Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa
File:                     b8516ea7-4696-3792-8d88-1f7cad0147be.roa (raw, json)
Hash identifier:          NW5cxb6zS+nNJsCFesckQb7asiNASPJxI4mM6p+OPRI=
Subject key identifier:   FB:B8:58:4E:42:8C:E2:FF:21:19:BD:E2:3B:E1:65:4C:FE:F3:0F:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A2ABB00DF443F9AC92F95CF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     29802
IP address blocks:        50.114.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:bb:00:df:44:3f:9a:c9:2f:95:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=68c6833f-0e12-4b61-9522-757fc8bb9995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:40:b4:78:ed:f5:e1:8e:3c:7a:17:bb:9a:
                    48:8c:60:8d:12:89:d6:38:12:94:73:68:ef:c2:3d:
                    3a:4e:9f:dd:9c:19:42:cc:2b:73:83:d8:ae:ac:3a:
                    77:2f:0d:01:22:3c:ef:0c:89:e2:7b:4a:13:86:40:
                    25:9a:f5:a6:e0:69:3d:8b:74:32:9b:cd:06:fc:71:
                    bc:0a:60:79:f2:6f:59:9d:34:49:45:65:66:f9:98:
                    58:b1:12:d9:b4:74:b0:5d:ca:21:48:6c:b7:99:0a:
                    a8:f3:7c:95:42:e9:f5:6b:f2:b2:66:80:60:68:a9:
                    ee:a6:2f:1a:ff:8e:73:c9:f7:ea:32:7c:0c:d7:c8:
                    be:bc:58:e6:4a:53:30:ac:81:59:a8:c5:f3:12:49:
                    b9:83:e8:97:f6:eb:bb:e0:79:8c:f5:79:c2:bc:b8:
                    e2:ec:ed:a1:d7:d7:7f:bd:98:88:31:77:e4:43:ec:
                    04:c8:f2:d7:f3:30:a2:86:f6:84:5a:cb:c8:fd:84:
                    ad:be:10:f3:97:96:3d:a8:46:b5:68:09:84:aa:e6:
                    ce:b2:53:b3:52:25:91:92:dd:49:1f:55:cd:9b:ad:
                    39:1a:4c:da:de:9b:7d:e7:3c:2c:b4:e2:78:07:99:
                    68:ef:89:26:52:ac:18:ac:98:1e:ff:45:c0:f9:e4:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B8:58:4E:42:8C:E2:FF:21:19:BD:E2:3B:E1:65:4C:FE:F3:0F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8516ea7-4696-3792-8d88-1f7cad0147be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:bf:71:6d:b4:7b:3d:a9:96:bd:c0:bf:70:87:89:6b:6e:
         d6:fc:7a:6c:9b:df:fd:f1:35:3e:28:45:20:49:66:4e:29:b6:
         ba:64:0a:04:10:66:87:84:d4:3c:bb:dc:1a:59:bf:55:f5:da:
         4e:70:7f:7a:da:c3:f8:03:2a:62:3a:8f:f5:80:5c:4d:1a:5d:
         28:54:a8:95:0e:b5:5f:01:6b:68:99:07:4b:9b:27:16:cd:b8:
         e1:a0:14:32:8f:a5:08:98:f5:48:fe:e3:5d:41:df:9a:b1:d2:
         cc:d8:a5:aa:50:16:4d:65:39:05:bd:86:03:d3:2b:fb:88:f4:
         6e:a4:74:4c:e8:e9:79:04:f0:c1:c6:cb:50:54:8b:2b:2c:e5:
         29:46:f9:f8:33:3f:76:66:07:2e:f5:0e:dc:eb:13:db:1c:7c:
         73:6c:60:a9:f9:f7:de:1c:3e:d7:8b:d9:2e:b3:ad:0f:05:9d:
         41:b6:05:e8:4e:c8:fd:3f:05:87:bd:69:c4:a9:da:1d:4e:05:
         43:12:46:d5:68:c8:7c:f0:09:36:6c:0f:8a:6e:c4:96:ef:2d:
         e2:03:2c:ea:8d:43:a9:45:d0:28:62:a0:07:b5:cb:17:b9:7e:
         67:a6:2a:5c:4b:2a:07:62:ac:ec:54:e7:63:9d:5f:12:eb:94:
         aa:4f:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:20:27 2025 by rpki-client