ab:52:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:03:21 2026 by rpki-client