Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa
File:                     ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa (raw, json)
Hash identifier:          CclZplylFSNinLOX62sCWb/gf1nBDS6MCJOFAHszYzo=
Subject key identifier:   00:7C:34:5F:9F:C4:76:5E:09:54:F0:1D:9F:CE:F7:1B:71:D3:9C:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849BDDA39B323040CF925FE9600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     26548
IP address blocks:        50.114.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:39:b3:23:04:0c:f9:25:fe:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=e233f6c6-3ef8-47bd-a61f-78ed87876bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:f6:39:0f:18:87:a3:80:c5:2f:7e:a4:07:
                    de:a5:1a:b4:df:90:95:1e:bb:61:78:b4:c5:4a:ac:
                    38:62:81:a2:d2:ce:a8:4e:51:ce:47:a8:8c:8d:b0:
                    08:1b:5d:b7:dc:54:b8:1a:0b:d7:79:9a:ae:a0:4b:
                    ad:03:3a:b3:1a:28:0a:7c:cc:89:7e:4b:07:b6:01:
                    21:39:ec:01:a8:4a:6d:20:87:a1:1e:e7:d3:b4:77:
                    84:66:cf:fd:e3:d1:ad:26:ca:de:7e:1a:50:92:b0:
                    5f:95:bc:fa:57:03:af:69:ac:f9:83:a6:6e:8e:34:
                    11:08:d8:41:c1:d8:e9:d8:7a:11:e5:01:28:d5:3a:
                    04:7a:18:da:b0:b1:a8:a1:0b:e4:b8:68:f4:32:5d:
                    16:ac:64:9a:78:6e:d8:b5:0d:91:3d:b2:0c:7b:13:
                    c7:6d:8b:86:36:15:a4:8c:88:01:7e:1f:7e:56:29:
                    39:50:82:c3:58:7d:1c:3f:7b:61:84:4b:60:bb:16:
                    56:9f:92:1e:ce:6b:a3:79:5e:c4:3c:8d:d5:29:c6:
                    84:be:9f:09:c1:ee:af:e3:d8:e3:dc:d1:26:a6:68:
                    93:6c:d5:1f:0b:0e:7a:c6:cc:b3:58:7d:f0:3f:77:
                    4b:1c:06:75:47:74:fa:ac:53:f1:3a:7d:d1:95:06:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:34:5F:9F:C4:76:5E:09:54:F0:1D:9F:CE:F7:1B:71:D3:9C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:23:9a:ba:4d:3d:5f:cb:75:0e:2d:43:ac:fb:71:7a:1c:
         5f:b2:11:ab:e4:9c:84:7c:18:dd:59:ad:eb:dc:74:9a:27:26:
         6f:e7:16:f2:dc:26:4f:13:c4:83:ef:42:9d:c6:88:02:07:63:
         f9:63:ff:80:d4:53:2e:e9:90:cf:dc:a2:f7:f4:c2:35:27:1e:
         4c:bd:53:a1:cd:20:38:90:7f:5a:96:f6:0c:e6:74:87:3c:02:
         ec:ad:f9:d8:de:9a:af:72:40:d4:62:97:72:7d:34:5d:4e:b1:
         8d:8f:6a:b0:c2:90:60:20:52:e1:aa:67:88:87:5e:41:e3:86:
         9d:ca:36:73:80:e6:bf:4a:a1:51:ad:5e:6f:81:7d:2c:fa:18:
         70:d3:33:d9:e6:b3:75:5a:e4:01:a7:ff:10:de:a2:38:43:e2:
         36:45:6a:1b:59:af:f9:05:c8:69:8e:2e:03:da:cb:41:27:a6:
         b8:3c:1d:ce:25:87:b5:cb:37:8f:81:0a:a9:98:5d:ec:ef:8b:
         0a:60:3e:ae:bf:60:c1:01:e7:a4:a0:5c:92:1d:d8:34:6c:25:
         ff:e6:15:84:50:5c:d2:53:a3:53:a1:06:2d:5b:00:62:15:f4:
         42:41:e0:d0:4e:2b:f8:e2:1c:65:8f:96:77:82:18:aa:4d:ac:
         68:be:07:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jmzIwQM+SX+lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
ZTIzM2Y2YzYtM2VmOC00N2JkLWE2MWYtNzhlZDg3ODc2YmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkML2OQ8Yh6OAxS9+pAfepRq035CVHrtheLTF
Sqw4YoGi0s6oTlHOR6iMjbAIG1233FS4GgvXeZquoEutAzqzGigKfMyJfksHtgEh
OewBqEptIIehHufTtHeEZs/949GtJsrefhpQkrBflbz6VwOvaaz5g6ZujjQRCNhB
wdjp2HoR5QEo1ToEehjasLGooQvkuGj0Ml0WrGSaeG7YtQ2RPbIMexPHbYuGNhWk
jIgBfh9+Vik5UILDWH0cP3thhEtguxZWn5IezmujeV7EPI3VKcaEvp8Jwe6v49jj
3NEmpmiTbNUfCw56xsyzWH3wP3dLHAZ1R3T6rFPxOn3RlQaYXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB8NF+fxHZeCVTwHZ/O9xtx05zJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWM4Y2IyYTktZjA2Mi0z
N2VlLTkwZGQtMmM5MGFlNTc5N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8mI5q6TT1fy3UOLUOs+3F6HF+yEavknIR8GN1ZrevcdJonJm/nFvLc
Jk8TxIPvQp3GiAIHY/lj/4DUUy7pkM/covf0wjUnHky9U6HNIDiQf1qW9gzmdIc8
Auyt+djemq9yQNRil3J9NF1OsY2ParDCkGAgUuGqZ4iHXkHjhp3KNnOA5r9KoVGt
Xm+BfSz6GHDTM9nms3Va5AGn/xDeojhD4jZFahtZr/kFyGmOLgPay0Enprg8Hc4l
h7XLN4+BCqmYXezviwpgPq6/YMEB56SgXJId2DRsJf/mFYRQXNJTo1OhBi1bAGIV
9EJB4NBOK/jiHGWPlneCGKpNrGi+B4o=
-----END CERTIFICATE-----
Generated at Sat May 10 13:27:00 2025 by rpki-client