Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa
File:                     fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa (raw, json)
Hash identifier:          886dKx7RkuGY7gVDTrobgrzpriVGWhKH0ds5tPdwTdA=
Subject key identifier:   77:33:5C:1E:9F:3D:06:7B:7F:85:41:20:43:36:FC:96:1C:B8:13:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B917771DB983A257B65B31DB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        50.114.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:71:db:98:3a:25:7b:65:b3:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=3130cdba-6ac1-47b9-a371-b5b03f765a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:e2:68:bc:23:e8:ee:0f:76:5d:0e:24:18:
                    71:7a:24:9d:db:45:9b:50:3a:44:c1:c4:62:2f:37:
                    99:51:36:c0:90:14:5d:61:42:05:63:30:e1:61:a0:
                    63:8d:9c:1b:de:74:aa:a8:50:68:4d:10:55:30:4b:
                    89:32:31:9b:65:43:7a:a7:1d:9e:8d:04:de:ff:e2:
                    d7:b4:62:0a:a1:b8:51:a8:0b:ab:28:d8:b8:f3:b0:
                    1b:e0:8d:f6:8c:31:ca:2a:e6:6e:6e:d3:49:3e:1f:
                    50:35:6c:ec:fb:67:dd:84:fa:65:d3:c9:34:ba:d9:
                    34:92:41:0d:86:00:cf:d3:fe:b3:b0:4b:cd:96:47:
                    76:9f:f8:07:13:d4:4b:e2:49:d9:32:13:1e:0d:7f:
                    e5:7c:da:f5:7e:9c:64:c2:fb:1e:ed:4d:1e:b1:d0:
                    c5:f1:da:68:a8:68:d5:40:d4:4c:a4:80:7c:31:a0:
                    8b:1d:53:9b:a3:05:ba:c0:f3:8a:a6:2e:2f:98:6a:
                    75:b7:4e:77:4d:51:f5:bf:27:d3:96:f5:0e:4d:5d:
                    19:f0:e2:e8:2c:f3:ae:b1:ea:ce:ee:0e:2d:25:e8:
                    d3:69:21:b7:64:ef:b1:b2:e3:70:51:ea:42:70:da:
                    fc:d2:4e:c2:ae:27:60:aa:e4:1b:25:4a:8f:ee:d2:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:5C:1E:9F:3D:06:7B:7F:85:41:20:43:36:FC:96:1C:B8:13:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:82:6c:e7:98:72:02:8d:86:aa:da:72:8a:a3:7a:92:7a:
         c3:94:f1:f8:48:7d:bc:39:99:61:2e:43:d3:5f:b8:67:6e:0e:
         73:52:67:10:4c:1f:7d:bf:f2:de:66:01:3b:f1:93:ca:cd:45:
         f8:c9:32:b8:83:a0:d0:5c:92:97:08:3a:f1:32:a1:f4:fc:e8:
         fb:1b:04:7f:a9:41:23:6d:c5:17:2a:10:91:78:19:4d:5a:3d:
         ee:ca:d0:2c:08:c7:1b:10:ca:aa:96:1a:ce:c4:b9:cf:eb:d9:
         73:30:56:dd:f1:a8:8f:48:4f:41:e0:69:88:58:ee:ca:0a:df:
         ee:50:a5:dc:5d:0d:62:e2:a2:7b:84:62:00:d2:ea:71:93:5c:
         f3:eb:6a:c1:2e:d2:cd:1c:61:d4:bc:2a:4d:c0:08:0d:3d:88:
         51:cc:c7:c2:7b:e3:5b:d7:1c:fa:10:74:b6:d0:9c:82:6f:d1:
         64:f9:87:56:d6:62:ba:1b:26:b1:9b:40:eb:7d:ff:d5:b2:6f:
         77:8d:89:bb:30:01:d0:fa:25:af:5f:98:2d:43:a6:f5:3a:eb:
         12:b4:db:2f:ed:23:48:e7:9b:6c:8a:36:48:b4:cb:80:64:ba:
         1c:9c:6b:c4:20:0a:40:e2:40:81:5a:b0:91:7d:8b:fd:e3:a1:
         a2:62:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:07 2025 by rpki-client