Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69c35355-5e61-375b-b391-d6cae0ec645b.roa
File:                     69c35355-5e61-375b-b391-d6cae0ec645b.roa (raw, json)
Hash identifier:          EjtO/DDV6ZHfZLHTOEzG+KzSddxPp4Ee2a6XXMA5eQI=
Subject key identifier:   32:BB:A5:78:B2:6A:47:52:AD:DA:81:39:EB:A1:FA:56:2C:BA:9F:FA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B92DD420222BECFB44F4A5E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69c35355-5e61-375b-b391-d6cae0ec645b.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     58061
IP address blocks:        50.114.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:42:02:22:be:cf:b4:4f:4a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=a07f8a2e-db87-4903-8bbb-94713f7554b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:dc:8d:0b:e7:0f:a5:0a:1e:6a:bb:e4:9c:
                    3a:e1:60:b4:23:83:90:48:c3:57:84:80:e8:05:40:
                    8e:32:f4:f1:de:fb:8c:60:cd:4e:45:f9:83:a2:c4:
                    d9:0f:49:2a:dc:98:e7:dc:e8:cf:b2:9b:d6:f7:d2:
                    0c:a5:4b:c5:01:93:66:41:13:91:3e:41:67:47:1d:
                    80:4f:1f:1b:2b:02:cb:a2:7e:bd:ae:5e:3a:57:19:
                    f7:a5:40:b2:17:22:cb:5a:02:78:76:07:75:82:91:
                    ca:7f:ba:03:61:6f:03:ba:7f:4b:f8:c7:07:c1:1e:
                    35:6e:0d:36:d1:35:d4:af:a8:d1:4c:dc:ac:2c:84:
                    ef:6e:ed:ed:44:de:c4:00:ed:4d:72:59:7c:e2:6f:
                    24:95:51:24:a3:c7:30:02:c5:5f:f1:77:b1:eb:dd:
                    46:64:b4:66:14:c4:4f:d9:b7:bf:59:5c:3a:7d:00:
                    4d:f5:e4:32:7a:c5:cf:d0:fb:67:ec:05:6e:e5:c3:
                    38:f4:cb:e3:80:e2:b6:2d:e5:4c:0b:ba:d1:8d:b9:
                    d1:e4:01:8c:4e:ab:46:47:ac:49:c1:86:5b:9b:1d:
                    60:86:9b:46:ab:5c:d2:a1:55:c7:cc:bc:23:12:e2:
                    da:b0:cb:9d:fb:bc:28:7b:d8:04:0e:9b:d8:6e:42:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BB:A5:78:B2:6A:47:52:AD:DA:81:39:EB:A1:FA:56:2C:BA:9F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69c35355-5e61-375b-b391-d6cae0ec645b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:41:46:c0:13:27:ab:f4:28:5f:a0:f1:bf:a5:d9:ac:45:
         f7:92:27:36:a3:40:11:ce:c5:7f:4c:fe:8e:aa:c9:1f:06:5a:
         3e:c5:80:32:6a:ad:2a:18:93:f2:d9:b5:c4:b4:6c:45:bf:d1:
         23:6e:5a:c5:53:36:fc:00:07:53:86:f6:db:85:97:f7:9a:6e:
         4e:72:a9:50:76:a1:68:c8:c7:b5:ef:c1:89:b0:f0:0d:8b:89:
         ad:39:b0:ae:dc:1a:12:a0:ac:37:6d:4f:21:40:f7:8f:10:93:
         af:ba:1d:b8:a9:27:1f:e5:b3:38:b1:77:32:92:67:fa:7b:c8:
         11:f6:98:4b:9c:5c:d3:b2:a3:27:49:65:b0:cd:42:dc:14:c9:
         65:11:35:1c:eb:8e:e9:5c:e7:b9:69:df:b4:e4:71:25:9c:f8:
         6d:96:6e:a7:09:a4:26:30:89:4a:d1:33:d5:f8:70:fd:75:ce:
         b1:33:fe:c8:1d:b7:d6:b9:f9:6e:55:4a:bf:37:31:fb:7e:c4:
         76:41:0e:ed:b4:d4:eb:17:ad:3f:62:0b:03:18:a5:57:96:38:
         a8:1d:77:97:43:b4:09:83:53:5d:e3:c4:b4:a3:8b:9b:bc:f6:
         12:c4:09:dc:75:c2:02:53:a4:74:7e:b8:52:64:ba:17:b2:e5:
         94:78:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:48 2025 by rpki-client