Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88af33d1-fd19-3d7f-b74d-3a3570c09c49.roa
File:                     88af33d1-fd19-3d7f-b74d-3a3570c09c49.roa (raw, json)
Hash identifier:          pExig+2Y+6QXBcyoX7h61+CRE5dC+KePz64sSg2Szt8=
Subject key identifier:   6F:CB:B0:D4:59:AA:3F:25:56:2F:02:B7:63:31:2F:AB:A2:66:8E:3F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6797FF4238C8EBE23F54D600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88af33d1-fd19-3d7f-b74d-3a3570c09c49.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        50.114.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ff:42:38:c8:eb:e2:3f:54:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=ce939566-7019-4e2b-bb75-77a88366ccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:88:9b:cb:c4:67:15:3f:61:1f:a1:71:68:60:
                    ce:2b:ea:6b:c4:60:66:07:89:4e:51:9f:ff:e0:46:
                    99:78:f3:bd:af:08:ce:b6:2d:aa:68:a9:56:b9:6f:
                    50:31:b6:3a:95:99:14:43:ff:6b:9e:a0:9f:9a:38:
                    f1:53:a4:a5:8c:a2:96:de:a0:8b:b8:ab:41:ea:f4:
                    50:98:14:3f:40:a1:62:b2:78:ae:41:84:7b:fe:df:
                    5b:92:cc:45:73:ed:95:fc:cf:a8:6a:60:00:55:75:
                    93:b4:58:63:d8:af:c4:19:32:6a:19:7c:8d:62:e3:
                    86:2b:08:ae:e9:ef:9a:ba:fa:a0:a1:0f:31:0f:5e:
                    87:55:c4:3a:49:4f:21:e1:d7:66:f0:31:16:a4:26:
                    8a:1d:af:f3:90:44:01:6c:92:29:99:15:bf:2e:30:
                    4a:b5:59:3e:80:b3:c8:7d:9c:b0:97:f6:98:13:b4:
                    02:63:5d:27:a0:b1:81:d1:ba:4d:05:19:26:0d:6c:
                    de:25:08:be:27:a6:b3:40:d2:67:33:49:ec:67:b4:
                    dd:42:8d:cb:4c:98:5d:27:c9:60:5d:4b:23:e0:33:
                    ab:ad:f4:a1:7c:b6:76:45:11:9e:fe:2b:0b:2f:eb:
                    cc:45:3e:b8:03:7d:f0:96:2b:1b:83:9e:4a:6e:f0:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:B0:D4:59:AA:3F:25:56:2F:02:B7:63:31:2F:AB:A2:66:8E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88af33d1-fd19-3d7f-b74d-3a3570c09c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:93:87:cd:16:64:a8:cd:cd:5d:34:1e:5f:76:a4:0e:3b:47:
         2f:cd:d4:fd:e1:d3:88:1d:2c:77:90:17:5c:73:6a:56:62:97:
         78:66:75:ba:54:da:4c:b3:0f:b6:f5:b5:ab:ee:92:f6:86:b8:
         da:fe:82:b6:53:2c:23:97:b7:f6:1c:88:04:1f:4f:6e:a2:b5:
         97:24:32:4a:e9:1c:ca:a7:91:39:7b:04:7f:0e:2a:b1:28:50:
         f2:85:96:e1:ab:92:85:91:37:a0:50:f5:3f:0f:e3:5d:73:46:
         4b:73:65:2e:9a:53:32:a4:75:5f:45:d9:ad:0e:33:94:95:1c:
         ce:22:3c:95:df:1c:04:e0:06:4e:58:74:70:21:42:3e:59:ef:
         d1:16:ab:d7:72:53:55:05:22:bb:d1:c6:74:c5:58:01:ff:22:
         5f:5e:bc:cc:36:75:2b:15:b1:3c:44:4e:b2:6f:1d:e1:97:98:
         45:2c:da:2c:f4:1c:35:d5:5b:b4:87:5e:b1:1d:f9:6b:bc:21:
         8a:0d:34:e6:bb:9e:45:6b:a7:fa:fb:bd:f6:17:c0:67:8b:b2:
         7c:c7:ea:d8:4d:0d:21:af:61:c8:aa:a2:93:23:03:07:3c:9d:
         d8:97:e8:6b:b7:d4:61:e7:91:86:f5:a8:92:66:0a:d3:bf:70:
         98:07:ac:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/9COMjr4j9U1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
Y2U5Mzk1NjYtNzAxOS00ZTJiLWJiNzUtNzdhODgzNjZjY2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84iby8RnFT9hH6FxaGDOK+prxGBmB4lOUZ//
4EaZePO9rwjOti2qaKlWuW9QMbY6lZkUQ/9rnqCfmjjxU6SljKKW3qCLuKtB6vRQ
mBQ/QKFisniuQYR7/t9bksxFc+2V/M+oamAAVXWTtFhj2K/EGTJqGXyNYuOGKwiu
6e+auvqgoQ8xD16HVcQ6SU8h4ddm8DEWpCaKHa/zkEQBbJIpmRW/LjBKtVk+gLPI
fZywl/aYE7QCY10noLGB0bpNBRkmDWzeJQi+J6azQNJnM0nsZ7TdQo3LTJhdJ8lg
XUsj4DOrrfShfLZ2RRGe/isLL+vMRT64A33wlisbg55KbvBbMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/LsNRZqj8lVi8Ct2MxL6uiZo4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODhhZjMzZDEtZmQxOS0z
ZDdmLWI3NGQtM2EzNTcwYzA5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCTh80WZKjNzV00Hl92pA47Ry/N1P3h04gdLHeQF1xzalZil3hmdbpU
2kyzD7b1tavukvaGuNr+grZTLCOXt/YciAQfT26itZckMkrpHMqnkTl7BH8OKrEo
UPKFluGrkoWRN6BQ9T8P411zRktzZS6aUzKkdV9F2a0OM5SVHM4iPJXfHATgBk5Y
dHAhQj5Z79EWq9dyU1UFIrvRxnTFWAH/Il9evMw2dSsVsTxETrJvHeGXmEUs2iz0
HDXVW7SHXrEd+Wu8IYoNNOa7nkVrp/r7vfYXwGeLsnzH6thNDSGvYciqopMjAwc8
ndiX6Gu31GHnkYb1qJJmCtO/cJgHrDw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:19 2025 by rpki-client