Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cdc4267-e926-31f5-ab34-fc5e54bd8c94.roa
File:                     5cdc4267-e926-31f5-ab34-fc5e54bd8c94.roa (raw, json)
Hash identifier:          9YFEUkuDPWPHBNZMtmpiuT5HxCrnDiTUCKBt+WdBa5w=
Subject key identifier:   B1:32:15:7E:1C:5E:FA:A9:C0:19:94:61:BC:BC:CE:0D:84:20:E7:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECC1AEF8EBC5F735ED6380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cdc4267-e926-31f5-ab34-fc5e54bd8c94.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     26548
IP address blocks:        50.114.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c1:ae:f8:eb:c5:f7:35:ed:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=82bf8c5b-f2c6-49bb-9d2e-3b456e65a1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:c1:63:f7:5f:8f:23:61:27:ef:04:f8:87:
                    41:52:94:92:f1:82:30:9d:4a:07:36:12:0a:23:bd:
                    9e:14:ae:af:b5:0f:7a:af:20:07:5f:a9:28:63:65:
                    74:76:3d:3a:4f:6e:10:71:91:a6:55:cc:b7:c8:a2:
                    5c:4c:cf:69:64:63:e6:81:42:44:ed:c0:47:42:fb:
                    2d:c7:66:e0:0e:e7:49:95:bb:b6:5d:11:f8:a2:5a:
                    a4:4e:48:0a:56:fb:04:0f:6b:bf:2d:17:9e:97:ba:
                    70:c6:ae:8d:ae:6e:4e:a9:fa:36:81:74:29:42:0d:
                    f9:e8:4e:a1:8c:11:c1:6f:a5:84:f9:b3:15:b5:12:
                    8e:56:4e:1d:85:63:8a:38:09:ef:e7:74:d5:62:60:
                    b6:ac:d2:c6:6f:4a:c9:86:dd:54:54:bf:ac:a7:2a:
                    d2:c0:fc:83:a2:ef:bd:fa:68:8a:d7:23:fb:41:68:
                    25:3b:f7:99:2a:c9:12:7e:60:48:1b:e7:4c:44:d7:
                    c8:3f:45:e7:18:c1:4e:fe:50:fe:76:5c:f3:7e:dc:
                    1c:c3:ef:b8:d8:8c:e9:df:67:4a:71:19:13:dd:91:
                    e1:29:52:94:cf:b1:ef:ca:c6:1d:bd:8d:38:d3:60:
                    db:5c:66:93:83:28:81:02:cf:60:c6:80:84:66:ea:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:32:15:7E:1C:5E:FA:A9:C0:19:94:61:BC:BC:CE:0D:84:20:E7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cdc4267-e926-31f5-ab34-fc5e54bd8c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:36:60:d2:31:ac:83:93:9a:60:ee:82:2a:0c:d7:a6:6b:
         03:df:4b:42:5f:65:3e:3b:35:7e:ff:1c:83:84:14:97:ef:e9:
         62:05:3d:5c:4b:c9:71:54:69:8c:14:e2:a8:2f:1f:53:a2:24:
         c7:ff:75:99:46:47:b6:a1:96:df:fd:32:85:22:a0:b3:19:ff:
         a5:2e:73:67:d1:ab:04:05:d1:e0:18:7b:17:b2:74:04:6a:bf:
         24:49:78:d0:7c:bd:bd:f1:66:dc:98:df:d6:4d:d5:9d:67:36:
         9b:3a:6c:be:bc:37:c3:f1:5b:2b:7b:25:a0:77:e8:8f:6c:0a:
         84:5c:18:2a:93:55:a0:3f:5a:c1:fd:01:a6:70:a5:3b:4b:75:
         60:b1:1f:f5:e0:fc:00:36:b3:f7:d0:df:0d:f2:7c:9c:79:6a:
         72:2c:74:e2:00:e2:73:b1:0b:97:b8:83:2f:2d:52:63:f4:ee:
         3f:d5:a1:5b:5e:e8:4c:cd:79:a8:2b:5c:23:aa:91:c5:71:cf:
         42:6c:54:4c:5b:96:b4:52:e5:64:e6:9f:f9:bc:37:82:5f:b8:
         fd:8b:87:ef:0b:7d:39:fe:15:4b:24:91:8a:3d:2e:19:6c:27:
         ca:3a:a2:d6:b2:e1:78:96:39:12:09:f3:30:5d:22:c5:e9:2f:
         e2:0f:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:05 2025 by rpki-client