Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da88a8d2-df41-3679-abc5-646ca59e8ea2.roa
File:                     da88a8d2-df41-3679-abc5-646ca59e8ea2.roa (raw, json)
Hash identifier:          LDMIzvMkpPi9AWjHMFJLaFE1xaAS8o1ttur2Kr7SzVs=
Subject key identifier:   62:46:AC:14:2D:F0:44:3A:0F:3E:EE:52:4A:88:46:B7:E1:FD:B8:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8B8B93F78709434836300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da88a8d2-df41-3679-abc5-646ca59e8ea2.roa
Signing time:             Tue 15 Jul 2025 20:27:05 +0000
ROA not before:           Tue 15 Jul 2025 20:27:05 +0000
ROA not after:            Mon 13 Oct 2025 20:27:05 +0000
asID:                     44559
IP address blocks:        50.114.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:b8:b9:3f:78:70:94:34:83:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:05 2025 GMT
            Not After : Oct 13 20:27:05 2025 GMT
        Subject: CN=d4fc7607-fbf0-4185-8d48-865dced8734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:43:e6:67:b1:57:7c:10:93:0c:d9:a6:0c:
                    2a:33:5b:8b:e1:90:0a:65:7e:e0:11:c1:72:3d:da:
                    f2:d9:a1:5d:b4:d5:d2:6d:a6:54:d5:9e:36:d0:a6:
                    bc:eb:8b:87:f5:6c:a8:ce:81:9e:93:52:70:99:f0:
                    7a:fd:45:65:76:d4:23:e5:ef:65:29:cb:e6:af:0d:
                    f9:50:35:ad:9b:b4:5c:1b:aa:7f:fa:35:a7:c5:06:
                    92:a6:c9:c2:9c:bc:bb:b5:7a:1b:15:41:06:e6:54:
                    f6:f5:54:71:18:44:a1:74:62:ae:17:ce:71:a5:fb:
                    82:30:ba:4e:7e:87:c0:35:3b:5f:ae:f0:1c:b7:d9:
                    64:87:8c:6a:ce:a1:d8:86:fc:73:d8:50:8e:52:33:
                    3b:fe:e1:a3:ec:ae:35:91:6b:74:30:b6:17:0d:2a:
                    a2:26:07:9c:42:9a:a4:78:1d:38:68:11:76:ab:4d:
                    3c:3c:9f:17:e7:41:54:ad:65:da:52:df:94:6f:31:
                    05:56:9c:aa:ce:ce:d3:d9:73:f6:1e:5e:12:91:ed:
                    44:86:f9:e1:22:02:94:59:e0:f3:a9:1d:20:11:d8:
                    da:95:72:8c:40:c4:0e:71:43:83:ab:14:da:b6:2a:
                    36:8b:c9:b7:c2:93:cc:6c:98:62:e5:82:6d:5a:f0:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:AC:14:2D:F0:44:3A:0F:3E:EE:52:4A:88:46:B7:E1:FD:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da88a8d2-df41-3679-abc5-646ca59e8ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:82:c6:61:83:11:52:95:19:53:d0:b8:78:de:cd:d3:6d:e3:
         da:05:0d:49:ab:6e:f6:54:0a:90:d8:ee:30:4f:f5:f2:00:d9:
         32:fa:db:c7:1e:58:4b:c9:67:cd:6d:e1:71:ce:29:e8:e8:15:
         03:fd:2d:0b:4d:6f:52:2f:35:90:a9:ce:38:0e:2e:31:0f:70:
         62:45:27:da:6d:f8:c8:8e:15:04:47:6f:db:20:ab:e3:d3:9b:
         14:63:f7:ec:13:a1:b5:d6:43:6f:ed:07:3c:f9:06:a5:14:33:
         a4:a2:6e:81:0f:60:2d:ff:d4:cd:5c:91:2c:c4:36:2c:4a:b8:
         d3:a0:c1:a4:5b:58:b7:56:7d:d4:a7:b1:0e:7d:2e:05:bf:53:
         a9:4a:06:8b:60:7f:1b:d7:e7:74:9f:25:89:db:12:fd:a9:b3:
         93:7f:5d:3e:f8:d5:35:f7:d8:2a:56:87:6e:da:50:2f:91:f6:
         de:a9:a6:36:2c:b4:7c:4b:e7:33:97:13:47:f5:0e:ca:97:f9:
         09:2a:4f:06:9d:eb:99:35:e5:49:dd:d5:09:b1:0d:62:71:c0:
         02:a4:ae:28:3d:02:0b:85:e9:09:de:9d:03:e8:09:17:8a:94:
         d8:dc:78:38:60:05:e1:13:40:f9:aa:e8:fa:62:ef:0f:c8:3c:
         40:97:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:09 2025 by rpki-client