Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa
File:                     13849bfb-4110-3f69-b698-42afc94a2962.roa (raw, json)
Hash identifier:          Tm4rXJTQatuQRtyxzzo5MMzPDkIYifw3t4cqxsXay1U=
Subject key identifier:   4F:34:0B:C0:DB:1E:33:DF:EE:5D:26:46:DD:25:83:94:A6:9E:2F:0B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584921840F9D85DB98DD5B9FAAA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     211373
IP address blocks:        50.114.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0f:9d:85:db:98:dd:5b:9f:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=f1854a44-3b6e-4154-861c-81ab623f7f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:b2:b2:93:5a:23:bf:6d:92:eb:94:7d:98:
                    e9:b1:85:bc:c3:9b:b8:bd:88:64:73:11:e3:34:47:
                    9b:6f:87:da:29:04:25:9f:b7:a1:9d:a5:98:8c:57:
                    f1:7e:76:ac:72:5a:b2:a2:e6:0d:87:64:28:dc:fb:
                    b3:85:6c:4c:84:17:dc:ca:5f:bf:bf:11:bb:71:7e:
                    ca:73:3d:e7:d7:4b:80:de:dd:2f:b2:6e:d4:4f:8b:
                    62:22:bb:07:34:83:2a:8c:d4:3c:01:43:9e:2c:14:
                    33:c4:d7:51:42:90:59:3c:de:02:5b:a6:a4:19:58:
                    a8:75:7f:c4:5f:7d:6a:58:e1:6a:f8:be:60:3b:69:
                    91:4d:da:1d:08:5d:63:2e:a7:92:2e:1e:5c:3e:4d:
                    53:79:1a:41:ef:87:62:52:06:0f:a4:d6:03:74:bd:
                    51:91:6e:b5:4d:8e:70:cf:5a:1c:56:7c:97:be:16:
                    3f:39:5c:32:63:85:37:5e:d2:30:4f:7a:93:e6:3f:
                    7a:36:a1:1c:f0:d2:35:d4:72:a6:53:1a:ef:e6:7c:
                    24:29:14:97:c0:97:4d:96:59:37:f9:b8:fc:29:84:
                    44:77:67:7f:8c:d9:c3:0c:df:a5:e1:de:78:2e:01:
                    6c:6c:bd:75:08:31:aa:f7:9b:03:c0:2f:63:02:56:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:0B:C0:DB:1E:33:DF:EE:5D:26:46:DD:25:83:94:A6:9E:2F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:23:b3:f4:e6:7e:32:05:00:d9:04:0c:a5:0f:43:34:27:87:
         4f:6e:e7:8e:bd:95:11:a5:5e:54:09:48:ae:81:00:91:04:02:
         32:1d:50:2a:44:0d:1f:c1:ee:15:11:b0:d2:04:1f:14:98:82:
         66:73:02:05:f1:fa:b0:a6:c4:cb:27:fe:51:06:7b:e7:e8:55:
         87:04:b7:e8:54:4c:e0:90:10:d2:10:86:40:2e:da:1c:fd:d4:
         49:11:b7:ba:03:93:d3:86:ef:cd:59:37:7b:63:1a:c0:e4:bd:
         2f:1c:45:ce:51:e5:36:83:34:bc:f5:dc:06:31:fe:3e:8e:2b:
         85:89:44:26:a8:27:e6:49:5a:68:8f:f5:4c:8d:82:a4:60:0a:
         14:6a:ef:40:8a:b0:9d:7c:4b:d8:f2:fa:d6:3f:4f:9b:bb:ac:
         d4:0a:28:6e:e9:b6:5e:9a:cb:dd:ea:0a:99:50:a4:e4:35:cd:
         92:db:86:c5:63:37:d8:ee:8f:40:ef:90:fe:49:b4:71:a7:5b:
         c4:94:04:9e:39:03:b7:43:5b:61:cc:55:44:ff:c8:80:4e:f5:
         b3:da:0b:6b:76:a8:cf:14:a6:f8:91:9d:ad:c4:a7:67:7c:1a:
         6b:db:57:4d:15:9f:cd:96:1b:8d:9a:74:ae:86:2d:83:23:88:
         80:3b:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:59 2025 by rpki-client