Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e0402ab-e575-3c01-934b-733cf95f039c.roa
File:                     1e0402ab-e575-3c01-934b-733cf95f039c.roa (raw, json)
Hash identifier:          gRHLnEcgBzoLrwK2bqrMD/usYVtnhb+H9MSBVkyGqv0=
Subject key identifier:   53:19:5E:80:F6:1D:3E:1D:9E:88:EC:59:18:CC:35:77:60:39:AE:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849C4D4CE842450036BC6D027C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e0402ab-e575-3c01-934b-733cf95f039c.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        50.114.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:ce:84:24:50:03:6b:c6:d0:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=d76e7c05-5298-4609-a8b9-5c385a392da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:d4:f6:fb:5f:46:cb:3b:46:9c:9e:6d:8c:
                    14:56:4f:e8:b0:31:a0:43:25:e7:1b:1b:da:0f:91:
                    cb:af:b9:61:7b:04:fd:03:d5:b5:45:5a:92:55:0a:
                    fd:b7:9b:c0:9f:53:ab:03:9e:9b:70:bb:b0:69:50:
                    98:33:e1:52:37:25:b1:93:29:59:58:55:b2:0c:57:
                    4c:0c:fc:64:bc:9b:b4:84:96:c2:31:8a:c4:59:5c:
                    d8:eb:20:a6:71:8c:c7:10:53:4a:0e:f8:f1:05:70:
                    c1:02:75:58:36:81:4f:06:4b:e6:2a:ca:1a:7d:4b:
                    f1:3c:b0:ab:30:31:46:48:a8:c3:e8:dc:fb:12:95:
                    59:2b:4b:dc:ad:a2:37:a0:e7:ad:c8:ea:64:93:71:
                    1f:93:25:b6:e3:d6:7e:a6:f3:30:71:05:f9:36:05:
                    f2:4e:79:24:17:c5:5f:1e:fb:1f:17:ec:be:ec:a5:
                    46:e9:fb:89:90:6f:bb:69:3a:1d:c0:9c:e4:30:05:
                    92:08:2c:82:04:b5:22:b2:91:d0:73:11:8b:ff:c0:
                    69:1b:2e:d3:9a:dc:1a:b9:3b:a8:45:0b:6f:6f:d7:
                    cc:91:16:69:dc:ad:b4:2e:b2:fc:8f:81:c8:28:81:
                    5a:23:a8:7f:cf:c8:8a:91:6c:d2:6f:aa:1d:de:88:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:5E:80:F6:1D:3E:1D:9E:88:EC:59:18:CC:35:77:60:39:AE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e0402ab-e575-3c01-934b-733cf95f039c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:a0:9c:b5:21:91:f1:1e:9e:bc:da:f9:90:9a:09:7d:9c:
         3c:aa:f6:4e:7f:90:f6:63:56:bc:b6:cc:35:7d:4f:80:cb:6f:
         ce:6b:fa:2b:a2:22:e8:59:a3:18:f7:4a:4e:9e:2a:c0:9d:47:
         6c:28:1c:9f:6d:e5:48:9c:df:fd:f7:59:a7:50:35:32:22:11:
         a2:6b:1f:10:86:c9:e0:47:22:ec:cb:c4:07:0b:1d:eb:52:fe:
         3b:b4:24:5d:7c:20:42:37:b4:ee:e2:84:ad:a8:95:fa:f9:14:
         98:d1:2e:ae:3b:61:d8:d8:54:af:36:53:b2:22:22:cd:bb:63:
         38:ee:b0:00:3f:8c:25:29:3e:0d:ec:cf:c1:29:5d:3b:2f:58:
         de:8e:f2:6a:5e:0e:fa:7b:f0:0d:2e:7b:ee:20:d8:7e:6f:05:
         e2:6c:2e:c3:28:f2:73:d6:4f:dc:09:44:b3:c6:72:e1:f5:c9:
         8d:e8:9e:58:c0:a9:51:53:4f:63:1f:94:36:b4:11:9a:cd:24:
         85:cc:ab:17:b0:42:e2:08:bc:dc:54:c4:59:d2:65:52:48:83:
         17:b6:72:59:8e:c1:44:7d:67:af:96:54:ce:c3:19:4e:39:60:
         3d:94:f1:f3:3c:37:a8:19:0c:3c:a5:65:83:1f:c6:2b:e6:88:
         3e:de:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:56:36 2025 by rpki-client