Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4134602b-0c21-3093-a97b-5b73881c7c72.roa
File:                     4134602b-0c21-3093-a97b-5b73881c7c72.roa (raw, json)
Hash identifier:          gXmVMCGJdAC7labLBE2WGwAKaS2HYGP/rDrnjH9tR5A=
Subject key identifier:   EF:72:19:7F:EB:67:69:5D:1F:B5:BA:9C:49:71:EC:6B:F4:05:CB:C0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A2C2026BF6A6ACB130AAE25A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4134602b-0c21-3093-a97b-5b73881c7c72.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     395898
IP address blocks:        50.114.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:26:bf:6a:6a:cb:13:0a:ae:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=bca8958e-24a4-4b48-8ee4-46f5a7420a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:82:b7:cb:d3:9b:41:21:d9:0f:21:d9:58:
                    b5:d8:1f:2c:08:d5:9d:74:b5:30:a2:ae:56:63:22:
                    e6:63:bc:f5:f7:2c:0d:c7:84:90:4c:a8:ea:1d:35:
                    3f:71:ac:1c:1f:07:7f:2f:46:45:d1:3d:e9:0d:1e:
                    cc:35:f5:0d:e8:2f:65:6f:fb:b9:55:47:cd:5a:0e:
                    19:78:a3:43:03:53:a6:4e:33:5e:a1:39:f5:94:7b:
                    07:5b:fd:e7:06:76:36:bd:40:4a:43:6c:67:91:7f:
                    81:cf:5a:99:21:99:cf:d3:f1:d2:d4:bf:a7:e5:24:
                    f2:ac:85:81:f0:25:04:70:db:ab:41:23:24:09:8d:
                    c7:cf:8f:a1:ce:8b:9f:51:b3:b9:3d:b3:c0:a2:63:
                    e5:4d:5f:c9:03:1e:26:7b:87:6d:75:e8:88:28:40:
                    73:2f:e5:39:03:86:f2:7b:1d:17:36:7f:38:c4:e3:
                    28:aa:ce:c3:3c:f5:cb:d8:b0:50:59:ea:76:27:b1:
                    9d:a7:bb:0b:c2:73:d7:b3:4e:93:c7:9d:8b:ad:07:
                    15:ff:17:93:15:05:b6:f5:e4:59:83:60:7c:cc:15:
                    bc:dc:bc:3a:52:95:e8:16:dc:f2:df:14:c8:a8:f6:
                    59:3a:ff:e6:64:64:10:e9:37:bf:ba:e9:5d:eb:00:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:19:7F:EB:67:69:5D:1F:B5:BA:9C:49:71:EC:6B:F4:05:CB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4134602b-0c21-3093-a97b-5b73881c7c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:c5:1e:b1:04:c0:49:9d:40:55:d8:6e:55:61:e9:ad:54:
         a8:43:d4:1b:de:cf:17:fc:3c:98:5f:64:c4:f6:0a:28:72:2a:
         d8:24:4e:aa:c4:7b:2c:c2:5d:89:07:21:d4:26:a2:bd:fa:15:
         96:a3:8e:73:cc:20:ff:8d:db:00:3a:b2:51:37:48:fb:8f:2c:
         6c:05:20:77:da:93:37:98:f4:0a:d2:41:e1:8a:c6:d0:d2:b4:
         a8:19:c5:fa:f6:aa:f9:ef:b7:68:8b:de:f9:97:22:f0:08:54:
         45:a1:51:19:b4:64:10:fc:1d:f6:19:1b:3c:19:60:57:07:65:
         41:d5:e6:85:8c:74:53:cd:c6:1f:24:17:71:00:c5:d0:f0:7a:
         0c:1d:4a:b7:5a:95:b6:96:ad:99:6c:96:15:a8:09:2c:20:4e:
         f0:55:c8:53:e4:fa:d6:9a:a9:76:cf:74:08:56:93:36:bf:48:
         56:61:14:b5:60:b0:2f:ca:2b:cb:c5:dc:8d:03:8c:ba:ff:c0:
         e1:24:41:69:f4:05:66:94:e7:12:37:80:a3:a4:e7:50:c5:f4:
         dd:d4:55:68:3b:e1:40:34:68:85:2e:95:97:0c:d2:60:04:ed:
         f9:7c:e3:0a:e5:15:2b:8f:3e:25:58:f5:ee:12:12:33:57:03:
         7c:04:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:16:31 2025 by rpki-client