Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab4c9ce-a1e8-3906-b104-e1c6653b416c.roa
File:                     1ab4c9ce-a1e8-3906-b104-e1c6653b416c.roa (raw, json)
Hash identifier:          yLPapYAdaRp9rypWaTSRh3gEMNtfQzSm7yZHhgvKgj4=
Subject key identifier:   E8:B6:F9:A4:46:9B:54:2B:63:47:B9:46:DE:79:37:16:FE:C8:34:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F3911A8C361221B645292980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab4c9ce-a1e8-3906-b104-e1c6653b416c.roa
Signing time:             Fri 21 Feb 2025 02:00:39 +0000
ROA not before:           Fri 21 Feb 2025 02:00:39 +0000
ROA not after:            Thu 22 May 2025 01:00:39 +0000
asID:                     401152
IP address blocks:        50.114.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:91:1a:8c:36:12:21:b6:45:29:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 02:00:39 2025 GMT
            Not After : May 22 01:00:39 2025 GMT
        Subject: CN=fdcbc27d-6fae-4513-8e61-17cc575bcb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:c2:c7:fd:31:57:2f:1d:69:89:71:b9:b3:
                    dd:fa:21:3e:22:df:79:e9:3b:bf:79:f1:5a:ac:f1:
                    93:c4:b0:d4:31:02:88:92:04:2f:0e:bc:bb:e1:19:
                    e8:9d:3b:c6:8f:31:60:d0:4c:9d:15:10:85:10:0d:
                    92:4a:be:17:a6:b4:7a:77:10:d8:20:91:5d:00:36:
                    a3:a2:19:65:b7:b7:4e:7f:20:f7:4d:e7:e4:e6:03:
                    b8:d4:21:58:50:ec:7a:8e:48:a9:9d:36:4a:02:25:
                    86:8d:2b:fd:fd:ec:b8:ac:da:21:28:b4:fd:53:cd:
                    32:23:c6:ac:4d:21:d7:36:c2:3b:d7:17:f9:81:38:
                    0c:a5:43:8f:b1:cf:c5:98:0e:0f:35:88:7d:ae:7b:
                    ae:4a:40:df:8a:80:cd:94:ea:54:43:db:cd:6d:1a:
                    d8:a1:1d:aa:39:a0:44:2c:37:6d:8b:c6:86:95:db:
                    75:f8:08:59:fc:a9:d9:e4:46:e6:14:a2:b5:6b:85:
                    e9:77:48:bc:87:fc:41:ae:18:42:a4:01:82:35:12:
                    7f:6f:b9:2b:0c:6f:86:f3:ed:83:cb:2e:d1:f4:83:
                    50:97:62:8d:f7:5c:4c:74:df:02:15:da:62:4f:b9:
                    b4:19:f5:d0:54:4b:13:77:dc:fb:fb:10:31:8c:f9:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:F9:A4:46:9B:54:2B:63:47:B9:46:DE:79:37:16:FE:C8:34:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab4c9ce-a1e8-3906-b104-e1c6653b416c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:63:62:fc:cc:66:81:0f:ad:26:50:e6:64:b9:72:ba:bb:
         b5:3a:fb:50:00:32:f3:b7:15:d1:f8:53:5c:23:c7:1d:a2:b7:
         80:18:93:19:3c:19:e5:cd:bb:d2:e1:78:e4:0d:28:43:f2:17:
         89:71:31:9a:f9:df:44:96:dd:31:f5:5b:b7:2e:c0:cd:1d:16:
         2f:cd:1c:b6:13:4d:3a:0f:cf:e9:3b:e5:b0:3a:4f:e2:1f:02:
         d0:96:50:3a:e9:f0:b7:be:0d:e9:61:1a:de:0b:af:7c:f9:35:
         10:97:61:0a:d5:c0:a5:11:0a:91:77:07:d5:1c:50:d1:56:55:
         0c:4c:b0:b4:2a:62:31:10:a8:e1:23:db:f5:b5:45:34:7f:36:
         e7:83:e6:79:9d:58:bc:cf:ce:f2:b8:83:3d:dc:4e:7a:9c:81:
         78:9d:b4:04:c9:c0:5b:7d:d0:18:5a:2c:c8:38:b1:a8:0b:a8:
         97:6d:2e:2b:ca:bb:b5:8f:8c:34:a8:d2:af:5f:25:2d:f3:a5:
         99:d5:00:c3:67:6e:45:07:ec:5e:84:6c:a3:37:94:a5:6e:ea:
         c6:4d:93:08:b0:e3:46:23:40:0b:34:ab:1c:03:09:7b:5c:f3:
         df:7b:d2:a5:34:74:19:a6:38:7e:93:a7:a0:ed:a2:ec:e4:72:
         8a:78:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:10 2025 by rpki-client