Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa
File:                     21e46425-c59c-3409-b31a-36048098fbfd.roa (raw, json)
Hash identifier:          44jSlFcc5CyRVeY1EaLhLlzeTPYUSMuvzN0EMqtg09w=
Subject key identifier:   1D:BC:8F:82:21:D3:E6:25:62:D8:95:82:2D:C1:49:BD:93:DB:23:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B4AAE92E80991F8B554BCAB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa
Signing time:             Tue 23 Sep 2025 16:29:16 +0000
ROA not before:           Tue 23 Sep 2025 16:29:16 +0000
ROA not after:            Mon 22 Dec 2025 17:29:16 +0000
asID:                     395839
IP address blocks:        50.114.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:ae:92:e8:09:91:f8:b5:54:bc:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 23 16:29:16 2025 GMT
            Not After : Dec 22 17:29:16 2025 GMT
        Subject: CN=9a50728b-6a91-4f00-bd12-673e0bb1026b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:9b:46:d7:35:6e:7e:c8:f5:49:d7:8d:3f:
                    b0:71:56:c3:33:27:59:5e:f1:2f:d9:5b:c5:6d:56:
                    7c:c1:ac:07:73:5e:f3:37:ff:a5:ef:6f:de:de:53:
                    10:28:99:42:f6:b8:e1:a7:5b:b5:32:fe:91:80:09:
                    3c:a5:96:c2:a0:bf:63:99:a0:6c:38:86:e0:e3:f6:
                    3d:98:6a:13:e2:95:13:28:f3:4f:95:17:27:69:91:
                    96:1c:9a:75:8f:2d:45:da:c7:d4:19:1c:79:ec:2d:
                    cc:66:39:3f:d9:e7:83:e2:9c:6d:ee:99:8d:41:27:
                    0d:3c:14:58:48:11:3b:65:e0:45:2a:ca:29:ad:42:
                    66:bb:6c:f4:71:15:bf:63:32:59:bc:2c:51:d9:25:
                    bc:14:bf:05:ed:91:ce:8b:24:08:aa:2a:58:3e:6f:
                    2c:b3:6c:a1:76:24:19:a7:76:71:0b:bb:fd:b5:6c:
                    25:ca:2c:d9:60:a0:2f:02:f7:95:97:97:d1:ea:98:
                    88:18:39:06:af:30:33:7b:1f:dd:4c:74:3e:31:49:
                    d9:26:63:e3:d3:0b:30:e0:68:04:38:62:75:c5:82:
                    e1:11:00:bb:2f:f9:20:00:cd:16:b4:b7:e4:e4:87:
                    b6:2f:79:fb:67:e4:cb:8e:c1:c0:85:26:34:34:7b:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:8F:82:21:D3:E6:25:62:D8:95:82:2D:C1:49:BD:93:DB:23:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21e46425-c59c-3409-b31a-36048098fbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:1a:0c:b5:dd:fe:81:b0:41:ec:df:a7:10:0c:d9:31:b9:
         5e:59:3f:38:ae:76:3b:c9:46:d3:25:13:8f:0e:23:d9:ce:e5:
         ec:42:c2:6e:9d:d8:d0:ef:f9:d6:61:1f:78:11:82:9b:79:ec:
         5e:3a:91:d3:a2:40:21:a0:dd:07:e5:bb:20:fc:fa:10:49:84:
         96:95:e6:2d:09:a6:76:ea:3b:7c:0f:69:bd:fc:fc:b4:c9:1a:
         c0:ea:aa:88:69:d7:cb:b9:59:08:40:f2:d0:d5:1e:e0:1e:d7:
         d7:39:2d:c1:78:74:98:7a:d6:23:36:92:6f:71:2d:98:1c:db:
         8b:ce:82:2c:49:fc:a0:aa:57:d0:10:9e:58:84:95:79:b7:b3:
         c0:d4:bf:6b:c1:d2:ec:c5:85:45:1e:e8:70:38:36:66:fb:3a:
         d8:17:ef:58:37:ae:0d:dd:26:7c:7d:da:3b:d8:b8:80:fd:d6:
         cb:dc:8e:e7:0b:f1:ff:f3:6a:55:21:1d:30:cb:de:f0:bb:e4:
         77:54:04:a6:ad:2a:36:f5:f2:07:e3:9d:a7:0e:aa:df:e7:e0:
         81:e2:33:20:85:bd:7d:03:c9:af:a1:5d:17:b4:c0:ca:b6:58:
         f6:a0:5f:41:dd:7e:70:be:fd:ba:0f:0b:63:eb:fe:b3:f6:d6:
         43:1f:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:36:57 2025 by rpki-client