Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa
File:                     e018228d-818a-33ac-ab77-0fa9e7cdc102.roa (raw, json)
Hash identifier:          pZQhL3hYmS4tRRlQ7WCjFys5iTb9egXPCKSqbnEmczw=
Subject key identifier:   D2:68:48:60:23:EA:9F:3E:E0:8D:07:A4:D4:04:B0:A7:2E:B2:B0:99
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D0A77A8CC43BDC39344D164C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     399910
IP address blocks:        66.96.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a8:cc:43:bd:c3:93:44:d1:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=84008f59-c89a-43db-abb7-6fe46ddd3b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:c0:3e:41:b1:79:32:76:7f:15:e4:ff:7f:
                    2a:b1:43:8b:58:fa:89:a9:26:51:91:77:ea:16:d3:
                    cd:3d:b7:4d:4a:dd:c3:1f:73:bd:1a:fc:1a:f4:57:
                    c2:46:80:f7:76:f2:f4:48:af:3b:0a:6f:ae:87:a9:
                    67:9b:09:f6:66:3a:22:98:18:d0:e2:72:18:5a:ae:
                    a1:22:62:ae:aa:37:88:56:9e:11:3b:b6:db:7d:0d:
                    ab:7c:32:4d:b2:40:5a:b4:d7:f0:62:87:30:93:9b:
                    f4:d2:a8:02:da:5d:03:e5:fa:2f:5b:c7:5b:04:fa:
                    73:cd:23:b8:a6:79:55:d5:85:75:2e:f5:ec:22:f0:
                    5f:fa:5f:57:1e:cf:56:b8:84:20:e9:06:81:7f:a4:
                    82:e0:de:4f:cd:64:ea:db:1b:f6:de:13:64:5f:70:
                    3c:df:bd:62:a1:04:11:0c:d4:02:1f:ee:26:7d:9c:
                    44:eb:52:f2:e7:8f:be:79:6a:0a:9d:07:37:2d:79:
                    5a:5a:48:f9:77:9c:bf:e4:21:24:d5:31:88:bb:34:
                    cf:7b:b4:77:41:ef:38:40:8d:75:bd:f4:ac:dd:6b:
                    17:63:d7:4f:6e:96:29:f9:74:da:9c:b4:95:93:1d:
                    40:cd:3c:41:d1:1d:69:77:b9:37:aa:92:0a:62:46:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:68:48:60:23:EA:9F:3E:E0:8D:07:A4:D4:04:B0:A7:2E:B2:B0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:c4:b1:c7:12:1e:56:71:db:26:b7:1e:f8:70:a8:59:ea:
         f6:e9:29:bc:83:21:a4:ac:01:82:d2:fb:13:df:a7:b1:e8:05:
         2e:dc:94:a7:6e:b0:4e:b1:f1:b4:cd:cf:90:22:91:55:41:38:
         1a:46:9c:02:77:ae:a0:28:65:c5:3e:d0:6c:12:15:ae:a3:b7:
         9b:fc:c7:d9:5e:d7:3f:3d:1a:dc:29:87:48:87:35:e6:ce:15:
         ed:eb:01:be:f1:50:a4:45:39:50:58:87:dd:17:2b:0d:7a:2e:
         3d:b0:03:4c:6b:1d:33:37:98:67:1e:3a:1e:67:f4:7e:64:cf:
         9d:82:8c:4c:db:d6:2e:cb:61:dc:3a:ed:07:f5:f5:73:bb:d9:
         c5:b7:b2:1c:f5:74:a2:60:eb:e9:d0:1b:af:a1:a7:23:3d:d9:
         e3:cf:d0:5e:34:5b:81:53:c6:1c:55:24:ba:8d:0f:80:b5:2a:
         e5:b3:8c:3e:bc:db:74:ca:76:5d:a5:c3:81:7b:5a:b6:92:78:
         2e:01:fa:e6:bf:c8:cb:b9:a9:31:26:f3:0e:e7:34:d4:c1:cb:
         84:91:eb:b5:dd:6f:9e:9f:51:0d:2b:97:33:0f:4e:19:ed:ac:
         08:d7:16:98:a6:3c:39:86:ee:88:87:f3:37:2a:df:9d:df:14:
         89:0e:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:09 2026 by rpki-client