Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ca432ea-b1e7-3f11-9fbf-3da42632d895.roa
File:                     9ca432ea-b1e7-3f11-9fbf-3da42632d895.roa (raw, json)
Hash identifier:          OPS1csnxx3epm1RJT1MSWV+EpDxPnJen2+wQ8+AQ55c=
Subject key identifier:   90:AD:B5:50:7B:0D:FE:F3:E5:A9:87:E0:B3:80:F6:90:CF:95:11:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655D644B3074180BA6B680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ca432ea-b1e7-3f11-9fbf-3da42632d895.roa
Signing time:             Wed 23 Jul 2025 23:22:43 +0000
ROA not before:           Wed 23 Jul 2025 23:22:43 +0000
ROA not after:            Tue 21 Oct 2025 23:22:43 +0000
asID:                     7385
IP address blocks:        50.114.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5d:64:4b:30:74:18:0b:a6:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:43 2025 GMT
            Not After : Oct 21 23:22:43 2025 GMT
        Subject: CN=9661acba-72e1-458a-bcba-e041bd572c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:85:92:ad:cc:4e:b5:63:f4:cd:b8:15:fc:
                    6b:98:98:31:a8:d5:42:62:f1:e8:a5:25:aa:e5:01:
                    f5:46:4a:dd:e1:27:66:8c:0e:c1:12:d8:90:fa:07:
                    99:bd:1c:52:fc:b6:1e:eb:15:da:f5:45:ed:25:b2:
                    f1:19:3f:ad:9e:f4:c8:cd:6e:35:72:bf:bc:fc:83:
                    67:1f:19:d1:1e:27:38:47:98:8c:b1:10:0a:db:11:
                    f1:3d:6c:3b:d3:b6:a2:cb:3e:ec:bb:3c:fe:4c:5d:
                    6d:f1:a5:f1:b5:e0:bc:98:53:a0:dc:1b:ef:d3:24:
                    e1:f7:b4:50:30:58:e5:e7:8f:06:78:02:ad:91:03:
                    30:61:eb:60:cf:61:78:59:4a:ea:8a:5c:8c:1b:5f:
                    84:e3:eb:53:ae:69:ea:1e:f6:0e:99:22:c2:e8:71:
                    1e:64:cf:9a:cb:fc:46:c9:da:31:85:38:e6:97:b4:
                    c1:39:e0:c0:be:4f:71:08:de:d4:74:63:be:9a:04:
                    b0:90:2d:4f:4f:79:b1:c3:8b:ca:6e:5f:c8:f6:21:
                    10:6d:c6:47:e1:4d:85:2a:89:92:a6:1b:e5:ab:cd:
                    13:51:9b:14:43:6f:e6:8c:4b:37:dc:42:d9:7a:18:
                    f8:59:22:6e:f2:9f:d6:39:50:d0:64:01:fc:32:dd:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AD:B5:50:7B:0D:FE:F3:E5:A9:87:E0:B3:80:F6:90:CF:95:11:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ca432ea-b1e7-3f11-9fbf-3da42632d895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:56:44:c7:46:d2:4d:3f:f1:02:fe:82:27:70:2a:04:07:
         14:af:87:b3:95:d0:2d:6f:6d:3b:c1:b0:94:1b:c8:b5:e8:02:
         d4:d5:9e:28:9c:05:49:ec:62:6a:ee:ee:3d:14:80:f8:0f:54:
         aa:88:b3:70:30:7b:09:40:07:13:a0:31:68:11:57:d4:c2:1c:
         ec:bd:40:b6:e6:21:52:7c:e7:f5:00:65:55:90:8e:8b:25:da:
         68:53:4b:8f:80:e0:98:c6:38:8d:ad:8c:fe:45:95:49:ff:44:
         45:1e:53:d5:cc:c7:4a:f9:bd:7e:7d:18:55:fa:b9:9f:b1:95:
         c7:1d:ee:48:81:b1:e1:d8:9c:9e:63:3d:cf:e3:a7:e9:13:9b:
         f1:7c:46:99:d1:57:66:a8:a8:df:25:c6:13:cd:6c:aa:fa:43:
         c8:e0:8d:3b:f3:8c:f1:8e:dd:22:91:f1:96:9d:1f:41:22:46:
         2f:99:85:be:95:1b:76:b8:94:5b:87:43:d9:f3:7b:14:07:8a:
         86:2f:98:cf:f0:7d:a3:09:e2:02:66:c9:41:f4:ac:39:44:e7:
         37:ee:57:4d:ef:5b:bb:0c:a7:f4:56:52:d1:e4:36:8c:3b:3f:
         8a:c3:f2:87:27:90:17:ab:8b:9f:5c:2b:d5:10:3f:04:2b:10:
         da:c4:4d:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZV1kSzB0GAumtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMzIzMjI0M1oXDTI1MTAyMTIzMjI0M1owLzEtMCsGA1UEAxMk
OTY2MWFjYmEtNzJlMS00NThhLWJjYmEtZTA0MWJkNTcyYzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfqFkq3MTrVj9M24FfxrmJgxqNVCYvHopSWq
5QH1Rkrd4SdmjA7BEtiQ+geZvRxS/LYe6xXa9UXtJbLxGT+tnvTIzW41cr+8/INn
HxnRHic4R5iMsRAK2xHxPWw707aiyz7suzz+TF1t8aXxteC8mFOg3Bvv0yTh97RQ
MFjl548GeAKtkQMwYetgz2F4WUrqilyMG1+E4+tTrmnqHvYOmSLC6HEeZM+ay/xG
ydoxhTjml7TBOeDAvk9xCN7UdGO+mgSwkC1PT3mxw4vKbl/I9iEQbcZH4U2FKomS
phvlq80TUZsUQ2/mjEs33ELZehj4WSJu8p/WOVDQZAH8Mt224QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCttVB7Df7z5amH4LOA9pDPlRHPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWNhNDMyZWEtYjFlNy0z
ZjExLTlmYmYtM2RhNDI2MzJkODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8bVkTHRtJNP/EC/oIncCoEBxSvh7OV0C1vbTvBsJQbyLXoAtTVniic
BUnsYmru7j0UgPgPVKqIs3AwewlABxOgMWgRV9TCHOy9QLbmIVJ85/UAZVWQjosl
2mhTS4+A4JjGOI2tjP5FlUn/REUeU9XMx0r5vX59GFX6uZ+xlccd7kiBseHYnJ5j
Pc/jp+kTm/F8RpnRV2aoqN8lxhPNbKr6Q8jgjTvzjPGO3SKR8ZadH0EiRi+Zhb6V
G3a4lFuHQ9nzexQHioYvmM/wfaMJ4gJmyUH0rDlE5zfuV03vW7sMp/RWUtHkNow7
P4rD8ocnkBeri59cK9UQPwQrENrETak=
-----END CERTIFICATE-----
Generated at Sat Jul 26 13:08:48 2025 by rpki-client