Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dcb402c-1be5-3c06-94ff-a756a77ec584.roa
File:                     4dcb402c-1be5-3c06-94ff-a756a77ec584.roa (raw, json)
Hash identifier:          uEA8/J8K6679PjIYSQzC2ICcUcEQU6sYow85X2XcK2E=
Subject key identifier:   0D:15:91:85:1F:FB:15:A7:6D:6E:91:E6:FD:66:BE:12:C4:29:15:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DADAAE690F10B2ACCE1684700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dcb402c-1be5-3c06-94ff-a756a77ec584.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     395898
IP address blocks:        50.114.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e6:90:f1:0b:2a:cc:e1:68:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=f1783bc8-be12-4d3d-8454-f9f256e0950d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:1d:79:62:2c:35:b2:06:c1:7f:aa:7b:0a:
                    c2:a2:cf:4d:01:0f:8a:9e:e3:82:40:96:69:fc:d1:
                    80:f6:27:d0:02:3b:82:90:48:f5:73:b8:b0:e9:d4:
                    a8:19:91:95:87:13:36:43:b7:7b:1d:e1:b3:63:23:
                    5f:d4:13:8a:ae:c0:fe:e9:ac:91:1c:11:bc:ad:b4:
                    51:d8:5d:33:04:66:fd:dc:67:22:fa:42:ba:15:ef:
                    1a:36:fc:73:ce:af:57:a1:a6:7f:de:5b:e2:ae:89:
                    2a:c6:4c:df:7f:9f:71:de:f2:91:6d:8e:c2:ec:55:
                    0b:ad:20:71:11:7e:a4:71:20:4a:2f:29:8f:16:ec:
                    35:a9:22:c5:73:c1:24:14:72:69:eb:b4:f6:1c:52:
                    6b:74:b4:4f:5c:96:65:cf:ae:dd:c6:58:9e:55:b5:
                    1f:71:a7:57:b8:61:da:2f:80:db:67:4f:4a:2e:b0:
                    1a:b9:72:0d:06:09:1e:71:02:9f:f4:c1:1d:45:f0:
                    e3:af:99:52:09:e6:6d:25:5c:4f:bf:f2:53:0b:ce:
                    6b:35:b6:c6:ff:7e:40:e3:b6:d0:ea:0b:ee:80:bb:
                    05:d3:01:15:8a:7a:9d:26:31:cd:78:cf:44:36:14:
                    9a:cd:78:49:0c:5f:fc:82:d8:bf:56:9f:55:a2:32:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:91:85:1F:FB:15:A7:6D:6E:91:E6:FD:66:BE:12:C4:29:15:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dcb402c-1be5-3c06-94ff-a756a77ec584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:30:6b:b6:22:c0:16:e5:49:69:67:b5:01:82:5f:ea:ca:
         51:d1:47:66:d6:3d:f6:d9:97:66:13:eb:b8:6f:05:18:9d:63:
         d9:e2:b4:8d:a5:c3:1f:f0:2e:c4:79:f4:39:e0:e3:78:94:d6:
         66:71:4f:57:a1:f9:d9:fd:24:cb:1c:4e:e6:1c:f6:ea:14:2a:
         c3:7d:e0:28:dd:81:bb:d9:66:23:bb:f0:bc:49:ba:77:3c:75:
         56:23:61:31:ab:e6:73:61:ab:ca:9d:b5:d8:4d:ee:b2:e3:b7:
         e4:38:64:9d:94:0b:e9:1f:2a:c3:48:af:30:3d:d6:01:0e:a9:
         d6:ba:75:b7:07:fd:32:a5:02:04:89:c0:b0:4d:c1:bd:ae:d4:
         77:02:5e:3f:84:b0:e2:ed:44:bd:95:89:10:32:b4:8e:0c:2c:
         8f:3e:5c:5a:ff:49:91:40:3d:1e:79:12:21:7f:db:a1:5f:91:
         55:52:b3:bf:52:26:8d:bc:12:1e:2e:da:29:24:68:13:de:31:
         db:f6:13:a4:21:62:66:26:e7:5d:e9:a1:40:16:f2:07:cd:0d:
         fe:82:a4:ef:5a:3b:8b:27:bd:8d:d2:e1:b4:40:10:06:54:bb:
         b6:3b:63:ff:3f:6e:18:eb:60:0b:da:13:8d:54:02:48:64:ee:
         10:e1:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:42 2026 by rpki-client