Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c5149f2-1642-3a57-b489-34799b9a1250.roa
File:                     8c5149f2-1642-3a57-b489-34799b9a1250.roa (raw, json)
Hash identifier:          BYl8ng4hV79ZIe+0DafkO0vxvOV0j95CTf3l76p+rRg=
Subject key identifier:   67:F1:96:F1:01:0A:53:62:A4:EB:58:15:50:2B:1D:24:F7:CB:90:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECD0A9C9DB5ADA6B0FCE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c5149f2-1642-3a57-b489-34799b9a1250.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        50.114.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:d0:a9:c9:db:5a:da:6b:0f:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=3f48d528-5f4e-4d04-81e6-b752d05b3e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:b8:22:cc:e7:2f:eb:db:a6:2d:eb:a7:e1:
                    81:60:69:f9:f3:4d:b3:b8:f2:03:3b:be:d4:74:80:
                    62:2e:cb:04:95:fc:2a:3d:81:5d:42:ee:2b:81:70:
                    e8:a1:6d:24:3c:c8:73:4c:9a:af:d4:d5:50:12:e5:
                    e1:78:28:22:0f:56:19:a5:fc:bb:99:3d:d0:a5:54:
                    e2:e2:24:8a:d9:8f:b3:66:5b:f1:ac:c2:30:95:01:
                    35:bd:1c:e4:5e:94:21:87:77:8a:74:50:16:3a:51:
                    c8:57:2e:cb:8f:bc:4f:7f:ca:c6:08:b7:7f:64:c0:
                    92:ea:c7:8f:d9:90:57:4d:2a:6a:c1:59:ca:da:7b:
                    f2:5e:2e:16:fc:36:95:2c:78:44:fa:0a:a8:99:e2:
                    2b:c2:9e:9e:20:76:cc:8c:26:8b:d0:f6:33:be:5b:
                    e8:5b:aa:a4:c3:60:9b:2f:dd:a9:11:90:9c:c2:fe:
                    a4:22:f9:b2:2b:c9:99:36:8f:7d:7b:9c:07:7f:03:
                    dd:1e:05:ee:ad:0d:be:e1:3b:ae:33:79:2e:01:65:
                    43:b2:38:ab:d7:e6:27:2f:8d:00:45:93:1e:62:5c:
                    f3:3a:c7:93:d7:1c:3d:62:fa:d5:6f:63:e9:60:ca:
                    72:71:0f:ab:b6:41:64:62:ac:ca:bb:9e:9e:a5:f4:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F1:96:F1:01:0A:53:62:A4:EB:58:15:50:2B:1D:24:F7:CB:90:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c5149f2-1642-3a57-b489-34799b9a1250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:a1:fa:4a:4b:a4:66:fc:c9:13:b4:b7:b1:07:2b:98:b3:
         f2:40:d8:ea:e9:a0:76:31:2a:e6:63:9d:06:10:5d:c6:93:d5:
         8f:56:88:63:05:7c:50:d8:82:6d:4b:c5:9c:28:e2:07:27:6c:
         02:aa:7d:86:12:90:5d:ad:95:03:1e:04:52:c2:bf:3b:5f:03:
         57:16:75:35:51:de:e7:35:9f:a7:f4:1f:85:9a:05:af:5e:b9:
         29:1f:34:68:6c:ff:10:e8:30:96:7c:cf:2c:b3:c4:7d:30:bf:
         56:18:5a:8a:e3:e7:c4:1e:10:20:ec:77:58:70:7a:5c:2d:32:
         55:38:74:e8:7e:60:21:65:31:ab:e9:a8:fe:df:16:75:37:d5:
         52:df:ee:1f:48:77:48:3a:81:91:85:5e:71:18:95:26:05:93:
         44:ce:c2:54:47:f1:71:d0:46:6c:75:82:27:fd:36:a0:c7:a7:
         5a:e1:b8:39:42:82:db:b9:c1:46:45:a7:2a:79:95:8a:6e:b3:
         2a:80:ac:49:87:4f:4a:f3:f7:cb:7d:b0:e8:33:b3:e3:1b:88:
         9a:b0:b8:c0:03:b4:57:2e:ff:68:f1:2b:32:22:2e:20:f4:70:
         6c:a9:51:ec:bb:16:08:ff:15:75:f4:c2:cd:ec:63:9c:ed:2f:
         af:77:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:24 2025 by rpki-client