Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
File:                     2830c347-bd28-363c-b7d5-871d2fd6aec6.roa (raw, json)
Hash identifier:          +p60z8VmDIHYYlLAki+CEvVLHVK59wmIeRcflALPTIE=
Subject key identifier:   C9:3F:DA:51:F1:A3:15:DD:92:4B:62:A4:D4:31:45:8E:27:24:E0:8B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B583C867AC7817EBDF5FCD000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        50.114.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:86:7a:c7:81:7e:bd:f5:fc:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=19e3d740-df6a-4f99-ae55-f6a234276096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:e9:b2:f2:98:83:47:22:05:4d:5b:7f:7b:
                    e3:9f:2d:0f:86:4e:b2:9e:56:81:ac:d2:00:ce:88:
                    3e:bc:b2:d8:0c:a2:80:53:c5:46:e9:6a:f9:08:9f:
                    d6:a5:d6:67:05:0a:b8:d4:00:96:3b:39:7b:74:a4:
                    81:6d:55:2e:25:03:77:73:22:b8:4a:05:1e:58:09:
                    16:8a:d3:30:40:57:0c:01:91:76:8d:3e:30:24:27:
                    82:c2:b9:5d:c7:a4:54:1d:b1:57:2f:25:de:1a:07:
                    f6:62:c8:5b:37:f0:11:39:e6:d1:5d:ef:83:d3:a6:
                    0a:54:b5:34:00:7d:51:ed:46:35:a5:79:1a:ec:ef:
                    34:6a:ca:bd:84:ca:82:e1:41:6d:05:8d:e8:58:40:
                    10:76:69:4f:22:bd:1a:48:9f:24:99:63:d9:13:77:
                    51:fa:da:f7:c4:e7:ab:63:55:3b:d8:e7:cf:d8:21:
                    3f:74:26:40:5e:cf:46:96:59:89:b0:a2:f3:a8:9e:
                    bf:49:f7:e4:01:56:dd:ce:28:52:66:1f:3b:84:37:
                    e6:74:66:9b:56:93:a4:30:7b:1e:25:6d:1c:ef:dc:
                    ca:f6:9a:17:a1:d8:8b:0b:73:1b:50:5c:b0:ce:4d:
                    c4:b1:e3:e5:92:dd:1e:d8:51:3b:46:e2:08:ad:69:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:DA:51:F1:A3:15:DD:92:4B:62:A4:D4:31:45:8E:27:24:E0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:aa:f5:cb:5c:89:f7:01:bf:bf:09:95:84:93:7e:4d:6e:
         7e:5c:7f:29:88:6e:7a:1a:2f:1f:3c:77:64:11:0c:a9:24:4d:
         43:eb:a5:2a:13:7e:25:2f:a6:9c:6c:69:0f:ed:04:27:e0:c6:
         48:c5:d3:c9:9c:74:6b:7c:c0:b5:9b:69:14:dc:f4:e3:59:06:
         15:d5:02:67:2c:e2:6a:8e:ff:85:04:ab:de:ea:29:2b:ab:5b:
         db:98:af:1e:63:cd:80:ce:0c:47:2e:d6:09:f1:4f:96:23:46:
         a3:fd:4a:41:2c:5e:e9:23:02:b2:ba:9e:4d:16:38:9c:78:a7:
         ba:60:38:73:dd:5d:12:2b:69:41:8b:15:f3:2e:d3:44:4e:5f:
         ad:ec:56:83:8c:dc:8d:65:ae:44:f0:7f:f0:41:e8:25:11:23:
         dd:c0:55:0c:e3:55:4b:39:9c:83:71:c9:47:12:63:28:f5:c0:
         66:58:11:dc:11:68:1b:a7:2c:0a:84:ff:5a:e0:a1:d2:fd:6e:
         93:92:d5:72:fd:e8:68:39:1b:e6:71:8d:e7:b1:59:34:42:99:
         c3:a7:09:9c:20:3f:ec:a3:09:d5:49:da:36:41:2a:3f:78:bc:
         52:4f:e5:fb:0a:5d:d6:3e:d3:34:d5:fc:7c:83:d0:8d:e0:84:
         95:92:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:11:24 2025 by rpki-client