Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa
File:                     89fa63d7-0bc5-3982-acae-e33a4274f567.roa (raw, json)
Hash identifier:          GYBpoHKScKONvF3qpEJ2SReofPGGqV1HOZTkiS5dVxs=
Subject key identifier:   5B:B3:2B:DD:4F:D9:B1:44:E2:E3:B7:64:FF:05:D1:72:F4:70:C1:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777CAED148F752AA999E10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        50.114.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7c:ae:d1:48:f7:52:aa:99:9e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=6fce7d0a-11ac-4b1e-90b2-ff7d10b073ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:c4:d2:bb:2b:e9:1e:5d:d2:1e:32:f6:1d:
                    7d:4f:7d:70:ca:c3:2c:f5:46:18:e8:e7:7a:54:06:
                    e5:e1:07:82:23:7c:5e:96:a8:b3:5d:1b:6f:9f:56:
                    24:e8:99:91:45:82:50:ef:6d:fb:df:b6:20:57:28:
                    e1:23:5a:2c:ea:d0:0b:1f:6a:c2:74:2a:25:f0:c0:
                    c5:03:8f:7d:b1:b5:68:f5:70:25:da:88:ec:c7:26:
                    23:d1:5e:55:35:74:0c:2b:ad:7d:d8:ee:3e:fd:14:
                    39:3f:14:b7:64:84:b4:74:35:7b:2c:db:59:4e:c1:
                    8e:1a:18:a8:65:5f:78:39:7a:51:0f:90:76:57:28:
                    49:8a:0f:b4:17:45:d8:ac:af:62:2b:43:09:76:b4:
                    33:ed:4f:15:be:b2:b3:fe:7a:30:5a:0b:3b:6b:05:
                    9f:b0:44:87:36:dd:78:c0:00:a4:14:4c:66:e9:e5:
                    c9:b3:5d:dd:91:ba:0e:b0:21:f4:fd:79:55:55:29:
                    da:61:81:19:34:e7:53:ab:f9:3b:23:54:1c:60:07:
                    70:9a:07:20:e0:c7:16:3e:57:07:40:6e:f8:35:1f:
                    27:67:da:5f:17:73:17:b6:30:c8:f5:ae:0e:3f:06:
                    f4:19:3b:a8:89:dd:02:fd:a2:37:16:10:41:59:43:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B3:2B:DD:4F:D9:B1:44:E2:E3:B7:64:FF:05:D1:72:F4:70:C1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:2f:35:00:26:31:d7:2b:3b:1e:02:14:67:66:fa:5f:e2:
         13:e1:75:72:d9:14:23:b5:9b:7e:1d:0b:8f:61:aa:de:e8:2a:
         1d:71:4a:ab:f5:c6:70:43:c7:85:96:1a:65:8a:87:f8:38:17:
         99:cc:d9:83:d3:2c:e4:1e:b7:56:67:44:b3:fb:e8:38:23:a1:
         c2:39:18:68:d2:c4:3b:79:c3:ce:57:e3:43:40:ce:10:8f:21:
         0e:bc:72:af:a3:1b:9f:fc:fd:ca:04:a7:6c:f3:09:76:63:a8:
         7e:47:0b:f6:7e:62:dd:11:d6:39:6b:6b:1e:62:71:14:f6:b8:
         01:0e:65:c0:28:7c:e1:bf:64:9c:1f:d5:f8:3f:37:22:71:f2:
         6e:ed:8b:fa:f1:38:5f:7c:c0:99:51:bf:c4:84:f3:ba:1f:45:
         0e:03:1b:6f:d9:6c:61:67:76:db:70:a7:81:61:9f:9d:68:d2:
         50:71:cc:8d:4e:bf:d6:60:f9:e6:7e:ce:ac:35:a9:a3:e2:27:
         19:c2:c5:e5:08:41:85:15:c7:72:cb:92:2a:f9:5b:d4:27:a5:
         0b:03:fe:97:7d:8c:4d:6e:ae:98:0d:f4:e3:ff:41:88:2c:5f:
         11:33:69:81:a1:39:05:77:4d:df:ca:54:23:63:9a:18:d8:d2:
         72:e4:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:56 2025 by rpki-client