Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/451654d0-736b-3d51-b9e2-2d54343ededc.roa
File:                     451654d0-736b-3d51-b9e2-2d54343ededc.roa (raw, json)
Hash identifier:          40uNrdJN3kzrFAyf+eHhJoqmT3aDMRSZeQcWjtMVwiw=
Subject key identifier:   93:FE:9D:16:9E:DA:36:4B:89:07:49:73:FB:43:BE:89:22:10:04:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B9872335FDC30D86C11C2A9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/451654d0-736b-3d51-b9e2-2d54343ededc.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     7385
IP address blocks:        50.114.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:33:5f:dc:30:d8:6c:11:c2:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=2e387e43-92d6-40dd-8e9e-1e7e98b03ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:4f:77:37:78:74:6f:bc:97:81:3a:46:bc:
                    7b:70:ec:cd:10:8c:82:fa:3f:03:c7:69:f3:f9:f5:
                    88:31:63:0a:94:a1:ae:cf:0a:e6:ee:c8:52:9e:ad:
                    7c:0f:da:24:65:0a:60:2b:52:54:96:b4:eb:08:7c:
                    c0:e4:32:07:8f:f4:f3:80:86:0d:dc:ac:7c:e9:cb:
                    49:b9:f1:0e:31:cb:4e:4c:51:f4:a8:83:7e:0d:b3:
                    7f:16:b3:88:25:3d:37:35:87:ef:d6:38:78:52:aa:
                    d8:ca:ed:85:4c:fd:f0:4c:c9:12:ec:81:2f:e4:f8:
                    91:98:32:3d:03:e4:b4:f1:5f:0e:c1:08:b7:a0:07:
                    10:b2:e2:92:61:73:7d:29:db:a9:dd:63:78:0f:7c:
                    c8:e0:99:8f:06:6a:36:e2:15:23:07:5e:85:79:9a:
                    df:d1:73:30:10:69:6d:f9:5b:ef:18:78:27:25:3a:
                    4f:a8:15:34:15:f4:12:75:6e:42:d5:00:e3:88:bc:
                    d3:a0:15:20:9a:3c:d8:61:77:f3:0b:b5:ff:39:1d:
                    51:71:3d:8b:1a:b6:cd:f1:3a:17:42:c8:a8:ce:ac:
                    dd:e2:31:6c:ab:bb:40:4d:de:5e:49:5e:4a:81:dc:
                    da:ed:f4:bb:f5:e3:67:ea:7f:0e:35:88:37:bc:85:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:9D:16:9E:DA:36:4B:89:07:49:73:FB:43:BE:89:22:10:04:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/451654d0-736b-3d51-b9e2-2d54343ededc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:82:d4:2d:eb:7a:c0:35:81:47:15:51:bb:5a:06:5a:f4:
         ef:f2:88:77:74:24:f0:e4:d7:27:10:93:45:3a:2c:ca:7c:f1:
         76:7a:c5:9f:d0:79:c4:d4:1b:5c:ec:62:f9:65:42:6b:32:84:
         f1:83:35:c6:40:c1:76:0b:a7:c7:53:c3:92:2c:a5:23:86:da:
         44:c5:cc:ba:b2:65:bb:af:4d:e7:40:8b:22:ae:2b:bd:68:d2:
         f9:f3:98:a3:7a:05:69:29:d0:30:44:86:02:11:0c:bf:d2:ab:
         c6:d6:a1:85:2b:ef:62:f5:9b:75:f4:dd:d3:7f:9d:81:db:61:
         24:ac:3c:df:4b:51:3a:8d:db:e0:53:37:12:d5:9b:da:5e:42:
         44:ed:3d:e7:97:ad:62:bd:d6:0b:01:ab:87:da:b3:bf:2e:b3:
         5e:17:1b:95:ca:da:b6:f4:32:31:78:a7:32:e5:06:1c:48:e3:
         c0:cc:3f:e0:5a:5d:51:8c:e0:80:8e:7c:39:35:70:55:ef:f8:
         51:ac:01:7a:8d:7c:bb:4b:93:06:75:ab:89:94:59:96:0c:22:
         ef:77:09:48:b3:f1:c9:bc:ff:12:e5:20:1a:24:b6:47:3a:36:
         eb:6e:45:76:99:10:90:c1:0e:19:da:63:0d:28:73:fd:7e:aa:
         8b:05:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:46:54 2025 by rpki-client