Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/496cd6f3-4d87-356a-8d95-3dd1956ea142.roa
File:                     496cd6f3-4d87-356a-8d95-3dd1956ea142.roa (raw, json)
Hash identifier:          SBfXdiamr5liT62aHAFX8HKifFEViYClTNxrRA1FUDI=
Subject key identifier:   7F:2D:05:25:3C:F0:A3:6C:7E:9A:8F:B4:8B:59:7F:38:AC:5A:A5:70
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB4976AC83ED46B7E171600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/496cd6f3-4d87-356a-8d95-3dd1956ea142.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        50.114.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:6a:c8:3e:d4:6b:7e:17:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=f648c895-6b71-490c-9afd-0daffd27d689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:34:ef:66:1b:5d:28:4f:7b:d7:8e:09:85:
                    f8:b7:9b:ad:43:97:9f:86:a2:11:96:cd:e1:6e:42:
                    75:94:b5:7f:7b:5d:4d:22:fd:4b:7c:a0:a7:86:ae:
                    8f:25:64:53:2a:b6:25:16:f9:03:5b:83:21:ee:11:
                    e4:2d:41:9e:0c:b2:40:a6:97:2d:ae:59:7f:02:9a:
                    38:8b:78:5d:d4:22:39:6d:a7:f7:0c:45:b7:2b:0e:
                    ce:40:5f:48:6e:0d:45:a1:30:35:af:7a:c4:22:46:
                    7c:04:4c:12:ee:9d:fc:1d:91:c6:31:97:09:52:aa:
                    1d:b3:2a:df:6e:e7:cf:5e:1a:95:98:dd:75:d2:b3:
                    04:47:d0:07:39:ea:ad:af:ba:69:15:f8:4f:a0:63:
                    9d:96:d1:ed:ce:a0:97:3a:bd:d3:d3:d4:dc:ba:4f:
                    a5:5c:05:e3:2d:d6:8d:00:3c:3d:7b:23:81:f0:16:
                    c1:8c:84:a8:6d:53:6d:5e:23:73:37:6b:d2:59:3c:
                    be:ca:fe:4e:e0:5f:b7:d7:24:2d:3c:a9:fa:91:cf:
                    74:97:a3:73:d8:82:ad:c2:d4:ef:64:95:a4:12:e7:
                    ec:ab:5d:dc:21:08:e4:c7:62:78:65:a6:ce:1d:82:
                    9e:b6:2e:50:68:12:b0:f8:03:0d:52:41:8e:13:03:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:05:25:3C:F0:A3:6C:7E:9A:8F:B4:8B:59:7F:38:AC:5A:A5:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/496cd6f3-4d87-356a-8d95-3dd1956ea142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:91:1d:51:a6:83:55:a4:d2:8a:d7:94:60:f4:5a:1a:78:
         8d:40:63:4f:df:da:ff:3c:95:bc:67:31:b5:a1:bd:5e:6b:3a:
         aa:1b:34:bd:8f:bf:9b:76:7b:06:6b:f0:dc:5a:6b:35:71:47:
         e2:35:77:e3:13:49:f1:76:d8:1d:03:7a:5d:d6:c5:2d:5b:48:
         e2:23:05:01:ea:a6:b0:1c:16:fa:4b:7a:ed:f7:96:1a:62:b0:
         44:79:fb:cf:79:68:ad:86:a5:ae:d1:b2:98:da:fa:55:93:5d:
         13:a6:5a:f2:16:c6:5c:86:64:57:07:1e:b2:c4:20:4a:a9:fa:
         0c:da:6d:70:98:1e:12:60:b3:9a:0a:1c:44:e2:7f:0b:7c:b7:
         7e:da:43:49:97:b8:1d:4b:1a:b4:92:41:b7:a5:0c:ee:b4:57:
         da:eb:9e:0f:cc:c8:42:ef:24:fe:a3:41:58:e6:79:d8:4b:a6:
         f8:06:fa:79:16:3c:91:8d:c3:86:e4:3e:42:0a:3d:22:d3:53:
         c5:af:cb:50:e8:42:d1:ea:73:d5:66:dd:4a:97:75:d7:62:11:
         a1:ce:b0:1c:af:96:83:fd:5e:51:e1:d7:63:24:c7:f1:37:0e:
         0b:d1:ad:4a:47:df:39:c6:0e:b9:1d:66:d9:a8:0b:db:c4:76:
         dc:ca:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:11:59 2025 by rpki-client