Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9027445-09cc-3dd6-b8e0-64d3ca22ab1a.roa
File:                     a9027445-09cc-3dd6-b8e0-64d3ca22ab1a.roa (raw, json)
Hash identifier:          ON2vGFDKN/cS4oNytqZs0mxUCwmB+bKeGI/IL+wSVi0=
Subject key identifier:   68:CD:AE:91:25:98:0F:D6:7D:B7:F0:C0:8F:CB:87:15:21:4E:0B:82
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D8053953610E418BC2D33340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9027445-09cc-3dd6-b8e0-64d3ca22ab1a.roa
Signing time:             Tue 13 May 2025 21:58:57 +0000
ROA not before:           Tue 13 May 2025 21:58:57 +0000
ROA not after:            Mon 11 Aug 2025 21:58:57 +0000
asID:                     7385
IP address blocks:        50.114.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:39:53:61:0e:41:8b:c2:d3:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:57 2025 GMT
            Not After : Aug 11 21:58:57 2025 GMT
        Subject: CN=7d71b2c6-8e65-4c56-9caa-8683658e6e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:6b:54:b2:ff:0f:f4:02:b8:29:19:e0:85:
                    99:3c:9a:0f:64:a2:83:fa:2c:24:59:2e:41:80:03:
                    20:72:c8:96:cd:12:7b:f4:c4:c3:c8:9c:26:de:8c:
                    78:dc:77:83:09:1d:ee:86:a7:e7:1b:bb:8d:cd:c9:
                    bd:ca:ef:d0:44:04:06:1d:0c:18:34:6f:eb:48:7b:
                    8e:56:e5:d5:6b:05:8f:3b:61:67:bd:a3:94:ca:3c:
                    b5:4e:41:59:7c:ad:0d:6c:8d:8b:f8:c6:af:c4:91:
                    c8:b2:d1:f6:30:84:fc:cd:08:57:54:85:05:ee:d0:
                    bb:6f:00:12:2a:ee:15:ff:a9:a7:18:de:be:f2:36:
                    c1:18:2c:e7:df:1e:04:92:3d:e7:53:80:e0:a2:3c:
                    89:62:57:8e:32:f9:01:26:2a:b8:bf:06:46:27:1b:
                    f6:59:3c:92:a0:15:f7:e7:48:dd:22:3c:40:2a:a1:
                    8d:72:c2:1d:18:06:dd:ea:6e:69:6a:7f:b6:a5:2c:
                    0a:a5:cd:46:f8:a1:bd:b7:78:aa:f5:61:31:b4:1f:
                    cf:0c:a7:4a:f6:61:aa:98:9c:d6:ff:02:99:0e:30:
                    93:de:3d:e8:8c:df:83:57:a4:f5:1c:bb:34:bc:75:
                    b8:9b:70:0f:ea:e6:1f:0b:c1:59:f9:a6:cb:74:60:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:AE:91:25:98:0F:D6:7D:B7:F0:C0:8F:CB:87:15:21:4E:0B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9027445-09cc-3dd6-b8e0-64d3ca22ab1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:46:b8:ef:7e:52:e8:0e:79:bd:fe:10:bc:a8:77:f6:d8:
         b5:90:8b:bf:81:aa:fd:06:78:09:f5:ec:af:05:5e:68:59:c2:
         79:ab:94:bb:ec:c8:5e:f6:f0:61:55:03:77:3b:84:fb:63:f7:
         b9:ca:61:2e:9b:28:2c:0f:76:c2:a8:dc:44:71:6d:01:55:ef:
         f4:f3:db:13:39:cb:cd:d0:5e:6f:f0:ff:32:e6:f4:0e:a9:43:
         6c:b5:94:2e:1e:a2:2e:15:ae:4e:ba:d1:fd:37:a1:31:1c:60:
         06:32:13:ba:aa:1f:a5:c9:ca:23:fe:5f:8e:6f:f6:91:0e:d3:
         ba:54:df:fe:07:0d:18:bf:a6:d2:34:19:8d:bf:51:c9:85:0f:
         29:49:81:c3:01:a9:e3:30:81:50:26:94:be:49:53:71:36:af:
         2f:91:6c:fc:44:ff:49:fd:6f:69:8d:f1:fa:82:69:74:d1:59:
         84:f5:c8:bd:d6:77:17:41:4e:8e:16:4c:d9:df:ac:b0:96:fc:
         02:93:6a:01:58:fa:bb:a2:c5:16:69:d2:6c:18:19:40:ff:f9:
         06:a4:59:8e:7b:1c:6a:9d:20:00:77:f5:32:d6:7a:99:18:28:
         ed:40:04:fe:d3:6c:aa:78:b7:bb:a7:e2:8e:64:1f:2b:71:20:
         ff:65:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:22:22 2025 by rpki-client