Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db94d231-2eb0-3bf9-ac77-bc99f5426726.roa
File:                     db94d231-2eb0-3bf9-ac77-bc99f5426726.roa (raw, json)
Hash identifier:          qAd3lu/TqZChBHgYMWzhlWua2Ed3GlL5v0LDXKG47Xk=
Subject key identifier:   58:8E:A8:17:94:67:17:90:2B:27:DF:C7:94:50:5D:C3:26:C5:31:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6A61F2C52827E0E060B8AEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db94d231-2eb0-3bf9-ac77-bc99f5426726.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     14217
IP address blocks:        50.114.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f2:c5:28:27:e0:e0:60:b8:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=434d18d8-304d-447d-a78f-85789c232d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:72:f6:2b:33:b4:f1:dd:bb:5f:eb:5c:46:
                    b2:c7:1f:dc:b6:01:14:61:1b:34:67:0a:87:68:cb:
                    ba:b1:24:f6:20:23:43:a8:1e:9b:e7:69:3d:c4:8c:
                    69:3f:b8:65:17:62:8a:fa:3b:2d:6c:41:b5:34:f1:
                    00:84:47:52:5f:8a:7e:7b:4c:a5:6c:89:ec:40:89:
                    d5:92:c2:8f:9c:07:ea:59:5e:9a:0b:03:db:da:55:
                    de:54:ee:2a:93:16:1e:d2:f8:56:3d:d4:58:b1:2b:
                    74:dc:35:7f:55:e3:8c:24:0e:b0:53:72:00:51:28:
                    7a:98:87:a2:49:bd:3a:59:b4:8f:e1:3c:c6:87:be:
                    b3:33:59:f7:ff:be:6e:40:a8:3f:78:2b:49:ba:ec:
                    5e:f1:ca:28:35:95:2f:2b:98:d3:05:ec:cd:22:a4:
                    51:f2:92:f4:6f:5b:b5:2b:d8:2f:7e:b2:19:59:b9:
                    b3:29:51:ce:c0:0e:8a:e9:f1:e4:9a:76:3a:24:a3:
                    07:03:e3:4e:e7:c6:22:ab:ef:b3:58:e3:e8:be:e4:
                    0a:95:e5:0d:45:db:e6:4b:dc:11:aa:ce:7e:7f:cb:
                    83:dc:de:c5:1f:e2:6a:ac:27:5f:19:39:52:c2:78:
                    00:8c:b2:62:f3:2a:05:0a:02:be:b8:c5:58:8c:1c:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8E:A8:17:94:67:17:90:2B:27:DF:C7:94:50:5D:C3:26:C5:31:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db94d231-2eb0-3bf9-ac77-bc99f5426726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:dd:79:ad:0a:9c:c9:d4:69:43:9b:8e:be:e7:16:61:15:
         e7:c1:b4:cb:99:84:d4:b9:bc:18:09:d4:f3:9d:d9:7c:47:79:
         2c:c8:34:09:d3:50:39:f7:75:65:ca:5d:81:3d:85:dd:bc:a0:
         20:77:9a:2a:bd:d0:47:a4:ec:cd:c3:e6:73:35:bd:17:af:57:
         2c:f6:1f:14:34:7b:53:5e:de:79:46:bf:63:4b:cb:0b:ec:e5:
         4b:96:d2:22:bb:51:97:04:a1:0e:d3:21:14:09:4e:2e:f1:a4:
         2a:b6:c8:12:b9:e4:52:78:de:61:ab:ae:2e:2d:07:f3:13:e7:
         36:68:30:4f:0a:64:7b:93:78:f5:97:f9:42:7c:d1:93:c0:99:
         a2:70:54:34:5d:7c:3b:3d:bd:4e:ff:61:8b:ec:78:aa:83:d4:
         9b:6d:41:94:0b:38:f9:ff:a7:c5:14:10:3c:fd:53:b4:51:31:
         e4:90:eb:00:9f:28:da:6a:d3:7f:24:ce:0e:b7:37:26:bd:5c:
         1f:0e:8b:6e:83:07:a0:22:78:60:9f:61:af:ae:06:bb:d0:f0:
         a3:4e:15:51:2a:0e:67:02:ac:63:5a:bd:a1:9f:ea:8a:9e:3c:
         9e:6d:32:80:47:4f:9d:7a:78:94:ac:27:e5:9d:8c:e7:1f:83:
         e2:80:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:01 2025 by rpki-client