Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
File:                     081fbf4c-8605-3e5f-8491-88cc243610ad.roa (raw, json)
Hash identifier:          d/IujVNMgNAAcv6pwojZMCuLS7iFZHRJl7n+0wra+PU=
Subject key identifier:   08:AA:28:19:C8:EF:B7:14:41:B9:4D:9B:3E:D8:B8:45:7E:5D:DC:A2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654ED4F638762DBBBC85C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        50.114.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4e:d4:f6:38:76:2d:bb:bc:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b45e5411-666e-4e19-baee-c5d27c2da627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:b5:25:a3:87:30:f3:69:40:01:38:d8:e1:
                    b7:42:78:85:8c:9a:81:b2:dc:8a:c3:e5:4e:47:a9:
                    16:1c:cd:98:06:21:32:2e:2c:9d:30:32:76:4a:13:
                    24:f7:7b:56:0d:a7:de:15:ee:e1:6e:33:57:34:42:
                    19:f1:f2:c9:84:30:db:5f:c3:74:6f:fd:65:05:88:
                    e2:0e:92:c2:6b:7d:76:3f:99:3c:37:10:49:06:09:
                    45:6c:39:74:a0:ef:4e:54:5c:35:7d:b9:08:12:1e:
                    6b:4b:42:e0:79:a1:01:72:2e:b9:5c:9e:56:bb:b0:
                    5c:2c:49:61:19:70:63:03:43:d0:b5:ac:90:47:d5:
                    41:f6:25:b6:e1:6e:bd:6c:83:9b:ee:3a:9b:e0:d5:
                    ae:1c:d3:9e:d3:2f:1e:ac:bd:df:6a:89:8d:f2:ff:
                    88:24:f9:cb:66:a2:97:53:22:8e:15:5a:59:bf:c5:
                    50:f7:fb:c3:09:39:0d:0d:5b:6e:ee:90:21:a6:c7:
                    7e:1f:03:19:da:1f:88:7c:53:53:25:b6:43:1b:74:
                    61:35:06:76:4b:7d:79:ac:cd:fb:7f:ff:52:29:c9:
                    c3:aa:a6:6e:cf:ab:41:50:d4:87:19:6c:68:10:b3:
                    42:04:c0:92:03:c1:41:99:42:75:01:a8:88:9d:0c:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AA:28:19:C8:EF:B7:14:41:B9:4D:9B:3E:D8:B8:45:7E:5D:DC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:76:b9:63:27:34:bb:d3:21:ce:b8:cf:8b:ff:3f:42:b9:
         b3:e0:70:90:78:75:5a:c0:1a:65:6d:ad:e5:3b:19:50:5e:c2:
         24:ff:22:22:88:19:bc:70:79:3c:06:ec:9b:f3:a9:64:15:68:
         73:2d:80:3d:47:bc:20:78:b5:98:16:92:4c:e4:fe:df:65:9d:
         41:3a:e3:1c:bb:88:b8:a3:bc:6e:18:77:a2:ae:c4:2a:22:a9:
         a4:40:2b:5b:77:40:3f:5b:7f:c4:f3:a3:3a:8a:08:06:42:97:
         8b:a7:ce:4b:76:81:42:7e:56:58:98:1d:72:46:7b:b6:ab:b8:
         76:67:b5:95:61:12:70:88:2c:4a:90:27:b3:f9:6e:90:1c:97:
         5b:e4:0f:65:bd:2f:26:c3:1a:5c:0d:6f:ff:69:c2:46:2c:2a:
         9d:06:35:1f:0b:b5:2e:29:16:d1:99:e3:d6:51:15:dd:1e:2c:
         6c:52:04:03:ce:e4:77:c2:84:b8:2e:2a:e5:3d:00:08:c4:f4:
         c5:9c:c3:3c:27:24:70:90:51:60:31:e6:75:0f:bc:26:11:62:
         e5:12:f8:db:dd:93:ec:39:71:6d:76:a7:7b:3c:d6:f7:b2:ea:
         e2:ea:05:90:27:a6:0f:bf:16:24:6c:cc:36:71:87:dc:ea:c5:
         a4:a3:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:38 2025 by rpki-client