Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b5afcf7-36c9-3439-ad22-0738911d1845.roa
File:                     0b5afcf7-36c9-3439-ad22-0738911d1845.roa (raw, json)
Hash identifier:          4WGxH3Yrm5MOinZZ8GuQi25MqeKReJ6SVBUiMEw08Gs=
Subject key identifier:   4C:C2:39:BC:7E:15:80:E7:83:8D:27:77:CB:50:5B:AB:90:F4:40:31
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6245025D4BD02F73AFB7B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b5afcf7-36c9-3439-ad22-0738911d1845.roa
Signing time:             Thu 01 May 2025 18:44:07 +0000
ROA not before:           Thu 01 May 2025 18:44:07 +0000
ROA not after:            Wed 30 Jul 2025 18:44:07 +0000
asID:                     401152
IP address blocks:        50.114.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:24:50:25:d4:bd:02:f7:3a:fb:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 18:44:07 2025 GMT
            Not After : Jul 30 18:44:07 2025 GMT
        Subject: CN=0192f97d-2ff9-47e8-8850-a3a44df210fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:d4:61:01:9c:81:65:c3:97:dc:e2:85:a4:
                    28:a0:c1:a7:49:e3:47:56:46:4c:6f:d3:07:cc:df:
                    72:41:ce:3c:33:63:06:99:47:d6:ca:c0:83:56:07:
                    65:16:a7:41:21:0d:ca:7b:10:b7:98:43:8d:77:62:
                    22:fa:07:ed:07:6e:b9:c9:fd:ce:44:0e:41:7f:16:
                    3c:c6:62:a1:d9:81:a6:e8:79:da:c0:e0:25:73:30:
                    d3:56:ad:72:3e:89:e5:d8:a0:f4:1b:2f:2e:f5:fd:
                    72:f0:03:a7:70:ee:01:37:af:83:6e:10:4a:08:98:
                    f4:f7:71:64:59:8a:3b:41:71:ee:13:9c:08:42:a7:
                    86:f4:f6:4a:c9:3c:31:75:36:d1:81:f3:8e:2b:5e:
                    3a:e3:3a:ab:0a:2d:8e:33:1d:8e:a6:38:b2:1d:6e:
                    5e:13:23:ef:4d:50:6b:d5:9a:f6:37:2d:4d:81:e2:
                    f9:b8:16:37:76:a1:d3:60:97:78:3f:ab:a7:79:1f:
                    ef:16:36:bb:79:46:58:cf:43:fe:d0:be:8b:b0:81:
                    f2:fe:fe:a4:44:d4:9a:07:d8:2a:f4:90:34:25:50:
                    e4:5f:35:fd:e6:17:44:2e:9c:69:94:45:1b:ba:80:
                    ac:c1:aa:6b:3e:73:a5:87:9f:22:c5:2c:74:8d:ec:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C2:39:BC:7E:15:80:E7:83:8D:27:77:CB:50:5B:AB:90:F4:40:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b5afcf7-36c9-3439-ad22-0738911d1845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:57:a5:9b:d0:95:d1:32:28:bd:4f:05:ac:1f:e3:32:6b:
         c1:6e:3a:a1:70:ce:21:1b:2f:27:96:df:76:51:39:11:80:be:
         4d:34:2e:7e:23:4b:43:2a:af:63:34:ed:33:c6:a6:ab:92:ec:
         d8:84:60:a5:75:27:fa:a2:82:ea:13:d2:eb:22:04:d5:cf:ef:
         4f:34:ed:29:49:95:a9:b9:39:f5:60:65:6a:bb:f9:98:c5:60:
         5c:dd:be:6f:00:44:96:ba:c5:de:73:2f:56:60:6d:27:dd:88:
         d7:8c:86:50:0c:8b:8b:8f:b2:fb:98:5c:be:20:ab:af:58:70:
         ed:f8:cd:c6:92:a5:f6:c2:b2:59:0c:d3:ff:76:2c:d6:26:45:
         a4:a3:2f:9a:d6:64:73:df:cd:ca:69:ce:1e:e2:80:4d:5a:5c:
         69:8f:04:f7:39:5d:29:34:59:db:3f:f1:97:7d:b9:f5:a7:f9:
         bc:bd:82:9b:1c:f3:90:71:87:61:dc:a2:a2:05:dd:e5:a6:f0:
         f8:e9:0f:74:89:3b:0b:bf:c5:d2:e8:d7:b2:a8:0c:3a:2d:f4:
         9a:74:c8:65:42:df:61:3d:52:93:b0:c6:d7:99:de:5f:1c:66:
         bc:11:d4:a6:a8:d8:75:37:51:9f:12:0d:d4:44:6e:22:63:cd:
         fc:1c:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:02 2025 by rpki-client