Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa
File:                     44202d1b-4106-365f-bce5-c7661759d1e9.roa (raw, json)
Hash identifier:          RVFE1Kk2w5pwDc3bDx/fFdyU6qQr66/WpgGJer1MrYI=
Subject key identifier:   75:7D:BA:45:CD:59:DD:0E:3D:2A:A2:3F:11:27:A0:52:7C:AD:B5:A6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6797FF6B63E48244813DD514
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        50.114.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ff:6b:63:e4:82:44:81:3d:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=726cebac-c50e-4945-bd0c-533a3d03c77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:d2:c1:0b:22:53:dd:e7:23:6d:a8:2a:eb:
                    2d:5c:60:f2:e2:d8:c7:fa:40:f6:6d:b0:5a:a5:af:
                    ac:d6:bf:38:4e:c4:3c:58:1d:a1:b1:bf:fc:12:61:
                    25:a6:2b:90:ee:a1:74:32:59:09:ed:dd:73:9e:07:
                    3f:1e:0e:21:d5:d7:57:71:a0:83:b4:b2:8c:f8:92:
                    ac:4e:bd:e3:80:8c:e1:d4:21:8f:b9:c2:e5:b5:0d:
                    9c:20:67:05:e1:bd:c7:89:6a:88:a5:3e:fa:9c:10:
                    85:7a:1d:60:af:f6:61:c9:b5:cf:4e:96:96:b5:d4:
                    2b:ca:93:10:d0:c4:bf:28:9b:e0:7e:5f:69:fe:66:
                    34:22:a3:89:53:3e:78:73:eb:ce:30:10:55:08:bc:
                    79:2f:ea:d1:3a:ae:13:23:9a:e3:49:f2:21:8a:cc:
                    8d:c4:19:e1:88:44:71:38:5d:98:12:80:41:28:1d:
                    6a:92:ba:55:c2:08:c8:80:a1:1d:69:0f:86:ff:4f:
                    66:f2:ce:19:ad:15:87:6e:0c:d7:63:8a:87:74:33:
                    a8:29:6a:85:7f:89:e2:69:45:ba:f7:90:5c:b9:1d:
                    87:a6:b0:c4:c5:c5:f6:1d:7c:4b:9d:08:dc:21:16:
                    f9:1b:6b:76:28:f6:14:88:1c:03:91:70:9d:1b:7b:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7D:BA:45:CD:59:DD:0E:3D:2A:A2:3F:11:27:A0:52:7C:AD:B5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:92:03:cd:4e:f8:0d:eb:df:a5:59:93:d5:2c:01:4e:ee:
         4c:6b:d0:19:ff:7f:cf:4a:5a:b4:1d:7a:75:64:5e:42:62:ac:
         76:87:23:18:09:16:a5:58:e3:86:8e:e9:88:28:d7:a4:24:6c:
         9e:f5:44:0f:14:33:12:27:3e:ad:4f:fd:57:76:e3:ce:ac:69:
         ed:d5:41:70:0b:18:61:79:9a:6c:73:83:00:4d:25:7b:01:84:
         81:60:81:10:2d:cc:6c:fa:0e:91:1c:14:30:ad:d5:74:cd:a6:
         16:6f:50:63:e5:43:e0:63:f1:3a:fc:02:08:79:67:28:e2:c6:
         e1:ef:25:d8:65:33:d3:a4:eb:2b:23:8f:72:bd:20:19:2e:c1:
         4e:9b:13:f5:3c:0b:e9:8e:b1:57:ae:f1:24:14:90:86:5f:53:
         5d:52:c4:c7:54:a6:fd:97:98:d2:10:42:45:58:a5:f9:ae:9b:
         25:bf:91:29:dc:3a:04:c6:9d:d6:57:7a:9e:ba:31:10:72:bb:
         e1:20:f2:2e:fd:23:9c:2f:09:d0:93:de:6e:e4:77:4d:d0:04:
         a3:e2:3a:bd:67:f3:5e:7c:b2:53:5f:fe:62:a1:24:5d:ed:8c:
         28:61:40:2d:b3:c5:96:11:3c:56:9d:77:0a:69:68:55:35:a8:
         c8:f6:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:28 2025 by rpki-client