Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450d861-ee64-3f83-89fc-ab37d1db1132.roa
File:                     3450d861-ee64-3f83-89fc-ab37d1db1132.roa (raw, json)
Hash identifier:          6jH3omRXKBSnRGiLWy+l6fQpGWP+9pUjzceGDyt4Zek=
Subject key identifier:   33:21:E1:B3:96:8B:BC:D9:35:49:4D:AA:FD:7B:04:D7:38:1B:78:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9384F67DB2FFC93036522F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450d861-ee64-3f83-89fc-ab37d1db1132.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        50.114.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f6:7d:b2:ff:c9:30:36:52:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=be02eb43-fcad-4d2a-8ade-e1e8acca31c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:f6:14:f0:42:32:0b:ee:2b:42:ce:2d:96:
                    3b:0b:41:f7:08:72:df:fa:57:8c:18:64:73:3e:4e:
                    e3:b7:07:01:83:da:44:7f:07:24:c6:fb:53:07:64:
                    67:0b:5f:40:02:56:5c:50:20:29:02:b7:a6:db:0b:
                    ea:64:c9:a4:e9:79:e4:59:92:47:34:49:66:12:77:
                    a7:e8:97:93:47:3e:47:64:70:8f:c6:80:df:ea:9f:
                    b9:39:d5:c9:df:44:98:ad:36:6c:34:2b:0d:18:5a:
                    5a:3e:ab:08:83:06:74:f7:3c:44:cd:72:82:6e:cb:
                    fa:2d:51:6a:7d:40:5e:4b:63:bd:51:27:af:19:5a:
                    de:2d:6c:97:42:de:29:79:c6:91:46:95:1a:b3:86:
                    98:5b:b5:48:63:8a:5a:b1:b1:84:a5:08:24:ab:e0:
                    93:7a:8e:75:29:da:1d:83:39:bd:f2:32:a7:27:79:
                    ee:39:cb:c9:91:06:b2:25:8d:27:93:b5:ad:d7:5e:
                    cf:77:df:14:1c:32:05:9c:45:30:74:81:63:43:4e:
                    35:19:6d:bf:68:d1:f8:38:22:7f:61:5b:20:97:44:
                    73:fb:91:fe:90:67:3e:fc:44:4c:3a:f5:34:6b:09:
                    bc:7f:5f:5b:0e:13:a2:94:63:70:99:1f:4c:31:b1:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:21:E1:B3:96:8B:BC:D9:35:49:4D:AA:FD:7B:04:D7:38:1B:78:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3450d861-ee64-3f83-89fc-ab37d1db1132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:71:af:92:71:23:19:f9:3d:36:5f:d1:e7:e6:11:1c:d2:67:
         28:1a:e6:96:5f:69:4f:c8:01:cf:5f:4f:c7:00:4d:07:3c:63:
         b8:69:6b:bd:b9:2f:49:ce:4b:22:f0:42:29:c9:b6:97:0b:6d:
         1a:c9:38:a0:49:27:26:1a:54:52:1b:7c:35:46:34:c5:26:15:
         3c:ea:6c:43:9c:20:93:f0:b3:cd:b8:a7:54:ad:f7:82:a5:16:
         04:4d:11:da:85:d7:fb:ae:10:39:70:85:9a:99:49:57:b5:46:
         3f:48:b6:78:89:af:26:a0:d3:37:2d:18:94:11:27:48:b9:3e:
         56:ff:ce:83:f0:fc:be:68:7e:92:1c:cf:44:71:07:2b:ec:2c:
         10:7e:e9:1d:1c:c6:b2:1c:8f:18:3d:70:6d:df:21:f8:93:a4:
         cd:72:ec:fd:dd:0c:34:04:a7:17:bf:59:08:56:08:d3:5f:0b:
         da:40:ba:24:b3:e2:7e:d5:f6:fc:dd:eb:97:80:fc:e9:5b:29:
         e3:8f:31:13:b7:0e:f9:66:01:06:6c:cd:cf:17:4e:03:12:48:
         38:08:f8:ec:35:f8:d7:88:05:5b:ea:8e:7f:58:f5:9b:0e:4a:
         78:c2:92:14:19:6d:53:3a:45:91:0b:ca:e6:19:e3:81:c1:89:
         c9:28:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:59 2026 by rpki-client