Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa
File:                     44202d1b-4106-365f-bce5-c7661759d1e9.roa (raw, json)
Hash identifier:          XzJX+kw5NbrOiXq+ojl1T0wLjF2t1+a8F1LzhU8pdLc=
Subject key identifier:   59:0E:49:AD:AF:5C:BF:C3:4C:BE:18:6E:18:D7:64:76:86:86:D3:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8B8AC44CE69954AB51B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa
Signing time:             Tue 15 Jul 2025 20:27:05 +0000
ROA not before:           Tue 15 Jul 2025 20:27:05 +0000
ROA not after:            Mon 13 Oct 2025 20:27:05 +0000
asID:                     44559
IP address blocks:        50.114.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:b8:ac:44:ce:69:95:4a:b5:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:05 2025 GMT
            Not After : Oct 13 20:27:05 2025 GMT
        Subject: CN=3817c85c-39fc-4c0d-a505-4bb753125f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:08:e4:20:2e:2d:f2:f9:b4:60:fc:89:63:ee:
                    01:2e:5a:cc:79:57:fb:de:90:e1:d2:b5:0a:a7:9d:
                    b6:73:15:c4:ca:ef:09:06:9b:49:66:5b:27:b5:c3:
                    84:cd:f0:1f:4e:d7:b5:2d:db:2c:d4:b7:03:1d:5f:
                    0e:5a:c9:a6:12:6b:d4:35:d8:50:1d:68:6d:5a:81:
                    e2:17:e5:e7:68:25:e5:30:ad:d4:74:ab:a5:1a:0c:
                    8b:dd:b2:60:69:8d:dd:dd:c6:c2:42:f4:fa:39:c5:
                    6a:ec:17:0e:8e:7c:b5:a4:34:a0:21:ba:8f:59:1b:
                    2e:44:b6:b2:6a:34:b4:ae:74:58:16:52:01:f2:dc:
                    a5:41:3f:45:19:a1:f3:44:e5:fc:72:f5:85:41:ef:
                    03:ad:84:78:fc:9e:75:30:5c:cf:fc:64:32:95:71:
                    a5:a4:30:f2:8a:52:01:3c:6c:9f:9d:22:7a:34:c3:
                    e3:cb:ac:dd:96:11:bc:6a:81:49:5b:b3:69:a0:56:
                    0e:07:39:b7:16:17:6a:2d:4f:ad:2b:27:4a:8b:b2:
                    19:3f:ed:7a:05:ef:11:73:ec:0b:5b:59:56:54:3f:
                    95:52:51:46:70:27:f3:df:8c:cf:77:23:a4:6e:00:
                    6d:74:6c:0c:e6:f0:78:ec:38:a7:98:fc:e4:ce:3c:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0E:49:AD:AF:5C:BF:C3:4C:BE:18:6E:18:D7:64:76:86:86:D3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/44202d1b-4106-365f-bce5-c7661759d1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ce:f9:e1:ef:29:e9:23:33:b6:97:36:03:36:51:22:37:53:
         38:23:87:12:d3:dc:b4:96:52:eb:9a:10:64:48:aa:01:1f:77:
         38:6f:9e:ff:1d:df:0a:58:d2:8e:39:d5:b7:ec:9a:28:07:0a:
         6b:0c:04:03:37:92:af:a0:74:06:28:2c:82:40:9c:4e:0d:9a:
         48:2a:8f:a3:5a:40:2e:62:9d:06:80:bb:aa:51:d0:70:58:d8:
         f5:32:33:35:09:9d:10:cc:f2:67:9c:d8:46:d9:ef:e4:53:8d:
         69:f4:56:16:60:41:f1:ce:d4:02:d1:d0:9f:7a:55:05:97:67:
         f5:77:5a:53:fd:33:d2:bb:5c:04:59:cc:9a:7a:e2:ea:60:d6:
         65:ca:f5:52:b3:b6:52:32:e3:b3:8e:38:fe:57:2a:73:87:99:
         d0:a9:c6:e4:07:49:cd:31:98:41:8d:db:66:2d:fe:22:49:16:
         85:97:b1:33:95:6c:40:96:2b:4d:87:b6:cf:98:90:ac:79:12:
         15:f9:e2:4e:c4:29:35:ee:4f:0c:46:7d:3d:e4:5d:ce:04:f0:
         80:e4:19:4f:51:34:fe:5a:9d:18:fa:86:ec:71:b4:bd:fd:ca:
         ce:e6:86:8f:fe:e6:74:bd:ee:3e:e2:9c:82:5a:92:39:1a:46:
         4f:f3:df:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLisRM5plUq1G4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcxNTIwMjcwNVoXDTI1MTAxMzIwMjcwNVowLzEtMCsGA1UEAxMk
MzgxN2M4NWMtMzlmYy00YzBkLWE1MDUtNGJiNzUzMTI1ZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AjkIC4t8vm0YPyJY+4BLlrMeVf73pDh0rUK
p522cxXEyu8JBptJZlsntcOEzfAfTte1Ldss1LcDHV8OWsmmEmvUNdhQHWhtWoHi
F+XnaCXlMK3UdKulGgyL3bJgaY3d3cbCQvT6OcVq7BcOjny1pDSgIbqPWRsuRLay
ajS0rnRYFlIB8tylQT9FGaHzROX8cvWFQe8DrYR4/J51MFzP/GQylXGlpDDyilIB
PGyfnSJ6NMPjy6zdlhG8aoFJW7NpoFYOBzm3FhdqLU+tKydKi7IZP+16Be8Rc+wL
W1lWVD+VUlFGcCfz34zPdyOkbgBtdGwM5vB47DinmPzkzjx/8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkOSa2vXL/DTL4YbhjXZHaGhtPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDQyMDJkMWItNDEwNi0z
NjVmLWJjZTUtYzc2NjE3NTlkMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/O+eHvKekjM7aXNgM2USI3UzgjhxLT3LSWUuuaEGRIqgEfdzhvnv8d
3wpY0o451bfsmigHCmsMBAM3kq+gdAYoLIJAnE4Nmkgqj6NaQC5inQaAu6pR0HBY
2PUyMzUJnRDM8mec2EbZ7+RTjWn0VhZgQfHO1ALR0J96VQWXZ/V3WlP9M9K7XARZ
zJp64upg1mXK9VKztlIy47OOOP5XKnOHmdCpxuQHSc0xmEGN22Yt/iJJFoWXsTOV
bECWK02Hts+YkKx5EhX54k7EKTXuTwxGfT3kXc4E8IDkGU9RNP5anRj6huxxtL39
ys7mho/+5nS97j7inIJakjkaRk/z3yQ=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:50 2025 by rpki-client