Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64250650-fca4-3dae-a56d-2df3c5429a58.roa
File:                     64250650-fca4-3dae-a56d-2df3c5429a58.roa (raw, json)
Hash identifier:          cKQmWH2mEHkEXYt7hVIk1FB8vJ7BwcSjx5ECP4E0Vzo=
Subject key identifier:   A9:AB:FE:6F:03:0B:8E:5F:BD:80:88:D0:A1:FA:30:A7:16:9D:1D:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D3E00085FE1876FB23E77DD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64250650-fca4-3dae-a56d-2df3c5429a58.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     26548
IP address blocks:        50.114.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:08:5f:e1:87:6f:b2:3e:77:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=05d44a11-26ac-403c-8bb3-94ada02f3974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:13:f4:27:b3:2e:56:b3:df:57:66:19:a4:
                    f9:d0:2d:43:1c:df:1c:09:d0:a4:de:23:35:02:93:
                    eb:1f:6d:cb:6e:e3:a5:36:b8:e4:f5:f3:b3:2f:51:
                    d5:d2:18:8a:68:48:0c:54:a0:b5:a0:55:b0:70:1f:
                    a0:db:44:67:cd:93:c6:2b:ef:9a:d5:18:f1:66:f2:
                    10:27:66:03:6c:1c:73:cf:41:8d:e1:67:dc:ba:0d:
                    b5:d7:7b:5c:46:9b:d9:82:74:ba:a4:c5:98:8e:21:
                    8b:c0:c0:83:1c:c8:36:7b:f0:e7:fa:3d:a4:40:81:
                    e9:a1:a1:ea:86:56:2c:12:a7:67:53:82:90:b4:a8:
                    ee:15:fc:2b:73:f0:4e:47:8d:01:bb:55:d9:13:36:
                    c9:10:74:67:1f:2b:64:8c:c8:1b:59:3d:a9:fd:b8:
                    47:8a:cc:91:61:47:42:c4:cd:71:2e:a3:50:7c:1c:
                    fa:30:8d:4a:dd:d7:e0:e9:32:cc:99:49:21:10:31:
                    42:b0:8e:04:6d:88:4c:ab:63:83:eb:77:b5:a1:7d:
                    f3:18:c2:a4:04:66:c1:a7:02:17:d0:06:87:ae:62:
                    39:29:d9:01:07:99:5c:6e:3b:77:ac:80:d2:22:2e:
                    11:25:e6:d2:d7:77:31:dc:96:c5:22:51:8f:6b:9c:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:FE:6F:03:0B:8E:5F:BD:80:88:D0:A1:FA:30:A7:16:9D:1D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64250650-fca4-3dae-a56d-2df3c5429a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:7d:d5:ca:7a:aa:68:6d:2f:fd:0f:0a:cf:92:51:99:3d:
         df:20:a4:2e:3b:60:d2:d2:46:e8:9a:b7:b9:78:7a:6b:25:a9:
         ab:1a:cf:13:c3:b1:34:a2:ad:f9:17:c1:da:43:61:d7:0a:af:
         2e:62:22:59:a8:e7:62:47:69:27:87:06:96:7d:2e:35:36:6b:
         d4:a8:87:62:69:83:6b:e1:20:70:53:12:7e:32:52:80:ea:dc:
         c0:f9:66:3f:9f:1f:a7:88:17:41:89:23:18:7d:29:01:72:41:
         27:3f:0a:a3:62:9f:33:0d:8d:41:7c:2a:25:53:d9:eb:09:8b:
         57:fd:e8:1e:d2:c3:94:66:e9:4a:39:d3:e1:08:89:54:fd:15:
         e7:33:ce:2c:3b:4b:73:e9:62:b1:86:56:24:74:e7:62:05:2e:
         05:65:87:bf:b1:0e:94:8c:03:9e:76:04:54:bc:68:4c:d4:3d:
         af:c7:1b:91:cf:63:b1:b4:ff:fa:dc:fc:8a:f0:b3:b0:72:8a:
         88:12:39:a1:67:64:67:f5:ad:cc:f2:8d:a3:ad:b7:f0:c1:c5:
         81:79:fa:20:70:3b:f5:ef:2d:36:e0:32:00:3e:46:1b:7a:49:
         b3:a1:30:ea:64:80:b8:a1:8b:c7:8c:d6:00:a9:d8:cf:01:25:
         d8:4a:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:35 2026 by rpki-client