Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24315e7b-e50a-356c-bb3e-aed05a676bcf.roa
File:                     24315e7b-e50a-356c-bb3e-aed05a676bcf.roa (raw, json)
Hash identifier:          ePtKI3i3P0T+zfX56JAP0BJrugHg+AxX1VBdPdb8BLo=
Subject key identifier:   BF:1E:BF:30:6E:48:EF:CD:08:38:48:26:26:BA:91:DA:7A:7A:A4:B6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849E8CE5F1EFC2F31AD2A512040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24315e7b-e50a-356c-bb3e-aed05a676bcf.roa
Signing time:             Mon 19 May 2025 22:17:10 +0000
ROA not before:           Mon 19 May 2025 22:17:10 +0000
ROA not after:            Sun 17 Aug 2025 22:17:10 +0000
asID:                     401152
IP address blocks:        50.114.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e8:ce:5f:1e:fc:2f:31:ad:2a:51:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 19 22:17:10 2025 GMT
            Not After : Aug 17 22:17:10 2025 GMT
        Subject: CN=793290ea-4ca8-4321-a3f0-71a5fa92e1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:b5:68:54:30:0e:6b:9c:af:e6:27:51:57:
                    ba:a2:77:93:e2:3b:8a:90:fc:fe:ca:f8:74:44:67:
                    30:af:f1:44:20:5b:05:77:76:6f:cc:c1:17:94:b4:
                    6c:43:11:6c:e9:a0:03:d5:3c:b6:80:f3:e7:05:9e:
                    ad:b7:bc:7a:99:ee:30:62:47:23:0d:fe:6f:0d:6e:
                    02:69:80:5f:f1:85:a6:53:b2:1b:ba:a1:fa:e8:68:
                    e9:e0:22:7f:97:c0:99:76:f6:61:1c:aa:f7:54:60:
                    9d:52:4a:27:c2:1a:94:d4:35:e4:22:a6:c4:22:c8:
                    89:4e:af:62:ac:de:e0:b0:ba:21:95:18:b2:a3:82:
                    69:b0:ac:5a:e9:1b:8a:98:bf:3f:66:a6:ac:ef:b7:
                    b3:fd:08:2d:c4:89:84:ea:c9:f2:a2:6e:92:6d:42:
                    11:d8:f4:e6:da:25:19:70:65:0d:ae:56:a3:88:b7:
                    89:91:28:38:c4:fb:7b:33:1f:5e:97:af:01:8b:98:
                    c3:d9:60:0f:20:cf:b2:97:d3:e1:f7:71:74:70:99:
                    b8:5b:05:e4:1a:55:47:08:98:1c:2c:2f:a0:38:20:
                    c4:01:42:ae:27:17:5a:3f:40:aa:ea:33:04:68:c1:
                    82:e9:f9:f2:cc:2a:f7:7a:7c:96:8f:af:4f:12:93:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1E:BF:30:6E:48:EF:CD:08:38:48:26:26:BA:91:DA:7A:7A:A4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24315e7b-e50a-356c-bb3e-aed05a676bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:a7:5b:c9:ba:9e:64:9f:4f:4a:d4:53:21:56:4d:53:0d:
         1e:92:82:a4:a2:25:08:74:de:19:81:ca:de:b1:2a:81:e4:06:
         6d:17:7d:15:c9:5e:18:c1:f4:41:f5:d3:4a:ce:6c:e5:db:47:
         73:86:25:27:4a:06:36:64:84:09:0a:50:e9:5a:43:fe:ac:a0:
         64:66:0b:37:fa:2c:fc:e8:2f:e7:35:85:e5:26:be:b4:50:8e:
         53:cf:31:c2:12:63:8f:77:3f:43:43:8a:0c:69:b8:d8:ba:62:
         31:d7:95:32:5f:05:d6:21:09:77:a6:59:d5:cf:8d:2b:a0:98:
         85:18:b5:ed:64:f3:84:ca:2b:35:15:be:b0:03:28:01:59:1c:
         98:3c:e7:c9:5d:48:c1:ad:23:2e:8c:0a:8e:88:9f:2b:2d:34:
         cb:84:fd:22:3a:1a:35:97:f1:13:7d:c0:e3:63:7e:dd:bf:30:
         0e:cf:a9:9f:c8:c8:15:da:a1:fc:73:07:f9:97:31:4e:77:e2:
         e9:41:05:88:3e:e9:2a:de:29:aa:62:a6:14:96:5a:72:4b:fa:
         21:c8:a8:9a:fa:fa:32:8a:0f:1b:bb:01:e8:b3:17:f9:f5:9c:
         81:fc:d3:4d:3e:c0:3b:b9:da:8e:bf:3f:70:6d:f0:47:d4:78:
         09:ea:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:54:21 2025 by rpki-client