Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72052f3d-93e2-335b-8ac2-882370ab6e3b.roa
File:                     72052f3d-93e2-335b-8ac2-882370ab6e3b.roa (raw, json)
Hash identifier:          yJwa2zuENQnZebJqsZ54cQSYJj5PdF2ABHbAnuHuPCw=
Subject key identifier:   1C:D3:77:C9:92:2E:48:C7:4E:BF:81:B7:1A:2D:5C:12:F7:CD:95:58
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6797FFE9285DF9E19343AAA4
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72052f3d-93e2-335b-8ac2-882370ab6e3b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        50.114.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ff:e9:28:5d:f9:e1:93:43:aa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=7b217419-4a6e-4cd2-a269-da5adbe2314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:ae:c0:6b:4f:42:32:ff:16:62:41:c5:b4:
                    1b:29:4c:e3:9d:87:dd:4a:91:47:e4:20:b6:77:70:
                    cc:82:29:b8:c6:0f:80:c8:a6:cf:8c:35:fe:ad:de:
                    fa:4e:84:ad:45:b8:b8:8d:cd:7c:33:0e:01:2f:6f:
                    6d:16:9f:18:ac:20:6a:58:cd:b7:21:2e:10:fa:c6:
                    b1:4d:64:bd:2d:d2:40:2d:46:05:a6:0f:6d:10:56:
                    ff:66:7f:c6:f5:fe:d2:3b:62:07:5f:54:45:62:99:
                    81:b6:44:f6:fe:95:4e:4b:8f:d1:2a:4d:a6:f0:65:
                    c5:ad:07:88:97:39:b3:cc:d6:48:4e:00:34:0d:86:
                    6e:e6:6a:95:24:2f:4c:25:ce:15:38:58:b1:4f:91:
                    ff:31:3f:83:39:8e:74:99:df:8b:ae:fa:38:db:60:
                    fd:6a:88:70:cf:6e:e0:e7:3f:c1:ef:6b:1a:57:99:
                    54:04:ef:35:54:3f:f8:98:f5:47:67:87:72:02:b1:
                    82:92:43:f8:fa:b1:a6:2e:6f:61:3c:04:1e:9b:8f:
                    93:a0:95:92:98:4e:d2:d1:f5:be:9b:1d:d6:ef:33:
                    74:e1:c0:c0:3f:ad:55:9d:73:f4:0f:f5:89:3d:78:
                    d1:26:c2:66:9c:a3:50:4d:75:96:87:ce:91:20:f2:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:77:C9:92:2E:48:C7:4E:BF:81:B7:1A:2D:5C:12:F7:CD:95:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72052f3d-93e2-335b-8ac2-882370ab6e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:24:0e:cc:8e:13:cb:7c:99:8b:91:96:59:e9:0f:ba:13:fb:
         94:91:31:5a:d0:ea:de:5a:0d:10:aa:05:fe:fa:1e:e1:d8:62:
         3d:62:b3:9a:f1:49:fb:bf:78:7d:76:ab:69:4b:eb:1a:1c:12:
         87:7c:84:04:7b:9e:0e:5c:83:00:1f:ab:24:d8:f3:2e:ba:58:
         8d:04:86:19:62:9a:04:d5:6f:1a:ca:4c:01:b9:a5:70:6b:eb:
         81:cf:18:75:2b:9d:70:e2:c3:eb:6f:17:6e:03:07:6e:3a:44:
         0d:b5:1f:4a:56:9e:6c:b2:39:c0:6f:70:dc:d2:d4:f9:5d:88:
         15:3c:b7:fb:e7:b5:d3:83:d6:43:e0:d5:d7:3b:29:91:0f:67:
         7f:bf:80:b8:40:7b:00:0e:b4:2f:b7:4c:9b:82:2a:71:b4:bc:
         04:3b:86:b1:23:f7:a5:62:6c:b0:49:4e:a2:4d:0b:42:37:30:
         6f:33:5a:57:90:2d:61:d9:8f:1f:5f:e9:fb:70:85:2b:72:6e:
         11:9e:9c:c9:e0:b1:dc:e5:7d:23:ba:92:8e:9f:6f:b8:18:8e:
         a0:ce:0c:cd:ed:fb:88:88:bd:ec:c7:18:5b:d8:3c:3a:64:80:
         f7:80:a1:05:4f:12:58:43:74:bc:b2:d5:a2:bb:84:d5:c1:21:
         95:46:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:55 2025 by rpki-client