Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6973dbba-82e6-3bd8-8927-f90cba5ebda4.roa
File:                     6973dbba-82e6-3bd8-8927-f90cba5ebda4.roa (raw, json)
Hash identifier:          Cw7nFiR+C741Ld8hsdsTJy2eF+S+aQv2KzaTHv8d2ZU=
Subject key identifier:   20:06:6A:10:44:74:F2:94:82:B2:A0:AE:58:C2:F8:F5:84:6B:F6:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B8D234763F48F7AB783D9C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6973dbba-82e6-3bd8-8927-f90cba5ebda4.roa
Signing time:             Fri 02 May 2025 17:46:06 +0000
ROA not before:           Fri 02 May 2025 17:46:06 +0000
ROA not after:            Thu 31 Jul 2025 17:46:06 +0000
asID:                     401152
IP address blocks:        50.114.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:d2:34:76:3f:48:f7:ab:78:3d:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 17:46:06 2025 GMT
            Not After : Jul 31 17:46:06 2025 GMT
        Subject: CN=37f31d68-5507-4cfe-8e66-45ee1be4e9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:bc:d3:d6:12:be:35:42:bd:41:42:a2:af:
                    14:b6:06:e3:5b:93:8d:d8:7a:43:cb:01:d1:2c:1b:
                    7d:ce:36:d0:50:50:6e:9b:90:70:5a:d9:69:7d:df:
                    4c:1b:b4:ad:36:86:18:5a:76:58:8c:5d:0c:88:bb:
                    15:5f:73:a5:98:4a:4c:a7:40:1b:f8:a0:6c:a8:3e:
                    eb:11:46:bd:68:38:67:1c:41:45:26:a5:a3:17:57:
                    7b:eb:ed:fd:dc:43:e5:01:d8:bb:46:f6:1a:a1:5c:
                    6b:df:58:95:09:07:d1:1c:ce:34:e5:8d:3a:62:ce:
                    81:a5:d2:ad:56:6d:ec:dd:ac:11:ff:80:81:b0:c1:
                    c4:86:2d:91:49:30:03:af:a8:38:ba:d2:fb:e0:75:
                    91:18:39:3f:8f:06:df:da:f3:89:57:c8:00:37:fe:
                    35:11:90:1e:b0:f7:ef:87:29:9f:d2:33:f5:60:7b:
                    77:46:b3:41:bc:32:1b:bb:3f:17:a2:4b:7e:ad:7a:
                    d4:67:c9:1a:41:59:5a:65:cf:d8:1f:dc:5e:b3:ed:
                    8e:9b:37:e3:22:e5:33:48:e4:67:01:1c:5a:c6:64:
                    4e:b7:06:bc:93:e3:fc:80:ea:02:fe:20:db:61:4a:
                    4c:3c:27:60:2c:d0:93:53:d1:78:97:11:d2:43:52:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:6A:10:44:74:F2:94:82:B2:A0:AE:58:C2:F8:F5:84:6B:F6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6973dbba-82e6-3bd8-8927-f90cba5ebda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:bb:fa:c2:9f:7a:9a:f9:ec:82:2a:b8:4c:7b:c0:6c:8e:
         2a:72:d3:9e:64:2d:c6:a9:5c:d3:3b:09:62:e0:0e:fe:17:d0:
         cb:2a:53:18:0f:1c:9f:6f:78:25:67:95:66:e4:85:fe:d9:e6:
         7d:e2:bc:2d:7b:bc:d5:2b:e1:a3:76:67:26:51:bf:db:13:7e:
         ac:d6:07:08:61:4b:8b:87:54:9c:f7:9f:5a:0d:e4:0a:21:e1:
         a6:e5:a1:29:9f:da:ee:fa:2b:fc:b2:35:8e:c3:94:a0:d2:d4:
         23:2f:60:a0:1b:b7:f8:e5:3d:65:de:17:7c:24:39:76:b4:b4:
         5c:6d:75:c5:b9:1f:4d:73:38:15:08:de:b8:5b:81:73:84:00:
         26:61:7a:49:1f:28:46:b9:6e:ce:fd:60:e3:8f:1d:72:7c:fc:
         df:79:a1:ae:88:03:f2:66:ab:89:ad:bd:0b:bc:f4:ea:b8:32:
         05:05:00:fe:99:e0:2a:cb:31:aa:fe:c3:e8:33:2f:36:5c:6a:
         80:9e:24:5b:32:79:e0:6e:74:89:10:0b:af:04:eb:d9:7f:d7:
         dc:31:23:b5:c2:d9:20:6a:ce:48:3b:ed:a5:0e:f3:84:3d:51:
         0a:95:3a:1c:15:78:fe:6f:d4:41:08:74:fa:df:9a:e6:1e:94:
         35:1e:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:41:13 2025 by rpki-client