Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410438ba-0174-346f-95ab-b49362f089e3.roa
File:                     410438ba-0174-346f-95ab-b49362f089e3.roa (raw, json)
Hash identifier:          WLMa7Q09azyY0LOmYIr+UxQKJCgykmXJ3qUcBs/joXM=
Subject key identifier:   17:CC:78:65:C7:25:5B:38:60:23:F7:E5:9D:BA:C9:34:92:10:D1:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AF289BFB28FA321CB7376A080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410438ba-0174-346f-95ab-b49362f089e3.roa
Signing time:             Sat 23 Aug 2025 02:43:56 +0000
ROA not before:           Sat 23 Aug 2025 02:43:56 +0000
ROA not after:            Fri 21 Nov 2025 03:43:56 +0000
asID:                     401152
IP address blocks:        50.114.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:89:bf:b2:8f:a3:21:cb:73:76:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 02:43:56 2025 GMT
            Not After : Nov 21 03:43:56 2025 GMT
        Subject: CN=3769d231-de6f-40c1-9e8a-7a8f2a639f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:03:f9:34:ab:7a:41:97:f7:0f:23:71:ea:
                    d7:07:d8:e4:63:ba:95:89:aa:4b:fb:68:df:a4:3f:
                    97:2d:a3:88:7c:59:0a:f9:50:4c:b8:ef:4a:f4:a2:
                    61:3b:01:73:26:e6:99:2a:b2:13:3f:ac:97:62:a6:
                    87:47:45:e5:b0:7e:ef:ee:c3:d8:32:06:82:b1:41:
                    69:fb:41:5c:83:f8:6e:e3:c7:ca:9e:3b:db:18:c6:
                    ed:27:c5:cb:05:d2:2f:60:0a:64:02:35:6a:48:95:
                    26:b4:28:b4:bc:bc:65:3a:fd:d6:0d:4a:a4:0b:b6:
                    05:6a:a6:e2:86:6d:f0:b3:db:6e:a4:b0:69:3a:9c:
                    82:84:0e:34:8b:44:9b:03:3d:ec:5d:e5:2f:98:62:
                    54:18:d1:da:82:54:71:28:e3:38:38:aa:f1:1d:44:
                    44:d6:49:12:fe:36:dc:93:fc:12:dc:f2:df:3b:a2:
                    6e:7b:fa:8c:bd:9a:c8:73:11:38:5f:cc:d7:40:1d:
                    13:15:d4:69:70:94:f0:90:89:4f:76:f0:cf:d1:95:
                    82:eb:da:ff:61:22:c9:e0:7f:6b:05:ba:42:cc:8d:
                    6e:8d:ad:ca:99:5b:28:3c:c0:7a:da:5b:0f:5d:7b:
                    3d:5c:fd:77:2c:e4:34:01:0f:54:cd:42:8b:71:ea:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:78:65:C7:25:5B:38:60:23:F7:E5:9D:BA:C9:34:92:10:D1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410438ba-0174-346f-95ab-b49362f089e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:5f:cf:2b:d7:6d:41:71:f6:df:ae:bd:82:50:52:c8:82:
         81:c9:d8:14:0d:7c:17:15:32:f7:0f:10:24:a9:ce:b8:69:1b:
         2f:85:c0:a7:13:52:29:c2:8e:d1:ae:22:3b:d1:5b:f9:cb:7d:
         09:c8:ba:c3:50:12:62:53:27:18:a9:a7:1a:08:b5:0e:8b:b7:
         87:27:e0:7e:64:8a:4f:3f:73:59:ec:47:c2:83:0e:14:36:08:
         4f:db:02:20:0b:1a:e9:20:28:09:67:b9:b5:48:cd:07:76:1b:
         0a:02:5a:ea:ea:e3:1d:23:c9:7d:f0:07:9f:37:83:ae:71:c8:
         7a:80:81:70:2f:a6:9f:8c:8f:e3:15:e9:87:ca:31:7b:1f:96:
         1b:5a:1d:31:4c:86:9f:94:b0:09:05:ca:8d:aa:d5:85:93:13:
         d5:ca:0d:f3:2d:86:ce:98:b9:d0:02:cf:13:91:ac:4c:5c:51:
         b3:e6:43:29:d1:2e:64:cb:4c:3a:3a:f8:18:d8:ab:ff:09:f8:
         cd:88:23:19:2a:5e:7c:58:b1:39:de:29:cf:fc:7b:01:c7:92:
         29:e7:64:9f:86:64:75:80:38:a5:f2:70:12:94:d4:4f:be:e2:
         b5:8e:01:95:bb:30:b8:34:6d:bd:26:58:cd:2e:fc:2a:b2:63:
         82:19:10:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryib+yj6Mhy3N2oIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDgyMzAyNDM1NloXDTI1MTEyMTAzNDM1NlowLzEtMCsGA1UEAxMk
Mzc2OWQyMzEtZGU2Zi00MGMxLTllOGEtN2E4ZjJhNjM5Zjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKkD+TSrekGX9w8jcerXB9jkY7qViapL+2jf
pD+XLaOIfFkK+VBMuO9K9KJhOwFzJuaZKrITP6yXYqaHR0XlsH7v7sPYMgaCsUFp
+0Fcg/hu48fKnjvbGMbtJ8XLBdIvYApkAjVqSJUmtCi0vLxlOv3WDUqkC7YFaqbi
hm3ws9tupLBpOpyChA40i0SbAz3sXeUvmGJUGNHaglRxKOM4OKrxHURE1kkS/jbc
k/wS3PLfO6Jue/qMvZrIcxE4X8zXQB0TFdRpcJTwkIlPdvDP0ZWC69r/YSLJ4H9r
BbpCzI1uja3KmVsoPMB62lsPXXs9XP13LOQ0AQ9UzUKLcepdywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfMeGXHJVs4YCP35Z26yTSSENGvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDEwNDM4YmEtMDE3NC0z
NDZmLTk1YWItYjQ5MzYyZjA4OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTsX88r121Bcfbfrr2CUFLIgoHJ2BQNfBcVMvcPECSpzrhpGy+FwKcT
UinCjtGuIjvRW/nLfQnIusNQEmJTJxippxoItQ6Lt4cn4H5kik8/c1nsR8KDDhQ2
CE/bAiALGukgKAlnubVIzQd2GwoCWurq4x0jyX3wB583g65xyHqAgXAvpp+Mj+MV
6YfKMXsflhtaHTFMhp+UsAkFyo2q1YWTE9XKDfMths6YudACzxORrExcUbPmQynR
LmTLTDo6+BjYq/8J+M2IIxkqXnxYsTneKc/8ewHHkinnZJ+GZHWAOKXycBKU1E++
4rWOAZW7MLg0bb0mWM0u/CqyY4IZEGo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:04 2025 by rpki-client