Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/50ecd60f-7748-3521-8da3-5a4049fd1fdb.roa
File:                     50ecd60f-7748-3521-8da3-5a4049fd1fdb.roa (raw, json)
Hash identifier:          G1Y5A6GZSdky317Sk2JpNGVjwQ9dCTvUhwX8KaoMwN0=
Subject key identifier:   20:4D:86:EC:E7:35:61:DB:F6:B8:B7:BA:67:94:73:76:6F:BB:F4:2B
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584D44FA727D758C9720362C6D00
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/50ecd60f-7748-3521-8da3-5a4049fd1fdb.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     401319
IP address blocks:        66.51.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:72:7d:75:8c:97:20:36:2c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=1bd24afb-a000-40e7-8396-ac413c6549ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:43:31:63:c4:f6:cb:4b:b8:02:56:7f:9d:
                    8c:c3:b5:d9:2f:88:49:df:a7:ed:62:f4:33:34:9e:
                    9b:e7:1d:67:2d:02:d6:1f:2d:1e:2b:20:e7:da:63:
                    76:9a:94:1a:4c:ef:14:de:31:0a:28:d4:7b:4f:07:
                    da:3c:dd:a0:2d:62:6d:b7:82:cf:23:3a:f8:74:f2:
                    66:8a:da:25:4b:c0:0b:dd:3d:16:f3:94:ba:9f:4c:
                    e4:96:95:c6:2f:75:46:01:2c:ef:be:77:72:e0:2a:
                    62:76:ff:22:9f:31:47:19:65:5b:2b:a0:aa:5d:c9:
                    47:c4:06:a3:a3:0c:b2:94:8f:6c:35:8c:f2:fa:fd:
                    26:e9:15:42:4f:89:0e:eb:b6:e3:ab:84:5b:00:89:
                    29:46:a6:70:aa:7a:34:12:f6:40:30:d0:a5:8a:b7:
                    a0:07:71:c2:5e:d9:bc:30:d3:13:25:4d:80:69:ce:
                    01:f9:df:7d:3a:2d:94:32:ca:05:db:72:4e:0f:8e:
                    74:28:4e:bf:18:f2:84:b9:37:80:26:6e:94:30:c1:
                    5a:72:11:4b:9e:9b:01:79:13:f3:93:c0:eb:5f:c8:
                    8a:c7:51:80:be:da:b0:07:b2:29:05:4f:ca:a9:fb:
                    62:eb:be:b2:c9:b7:fb:53:79:d9:13:3c:e0:0e:c5:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:86:EC:E7:35:61:DB:F6:B8:B7:BA:67:94:73:76:6F:BB:F4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/50ecd60f-7748-3521-8da3-5a4049fd1fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:c5:48:92:a9:cb:13:99:ec:b7:0e:ce:26:91:12:21:b1:
         54:b9:4c:fb:48:5f:67:ac:07:3f:66:8c:06:30:6d:b8:c7:e7:
         13:04:6f:c8:ab:3a:70:36:1d:dc:9f:87:18:61:9a:9e:6e:e6:
         d8:41:9a:4f:e1:17:3c:e6:a1:6b:b5:90:6f:90:9b:ca:40:0a:
         b4:88:c2:b0:b7:44:00:24:0a:58:ba:da:42:ad:f4:d0:b6:36:
         53:e4:6c:b1:b9:c9:ed:89:31:b1:cb:e3:6e:ff:8a:52:84:1b:
         b3:bf:ad:47:9b:06:f3:6e:6a:32:f7:3f:be:93:82:56:5c:65:
         7b:e0:96:8f:9f:70:ad:11:65:18:dc:89:87:7e:55:fa:55:fc:
         44:99:91:d4:eb:9c:ea:cf:b4:2e:a7:60:a7:42:3f:61:8a:47:
         33:9f:c9:47:ea:c5:02:47:ad:f6:2d:fe:d1:f5:07:86:0c:df:
         84:42:15:94:94:49:8a:8c:48:60:84:2f:66:36:01:a2:82:f5:
         f4:71:6e:ba:7d:e1:de:01:de:07:26:fb:e0:22:04:97:6a:77:
         1b:ab:63:23:22:da:c5:1b:3f:a1:db:a7:40:7d:08:a6:a3:34:
         87:d2:8b:fc:fe:ec:8f:03:4d:35:93:bf:3b:da:ee:8a:56:55:
         df:f9:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:17 2026 by rpki-client